Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
File: AS210683.roa (raw, json)
Hash identifier: yG259kuu0L0zXungEb6pGWwhalZ9cmgCtuBkovi41RM=
Subject key identifier: B9:62:64:1E:F2:36:E3:D8:67:3C:8E:7C:09:AF:68:E7:22:73:06:C3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0A148363932EEEE0C6F19E1DBAA848125C5F422F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
Signing time: Fri 09 May 2025 16:46:57 +0000
ROA not before: Fri 09 May 2025 16:41:57 +0000
ROA not after: Fri 08 May 2026 16:46:57 +0000
asID: 210683
IP address blocks: 2a0f:85c1:c1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:14:83:63:93:2e:ee:e0:c6:f1:9e:1d:ba:a8:48:12:5c:5f:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 9 16:41:57 2025 GMT
Not After : May 8 16:46:57 2026 GMT
Subject: CN=B962641EF236E3D8673C8E7C09AF68E7227306C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:4a:e9:ba:6f:23:c8:87:ab:60:50:30:62:
e3:1f:01:46:d8:1f:89:67:6a:a8:bf:34:ed:0f:44:
15:fc:fa:2f:86:81:67:4a:b8:eb:1c:aa:cc:69:a2:
cd:43:28:e2:5a:19:14:52:05:2a:9a:e7:ed:f6:b8:
19:3e:f7:b8:dc:91:46:9b:44:eb:dd:3c:9a:b4:6f:
0a:e5:83:9c:2e:a5:2a:b8:1c:ab:2c:2d:bd:3a:f5:
36:e3:13:f5:bd:fa:ac:d1:05:2a:e3:b6:81:dc:34:
7b:53:69:f8:7b:33:13:7f:bf:36:1a:4a:80:71:14:
37:72:0b:2e:83:44:6b:f4:fd:4f:3c:21:c8:6f:e6:
1c:95:41:4f:28:81:00:d0:4e:31:25:57:25:72:c7:
46:1b:0e:f3:4e:91:ad:dd:be:22:98:bd:89:e5:c7:
12:a0:ba:f1:f4:90:b9:c4:0c:b4:48:ce:b8:55:16:
02:27:b6:f0:54:d0:74:41:d4:73:ee:a1:a9:13:ad:
21:74:df:96:7b:6b:e9:32:a9:62:d0:e6:6d:97:02:
3f:37:fc:60:67:10:21:55:c7:38:5f:af:35:b0:8c:
58:c9:22:b1:61:e9:e6:e8:82:b3:e7:d2:9c:f5:bc:
3d:cb:98:6b:f1:24:30:97:54:c5:2f:6f:21:f1:01:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:64:1E:F2:36:E3:D8:67:3C:8E:7C:09:AF:68:E7:22:73:06:C3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c1e::/48
Signature Algorithm: sha256WithRSAEncryption
b6:00:c1:18:1f:c3:fd:c9:7b:b9:e2:da:cb:15:52:57:a1:f6:
55:61:1a:57:ec:15:d3:80:54:50:ea:eb:17:8e:31:d8:5d:0d:
f9:dc:9e:9e:49:f8:d4:d5:61:21:3a:a8:47:5d:b4:bd:b3:19:
9b:93:62:5d:a5:0a:6f:e0:8c:75:8b:85:a3:64:58:57:46:c2:
8e:2f:f1:ef:da:94:79:ac:74:17:c1:05:50:27:a4:32:be:53:
b4:4f:cd:2a:ed:da:7c:9d:95:6c:02:1b:64:82:9b:5e:88:fb:
10:9a:a8:bd:92:38:f1:e6:13:ac:27:0a:18:b1:5a:93:ae:75:
da:36:45:41:12:dd:54:ab:9c:06:3c:b7:70:e9:eb:f4:6d:9c:
38:a9:9f:cd:0a:18:ab:58:9b:44:f1:d0:b0:96:bb:f2:62:d3:
bd:a7:f3:e6:63:0d:6a:91:37:ed:4a:38:fa:f6:8e:98:13:28:
5c:2a:ee:e2:49:29:79:51:32:ad:cf:d5:32:13:dc:ea:ab:23:
d9:d6:04:ea:6c:20:e2:22:44:67:98:05:5a:ab:c6:dd:4f:19:
ad:93:0b:60:93:a1:52:af:e9:90:d8:0b:91:bf:4b:00:d6:5a:
74:04:66:1e:a6:6b:33:8a:ba:9a:a2:f4:1d:8a:1e:2c:9c:3d:
be:72:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:37:10 2025 by rpki-client