Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: lxLlNv87KMHCDLhl4Zv5/v6SHmnyuCs2t+MQ8pjVG28=
Subject key identifier: E5:7C:15:B4:F3:90:72:EE:D4:0F:1D:63:5A:2D:2E:D6:BB:58:1C:FF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5FB546584015CC91C2308F011619792A9706BEC1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215304.roa
Signing time: Mon 05 May 2025 17:08:26 +0000
ROA not before: Mon 05 May 2025 17:03:26 +0000
ROA not after: Mon 04 May 2026 17:08:26 +0000
asID: 215304
IP address blocks: 179.61.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b5:46:58:40:15:cc:91:c2:30:8f:01:16:19:79:2a:97:06:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 5 17:03:26 2025 GMT
Not After : May 4 17:08:26 2026 GMT
Subject: CN=E57C15B4F39072EED40F1D635A2D2ED6BB581CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:05:8d:d6:3d:66:f4:ab:58:14:85:da:ee:
a8:3f:25:c9:21:a2:d0:93:ef:78:68:7e:15:13:55:
d9:5c:17:66:87:5d:0f:6e:1f:21:20:7c:9b:3c:70:
46:10:f9:ea:86:61:d3:51:b3:83:14:05:e3:72:6c:
41:7b:b8:8a:f2:3a:5e:6e:a1:94:9b:67:68:64:f9:
ae:d9:9e:21:b2:22:54:ca:1f:3a:ce:ff:d3:bf:fd:
37:6f:2f:24:40:81:ef:ac:90:78:3d:a8:68:e7:75:
1c:2f:2c:98:bf:55:95:e5:99:f9:4e:d9:8f:1f:e5:
d4:01:00:a7:06:56:d3:01:0c:c0:53:ee:fc:f4:b2:
e2:e1:62:c6:7e:76:ca:0a:f9:f1:82:49:3f:3b:df:
26:78:06:5e:af:8b:f8:a9:d3:e9:92:9b:07:74:38:
e7:3c:29:7e:16:78:b2:9b:8f:d3:e3:f1:76:41:e6:
2f:9e:87:06:bf:3d:6a:bd:14:45:87:c7:7e:68:ac:
62:93:66:42:3e:d8:f3:c8:3b:de:7f:70:27:31:15:
15:68:db:d9:bb:b4:be:58:48:2f:a7:9c:fe:62:e9:
39:23:2c:d3:a0:d4:37:95:70:08:8f:85:dc:a2:76:
86:ea:62:9f:f6:26:34:c8:96:dc:ed:34:27:ce:d9:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:15:B4:F3:90:72:EE:D4:0F:1D:63:5A:2D:2E:D6:BB:58:1C:FF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.185.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c2:2b:1d:d4:84:f5:a2:a3:ca:4c:13:08:8e:84:bc:73:52:
16:2a:ef:a1:64:6a:4a:29:89:4a:2f:83:41:de:41:85:50:03:
fd:df:bd:f7:bb:9e:63:b3:87:6f:9a:45:0f:f1:26:50:e4:ad:
5d:55:e4:e7:64:09:66:02:39:24:4e:21:e2:31:a5:81:86:f8:
d1:06:f7:1e:55:fe:96:cb:c0:18:1c:67:e4:cd:ca:be:d2:4f:
4c:93:4d:f0:23:36:2b:e3:a4:37:55:c7:ed:98:9b:85:55:08:
99:8e:7d:69:b8:b2:d6:72:9e:dd:b7:67:ce:e7:67:a3:3d:c1:
05:6a:1e:f1:c7:e2:d1:b2:ed:6b:3c:97:86:48:12:46:c1:20:
68:41:ae:33:57:12:b1:11:1d:be:6f:9f:92:8b:12:e2:2b:ab:
ce:70:2d:b9:bb:83:c2:ba:62:9d:02:4f:66:32:fd:2e:f7:c4:
76:f6:f4:e5:2e:a7:1f:ca:ba:98:2b:9e:35:37:70:57:83:3e:
6d:e4:4e:3d:3d:18:51:f3:87:4e:8a:6b:05:8d:5d:7a:cb:96:
fb:f6:ce:99:ce:1a:86:0f:37:4e:7d:7b:72:8a:31:13:bb:58:
ee:93:33:e2:0b:52:bd:b3:52:bd:23:ec:79:1f:b6:a7:38:65:
90:ac:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:35:25 2025 by rpki-client