Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
File: AS211748.roa (raw, json)
Hash identifier: G8cX8g+EKIz6t9GsDFUHcXM3pXqVzbZAtEf2DDQcMf4=
Subject key identifier: 2A:29:23:BF:99:19:50:D1:7F:E5:51:02:2C:BF:92:E4:76:3E:26:5D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 477E881C75F864694E787A30D515D22C925F24E8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
Signing time: Fri 20 Jun 2025 09:54:11 +0000
ROA not before: Fri 20 Jun 2025 09:49:11 +0000
ROA not after: Fri 19 Jun 2026 09:54:11 +0000
asID: 211748
IP address blocks: 91.199.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:7e:88:1c:75:f8:64:69:4e:78:7a:30:d5:15:d2:2c:92:5f:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 20 09:49:11 2025 GMT
Not After : Jun 19 09:54:11 2026 GMT
Subject: CN=2A2923BF991950D17FE551022CBF92E4763E265D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:e1:38:9e:bd:bf:2e:a4:ba:83:2b:70:46:
81:2e:13:53:04:72:0f:5d:76:75:96:2e:4e:13:fb:
89:63:82:89:ff:9e:b7:07:1e:0a:35:ff:86:50:f1:
97:ac:7b:1d:68:0d:1d:7c:d3:5d:82:cc:6f:47:75:
5b:9c:4a:24:b1:38:fa:08:d4:75:10:73:6c:72:e7:
d2:a4:36:e3:a2:1d:45:6f:11:85:fe:41:2d:37:ee:
44:09:e0:10:66:b1:cb:29:f7:56:21:7a:72:df:95:
94:c9:ab:b7:9a:e4:57:6c:17:4b:6d:dc:c1:57:14:
7c:f9:89:2a:6d:43:0f:67:b6:f4:f8:50:21:12:dc:
43:5c:5d:00:03:dd:69:4e:2c:4b:cc:6b:38:8d:a2:
b3:58:dc:c3:53:04:93:e3:40:d1:aa:f6:2b:9c:35:
f3:8d:96:71:ad:14:4a:d3:57:96:ac:1c:90:77:0b:
6e:17:14:91:ee:b6:01:40:14:26:5d:c7:8a:b8:68:
8a:74:20:f4:fa:b5:c7:46:49:07:83:f9:8d:77:0e:
8c:53:45:ea:be:7e:0f:b1:90:2f:0c:73:29:f9:7b:
01:22:10:e9:5e:75:e0:36:31:23:da:24:2c:c1:bf:
6e:b9:a3:18:fc:64:77:f3:d9:24:dd:c8:17:cf:88:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:29:23:BF:99:19:50:D1:7F:E5:51:02:2C:BF:92:E4:76:3E:26:5D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:03:0b:49:19:4a:2b:8d:64:2b:63:bf:d7:69:d5:17:fc:2e:
64:97:29:93:66:ba:9b:ae:6b:3d:6d:37:ba:93:ba:bb:c7:b3:
05:5b:68:2b:25:06:e5:1c:3d:2c:18:a8:8f:e8:b1:ed:8a:29:
62:9a:cd:a5:f6:0c:d3:aa:25:af:5c:95:80:2c:74:60:b8:42:
52:74:32:51:c9:39:ed:0a:e7:20:c4:7e:c6:e3:2f:a7:53:c4:
2e:53:36:da:ac:b0:86:23:e1:fd:27:97:73:a3:bb:23:64:ca:
8c:dd:6c:d2:e5:54:d8:36:5b:06:33:a1:8b:cd:6e:89:08:1b:
b0:38:19:90:4b:c7:a7:01:af:70:fe:40:a4:fd:9b:62:d5:91:
72:01:79:e2:1f:11:83:ce:57:bb:3b:b1:da:83:80:62:5f:a9:
28:5e:ca:e0:7f:f4:f8:0a:63:92:12:f3:b2:45:59:83:bc:18:
a9:fe:bf:05:af:fb:64:40:14:01:27:3c:19:57:2d:98:7e:f3:
9d:f4:c3:b8:3b:42:39:58:c3:95:ea:9c:f3:3d:85:8f:30:d7:
61:cc:f8:bd:e8:33:1d:fa:99:72:ec:8e:08:1a:e6:69:4c:1e:
81:73:bb:7f:11:20:75:5b:ed:4a:26:58:0e:93:08:7a:fb:f5:
18:9d:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:08 2025 by rpki-client