Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214154.roa
File: AS214154.roa (raw, json)
Hash identifier: 4R0rSryhmyIv2C1HzXycYkZkvADvXXHzhhcNEB9QCfM=
Subject key identifier: EA:F0:E9:29:7D:3F:9C:BE:82:BC:31:CF:D1:37:EC:ED:C7:C3:DC:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 075AC924316D7816680936D0B28DDC734481AC3D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214154.roa
Signing time: Sat 14 Jun 2025 16:33:49 +0000
ROA not before: Sat 14 Jun 2025 16:28:49 +0000
ROA not after: Sat 13 Jun 2026 16:33:49 +0000
asID: 214154
IP address blocks: 2a13:9500:93::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5a:c9:24:31:6d:78:16:68:09:36:d0:b2:8d:dc:73:44:81:ac:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 14 16:28:49 2025 GMT
Not After : Jun 13 16:33:49 2026 GMT
Subject: CN=EAF0E9297D3F9CBE82BC31CFD137ECEDC7C3DCEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:35:58:6d:13:ff:32:39:6b:96:6b:d8:9f:
24:f9:87:25:14:d7:ea:e9:ed:14:42:4b:e9:7b:6e:
a5:d3:5d:eb:38:3d:32:2f:00:fe:7d:6d:49:07:9f:
f3:82:3a:20:0e:31:83:01:7f:71:7c:ae:39:9e:a5:
8d:7f:b0:92:c5:80:e5:97:81:4c:74:86:83:5b:c7:
49:bf:51:97:5e:b9:cc:5d:c7:38:12:52:2e:fc:dd:
48:df:c4:64:d3:2e:cb:c8:3d:90:e7:35:d2:18:f8:
98:99:62:a7:39:6c:63:f5:75:7b:3d:62:6b:af:0e:
b0:e4:d3:c5:82:f2:66:50:fb:c6:04:c0:d4:ac:5e:
2b:5b:34:75:3f:2d:28:1d:a4:29:02:9a:fb:ca:a1:
5e:d7:be:4d:a9:59:e7:5f:96:da:99:e5:6b:a2:68:
01:16:6b:e2:f3:25:eb:0c:8d:be:27:c0:11:61:74:
a4:f1:9d:d9:fc:74:c3:87:03:84:db:b0:35:79:38:
3d:9f:af:bf:6e:0c:75:8b:48:44:d2:11:4c:14:f9:
5c:d5:a4:4a:df:2c:00:e9:27:01:0a:f9:ad:80:34:
2e:da:13:72:f7:ab:cd:24:79:8e:c0:a6:a4:d7:0c:
d0:be:d3:d2:a5:87:05:8a:a0:2b:bc:8e:4d:94:0f:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:E9:29:7D:3F:9C:BE:82:BC:31:CF:D1:37:EC:ED:C7:C3:DC:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:93::/48
Signature Algorithm: sha256WithRSAEncryption
0b:47:01:7a:fe:81:93:0e:eb:8b:ab:5a:60:b5:dc:ae:8a:9d:
23:23:49:41:a5:02:99:7e:db:b1:be:21:6b:26:db:a5:02:fc:
42:df:6a:40:61:b3:9e:0b:b1:29:ff:c1:28:35:04:9a:78:30:
8a:8b:83:a7:69:1d:3c:32:66:22:95:5c:62:95:1a:fe:f5:29:
c1:54:1c:f5:90:01:dc:a5:f1:b8:10:98:95:a5:c0:9b:f8:d4:
c3:c9:c0:5e:a3:3d:45:6e:d6:f2:0e:0d:8d:93:7d:10:9d:5f:
dc:ea:b3:9c:4e:df:a6:a9:c3:66:0f:be:ab:15:be:dd:29:7e:
80:12:ca:d4:d2:6b:47:1b:5a:5a:98:39:40:7d:f0:e0:6a:24:
20:27:ae:bd:4b:06:0a:bf:bd:db:99:cc:43:32:0f:f1:8d:7d:
af:1d:98:15:02:73:ba:fe:3e:be:91:ec:fc:58:b7:df:02:a5:
bd:2a:a1:18:60:07:57:9a:82:41:90:49:40:19:0f:09:79:0d:
e0:5e:84:cd:3b:4b:ba:5f:10:11:c7:a0:4c:53:28:f3:71:c0:
d7:93:01:68:1b:38:3d:f5:f4:6d:90:5e:dc:22:b0:30:de:b2:
65:93:86:27:b8:5c:dc:0e:c9:46:99:a8:22:47:45:53:9c:9c:
05:b3:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:11:21 2025 by rpki-client