Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
File: AS210100.roa (raw, json)
Hash identifier: aS41RnWA81AA6h6jt8hYMv9BAwNpJWH7iiCgsdBseY4=
Subject key identifier: 56:66:12:D1:69:D4:35:D7:B0:C7:14:DB:05:B3:A1:E6:5B:BF:69:C7
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 05AF71460E7125C98947B0578F3608F2D33D5B8D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
Signing time: Tue 22 Apr 2025 17:09:46 +0000
ROA not before: Tue 22 Apr 2025 17:04:46 +0000
ROA not after: Tue 21 Apr 2026 17:09:46 +0000
asID: 210100
IP address blocks: 2a14:7581:ff6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:af:71:46:0e:71:25:c9:89:47:b0:57:8f:36:08:f2:d3:3d:5b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 22 17:04:46 2025 GMT
Not After : Apr 21 17:09:46 2026 GMT
Subject: CN=566612D169D435D7B0C714DB05B3A1E65BBF69C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:b9:d5:f4:6c:ed:76:a0:c4:d7:fa:79:00:
20:a9:dd:e5:d9:20:eb:91:a4:66:82:5a:00:06:11:
4f:20:1f:9b:66:59:aa:e0:15:e6:4e:59:77:cd:ca:
a2:c4:ac:d4:ad:7e:b3:c7:f8:1a:c8:0d:54:23:76:
04:a2:d7:30:eb:a0:47:5e:62:72:a9:c0:a4:94:01:
19:38:6b:a6:b1:27:a0:42:83:8a:0a:7b:ba:0f:88:
0a:ad:9e:99:62:9a:b4:01:3c:8a:b1:01:35:b9:62:
0e:51:ae:b1:ee:86:5f:74:d6:a6:8a:3b:c1:3f:92:
fb:c9:f6:30:19:8a:19:f5:4f:2f:fd:88:d2:41:e6:
fa:7d:de:ba:98:48:79:9a:e0:00:04:2e:ed:e6:e4:
6a:22:1d:27:c7:2e:d0:57:ef:ad:0f:d3:e8:90:d8:
8f:3c:13:9e:cf:ed:3f:e3:dd:08:3d:1a:a4:20:9c:
04:f3:96:6a:12:40:41:32:87:0c:d6:e1:22:84:c5:
2e:81:92:06:36:d1:2e:cf:3d:89:93:b0:32:d4:43:
ab:06:5b:58:25:76:37:3e:c5:52:15:71:a6:2e:3f:
00:ef:0a:f2:b5:7d:12:f9:34:51:64:70:05:a4:22:
0a:04:1b:3f:3d:b8:90:69:a5:1e:38:98:80:98:b6:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:12:D1:69:D4:35:D7:B0:C7:14:DB:05:B3:A1:E6:5B:BF:69:C7
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff6::/48
Signature Algorithm: sha256WithRSAEncryption
44:7d:7d:79:ca:9f:ab:10:d5:4b:34:27:d5:2b:1b:78:bc:03:
3b:b0:e5:a0:e9:72:30:7b:95:44:46:69:af:9e:05:ae:28:81:
3f:67:af:c1:ad:7c:41:70:ee:ae:6e:66:9b:02:b2:a2:a9:b4:
48:49:99:87:0c:4b:76:a7:11:7c:7c:8d:6d:31:17:75:1e:2a:
45:d9:23:6c:09:78:20:a5:4b:8b:ac:89:42:21:44:d0:bc:75:
84:7f:f2:b5:f2:ea:9a:19:70:bc:6e:91:d0:d1:3c:cb:12:51:
60:6e:46:ba:69:da:67:2b:f0:45:1c:35:26:fa:64:d2:05:3e:
64:90:fd:7b:e3:2c:fc:25:b9:5d:58:fd:5b:9e:e9:7f:75:1c:
5f:5f:32:e9:68:59:01:d4:eb:b2:b7:12:0b:72:f4:35:4e:ff:
53:4b:a1:6f:67:bc:c5:43:f9:b2:9e:77:c7:9e:bb:2a:37:d3:
79:c6:23:45:8e:d5:93:e7:ad:e2:3b:76:c7:2b:39:89:5f:56:
b8:ab:30:14:34:d5:52:ff:8b:3a:9a:24:d2:8e:7a:81:f0:40:
6e:8a:99:20:5d:16:4b:e3:2c:93:97:05:c4:68:8b:14:f5:db:
09:ad:5a:9f:11:f0:1f:10:8b:37:51:dd:7d:c4:2d:b0:a9:52:
75:97:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:32:58 2025 by rpki-client