Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213436.roa
File: AS213436.roa (raw, json)
Hash identifier: TDN4Oi0d/mOK3qa3V43hOw+q2cc8azeV+7VfQY89utw=
Subject key identifier: 3D:E0:DA:92:15:F7:09:D9:2B:20:E4:CF:DA:65:20:93:64:53:A7:35
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1FCA5888C837F2D7344ED18AF95CD44E47036A46
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213436.roa
Signing time: Tue 06 May 2025 09:45:45 +0000
ROA not before: Tue 06 May 2025 09:40:45 +0000
ROA not after: Tue 05 May 2026 09:45:45 +0000
asID: 213436
IP address blocks: 141.11.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ca:58:88:c8:37:f2:d7:34:4e:d1:8a:f9:5c:d4:4e:47:03:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 6 09:40:45 2025 GMT
Not After : May 5 09:45:45 2026 GMT
Subject: CN=3DE0DA9215F709D92B20E4CFDA6520936453A735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:b8:04:86:ef:93:35:cc:7f:0a:51:71:f8:
f2:d8:49:66:69:94:91:07:ab:d6:cc:a8:fc:64:72:
fb:c0:1d:64:cf:2f:18:6d:b6:e7:30:c5:0c:1b:95:
ce:f5:df:e5:f4:02:fb:ad:64:3c:ec:ac:f3:86:f0:
4d:0a:06:7c:db:fc:86:de:c3:d1:18:27:3d:21:17:
e7:b9:74:d3:f0:f6:4c:af:b3:b3:54:7b:db:d3:21:
a0:eb:bb:67:06:bc:08:33:a9:74:53:ea:a4:f2:ec:
02:46:e7:9c:0a:57:0e:04:d4:80:ae:ad:8e:3b:4c:
9d:6b:c8:6c:11:2b:b1:83:b2:de:49:1e:fa:b9:e1:
90:06:25:8d:5c:34:4b:8b:b9:05:e4:76:2f:cc:09:
17:62:af:58:bd:20:97:b2:5a:ab:d6:fe:c7:bf:dc:
3a:81:c0:08:e9:bd:10:cb:bb:13:9a:65:f9:24:ed:
12:3d:34:f4:41:23:f1:fa:09:e1:ec:dd:92:72:00:
53:e0:28:b5:a8:95:be:eb:01:88:e7:63:2a:fd:78:
9f:db:df:df:90:2b:da:69:9d:f0:99:8d:35:f9:30:
6c:ec:68:9a:0b:2b:51:19:b4:9c:56:29:5f:64:d4:
11:f7:85:11:6a:f3:14:36:36:cd:43:de:89:1a:47:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:DA:92:15:F7:09:D9:2B:20:E4:CF:DA:65:20:93:64:53:A7:35
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:99:d4:bf:7e:26:3a:4f:40:b2:56:01:e4:7c:8b:b7:14:50:
47:8a:0f:08:96:95:6d:81:25:fc:df:85:7a:8b:3d:dd:17:21:
83:aa:58:f5:6c:cd:6b:c6:34:90:a7:f7:a7:67:de:32:cb:86:
2b:c0:e8:34:45:71:02:73:2c:5e:a0:41:71:e4:d7:56:b3:a5:
83:a4:97:ba:7b:fd:53:f1:d1:49:77:2f:57:4c:cb:8a:fa:bd:
f7:56:23:58:57:75:33:71:fd:6f:59:5a:2b:5e:46:fc:35:b5:
73:7c:48:51:ac:8a:b5:09:23:ce:6b:d4:ad:ac:d6:c8:77:8b:
be:77:07:36:dc:89:36:e2:96:c2:53:e7:1d:7c:6c:bb:99:f5:
65:bb:85:3d:38:90:21:be:d6:d5:b7:2f:c0:8e:a1:73:ea:2a:
dc:20:66:cf:bc:04:3a:88:f4:af:a0:07:1a:02:4c:60:92:ee:
1f:10:f6:80:25:7c:3d:a8:63:d4:71:b3:3e:93:9c:9c:7e:ca:
79:a4:61:80:3a:8c:8c:8e:f4:58:a4:e4:a0:c2:26:19:d0:6a:
81:88:59:dd:5c:55:df:08:18:40:33:20:e8:c5:b0:1f:4a:fa:
67:75:50:0a:a3:33:eb:9e:ce:f5:7b:82:be:ac:ad:87:e6:96:
a8:b8:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:06:33 2025 by rpki-client