Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: Y6qdJfUHenGRdX8Tiy6/H0vcnNaBvXoqKxY/W9lyzvE=
Subject key identifier: B4:B9:97:94:23:DA:CB:17:F1:FA:E4:B4:A2:C6:E9:C3:7F:53:9D:E8
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 02FA5BF28EB745983D59305A6B3A83631C468E0F
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
Signing time: Tue 29 Apr 2025 09:34:44 +0000
ROA not before: Tue 29 Apr 2025 09:29:44 +0000
ROA not after: Tue 28 Apr 2026 09:34:44 +0000
asID: 212238
IP address blocks: 193.187.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fa:5b:f2:8e:b7:45:98:3d:59:30:5a:6b:3a:83:63:1c:46:8e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 29 09:29:44 2025 GMT
Not After : Apr 28 09:34:44 2026 GMT
Subject: CN=B4B9979423DACB17F1FAE4B4A2C6E9C37F539DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:ee:28:93:27:f7:d8:22:7b:aa:a7:ce:cd:
54:dc:c9:a9:1d:8a:47:5b:03:68:d0:f8:c1:4b:a8:
39:dc:40:3d:ec:35:c0:8b:8a:b2:97:38:e0:c6:cd:
d6:fd:13:a1:18:71:98:2e:9a:41:17:6b:c7:1a:21:
b8:48:ee:fa:63:16:b6:00:ba:36:0e:25:85:f3:a4:
eb:fd:cd:b1:2c:3c:a9:8e:49:7f:2d:07:cf:64:3c:
1c:2f:75:e7:f3:06:fd:ac:d7:27:2c:fc:e0:dc:60:
e0:34:d6:4c:93:7b:2c:68:02:26:ef:3b:0f:25:2a:
7b:14:bc:19:ef:ab:d4:0c:1f:d3:bb:11:7c:e8:f5:
7d:e7:8b:92:01:23:4e:33:f4:18:0a:ad:d6:2d:77:
d4:c6:a5:2f:18:1a:bd:cc:d1:f5:df:bc:af:0c:6d:
d4:21:79:8e:9f:2b:12:f0:2a:f7:0a:0d:1b:d2:b3:
4d:a4:a2:74:48:6d:bc:87:93:cb:96:ee:50:b4:93:
d6:8a:d6:df:fe:b3:65:10:ad:61:ff:b8:1d:d4:c4:
33:64:c7:ee:9c:3e:dc:2d:6d:cf:1f:e6:5e:37:18:
88:5f:22:5f:fc:1e:14:ce:7d:c2:a5:43:18:9f:1e:
f8:ac:9f:f6:26:94:39:0d:5c:02:02:c8:bc:c4:c3:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:97:94:23:DA:CB:17:F1:FA:E4:B4:A2:C6:E9:C3:7F:53:9D:E8
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
00:58:0d:a4:97:6d:33:7e:c0:a2:40:4a:9a:35:a3:b0:97:10:
0f:ab:1f:0d:60:ef:e4:e6:55:be:fd:ea:15:0f:2e:ab:0f:c4:
cc:40:9a:40:c0:03:12:8b:55:f5:aa:cb:ce:0e:8b:ee:f9:26:
50:60:52:28:4c:71:91:40:e4:8b:bd:59:6f:6c:d7:4f:ff:4f:
e0:d8:80:4c:2c:78:e6:5b:c8:9c:b6:b6:1d:1a:35:bc:8a:d3:
34:b7:a2:fa:66:91:b7:9f:ed:77:10:4c:4f:e9:8e:8f:06:e1:
d7:96:82:82:f4:0c:f3:2a:45:35:50:9b:7a:81:27:b2:11:3f:
cd:8d:ea:fd:1d:d6:98:dd:ee:58:b9:b1:38:ac:17:ae:10:d9:
41:ef:b5:36:90:eb:1c:2d:c5:3a:7f:4f:8f:fb:65:c2:e4:09:
57:2b:bb:52:ec:1d:49:44:ed:cc:cb:68:e7:3b:02:b0:7b:fe:
e4:33:1f:1e:08:5c:40:a2:4b:45:bc:14:f2:76:bb:e6:5a:0d:
a9:23:5a:08:62:6d:24:5d:cf:b2:8a:50:3c:8f:d1:c4:ee:c8:
28:fe:08:18:0a:c5:e4:3e:d8:0c:b7:63:9c:fa:3c:93:d8:bc:
6b:90:ba:47:06:bf:9d:e4:12:28:9e:9a:41:be:c2:92:5e:e7:
8b:72:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:10:48 2025 by rpki-client