Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
File: AS208723.roa (raw, json)
Hash identifier: GSjIvgRyUfvErueO6l52x8K0RLd1P5kO2nEnmkKEsf4=
Subject key identifier: 75:3F:82:5F:72:E1:05:02:F4:C9:37:6F:BE:37:1B:1D:31:E0:09:E6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 27E8B4DC217C948C127B84B8D5991D253D68DA9B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
Signing time: Fri 09 May 2025 15:44:44 +0000
ROA not before: Fri 09 May 2025 15:39:44 +0000
ROA not after: Fri 08 May 2026 15:44:44 +0000
asID: 208723
IP address blocks: 2a0f:85c1:c3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e8:b4:dc:21:7c:94:8c:12:7b:84:b8:d5:99:1d:25:3d:68:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 9 15:39:44 2025 GMT
Not After : May 8 15:44:44 2026 GMT
Subject: CN=753F825F72E10502F4C9376FBE371B1D31E009E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:b2:58:30:4e:a8:ae:e8:e0:6c:92:23:17:
c4:9e:24:be:a8:02:18:8d:db:dc:ca:3f:7b:83:fb:
74:29:56:34:6b:dd:93:48:10:e0:d7:52:5c:b8:0d:
18:c4:5b:bc:3c:e2:8a:8b:83:52:aa:c0:bb:79:ef:
c1:db:94:70:6e:30:13:fe:d9:12:0e:88:5f:5b:03:
14:58:f3:8f:c0:f8:b3:e3:cc:d8:ea:4c:60:e9:03:
5d:02:fe:15:b1:41:35:9a:d0:5a:8c:a8:91:f4:40:
8d:fb:ed:8a:a4:23:46:aa:23:6c:8a:ef:39:8d:de:
b6:af:03:4c:17:77:06:03:1d:12:e2:3e:cc:4f:7d:
2e:88:6f:7d:3b:26:b7:d3:a9:30:6c:88:91:35:84:
ee:fe:1e:3b:e8:03:26:dc:35:20:de:2b:34:19:da:
f9:ee:4f:df:d0:5a:d5:0a:19:91:01:fc:a7:47:e3:
c6:08:69:31:5c:fd:dd:76:06:41:b1:8c:d5:bf:c2:
db:61:18:48:44:43:6a:28:04:46:9b:18:a0:77:d0:
c2:87:4b:76:a0:5c:54:9d:dd:31:b0:fd:14:30:14:
f2:a8:19:6b:56:27:26:98:84:af:96:1d:a5:51:03:
aa:d4:ec:60:6c:04:d4:ae:f8:fe:5f:84:cc:30:a7:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:82:5F:72:E1:05:02:F4:C9:37:6F:BE:37:1B:1D:31:E0:09:E6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c3b::/48
Signature Algorithm: sha256WithRSAEncryption
37:25:c9:f2:12:0e:e4:8c:0f:bf:93:93:dc:92:b3:90:9e:b0:
df:ff:cd:22:3d:71:13:f1:a2:3f:41:77:0d:dd:76:4d:0b:37:
21:57:7b:2c:2d:74:f1:b5:dd:a1:8b:96:3f:d5:76:0f:71:36:
60:0e:af:04:29:f8:59:48:b8:8a:76:60:ea:1c:88:9e:f4:66:
92:b5:0b:e5:88:1f:2d:16:99:a6:25:92:df:be:bd:d2:d9:58:
83:b4:ff:f8:4a:74:63:6a:8b:63:2b:e1:f2:b5:39:df:5e:20:
3d:6d:53:1b:fd:c4:eb:5e:5e:56:6b:d8:eb:86:15:33:4b:bd:
55:fe:8f:7e:ea:d3:18:77:7b:26:09:ad:bb:da:e8:a0:6c:96:
06:e2:08:ac:8d:9b:8a:16:e8:ff:95:b7:c2:48:fb:4c:0c:76:
84:5a:f8:05:e4:f0:4c:b2:30:f2:9c:6c:d6:66:7e:12:12:f2:
fe:60:41:97:c0:8c:b2:94:a5:ff:09:c1:28:2e:3d:0a:ac:8c:
22:ce:ac:ee:b0:52:3b:59:1e:0f:be:f7:4b:df:d5:c8:2e:38:
ea:72:5f:a2:b1:aa:6c:2b:1e:49:b4:3e:92:13:15:33:94:6a:
90:10:2f:91:e3:a7:2f:87:dd:67:2e:e1:6e:56:d1:a3:2a:0e:
45:3a:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:12:01 2025 by rpki-client