Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
File: AS214337.roa (raw, json)
Hash identifier: IkuAOtPmzxBfg0O1VRcr7rd0oLPsu19zsqnPkaNcMY8=
Subject key identifier: EA:26:54:AE:35:F7:52:C3:FC:26:15:25:8D:71:2C:3C:D3:87:3C:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 56CA0D35AB93F0B6A7563D9321AAE598F4B3D1AB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
Signing time: Mon 04 Aug 2025 16:07:48 +0000
ROA not before: Mon 04 Aug 2025 16:02:48 +0000
ROA not after: Mon 03 Aug 2026 16:07:48 +0000
asID: 214337
IP address blocks: 2a0f:85c1:88e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ca:0d:35:ab:93:f0:b6:a7:56:3d:93:21:aa:e5:98:f4:b3:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 4 16:02:48 2025 GMT
Not After : Aug 3 16:07:48 2026 GMT
Subject: CN=EA2654AE35F752C3FC2615258D712C3CD3873CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:86:9d:2b:67:71:4e:a4:cb:d6:22:32:a9:
a2:c7:3e:ae:cc:e4:4f:58:e8:5f:70:92:45:c2:0f:
b2:3f:fb:0f:98:c3:4f:28:f9:d3:1b:67:00:59:b9:
bb:f7:85:45:f9:fb:4d:a5:8f:7b:58:45:be:2a:1a:
c1:7f:8f:87:33:1a:0d:b4:2c:d0:5e:f2:97:26:3b:
3e:61:e0:76:7e:f7:7d:fa:21:d6:c5:18:fc:24:56:
8f:b0:d6:a6:af:be:1c:69:b0:88:66:b2:b4:70:c1:
98:ed:11:29:19:92:09:3d:7c:f2:67:c7:cc:1b:c7:
ba:a2:14:5e:e9:8c:a6:e8:75:3e:bc:db:1d:46:ce:
ea:35:a4:8a:05:af:87:18:37:5b:96:30:57:5f:a2:
fb:de:34:1e:18:b3:9c:cb:a6:82:33:2e:f1:5e:a7:
3c:25:96:4a:e6:67:03:09:34:e9:67:37:d4:af:95:
87:43:f3:51:05:37:4a:1d:e6:30:09:b0:9c:13:ab:
7c:af:ff:7a:f2:ad:a2:36:d9:62:05:2b:b0:fe:4e:
c3:2d:53:ff:d9:70:69:80:30:e7:9d:86:f6:46:62:
a8:69:10:d1:2b:b9:51:3e:ca:c5:37:7d:59:28:1e:
65:e5:48:78:f2:03:22:8b:9d:06:cd:17:e1:c7:62:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:54:AE:35:F7:52:C3:FC:26:15:25:8D:71:2C:3C:D3:87:3C:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:88e::/48
Signature Algorithm: sha256WithRSAEncryption
33:26:26:6b:2b:bd:d9:76:a8:7c:29:9c:df:f1:61:40:d3:71:
a6:52:50:f4:5f:68:52:69:9e:0c:2c:b8:f2:29:b6:be:08:5a:
e1:11:fd:15:2d:78:56:d8:ed:33:ca:13:09:21:85:39:a2:f6:
27:a2:c9:d7:41:d4:b1:5a:52:97:0e:69:92:28:74:99:23:d6:
a9:58:6d:83:b6:74:d2:12:49:8e:ce:d4:19:d8:c5:43:56:27:
14:3d:7b:fa:a3:3d:43:74:b8:79:b1:1c:c7:27:0b:31:a2:ec:
12:69:94:0c:d9:ca:b3:1d:39:e9:b3:c0:ad:2a:b7:7d:dc:81:
42:42:2a:d1:82:6f:9b:b7:22:2c:b6:81:ea:4b:75:4b:47:38:
ef:17:05:6d:8d:aa:3d:45:7a:08:16:e4:49:a3:b2:43:14:36:
c7:46:1b:b4:e2:1e:4f:61:7e:4a:d9:b4:fd:6a:9a:26:01:8d:
cc:6f:5b:25:06:65:fa:6b:2a:ac:7c:e4:60:f3:d0:b9:5c:13:
00:c2:bc:a2:27:b0:c5:6a:79:e5:43:f7:9e:1f:ec:f6:8d:26:
6a:2a:a2:6d:d2:6b:c6:b7:97:64:4a:ed:7d:e6:e5:c6:8a:d8:
3c:09:fd:9a:66:42:91:c4:7e:e9:34:17:a1:b5:d7:a4:d9:a7:
bc:a7:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:01 2025 by rpki-client