Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
File: AS214340.roa (raw, json)
Hash identifier: eTIjD/61d48eeLs58zBqugkrQ/QToE5feT6I9w2ydeM=
Subject key identifier: ED:E1:C8:4D:59:8B:35:C3:7C:B7:0B:0C:07:7A:53:44:23:6A:1B:A2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4B1B8B95D79459F549ED66F91E5B09A456139C1D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
Signing time: Fri 25 Jul 2025 08:07:39 +0000
ROA not before: Fri 25 Jul 2025 08:02:39 +0000
ROA not after: Fri 24 Jul 2026 08:07:39 +0000
asID: 214340
IP address blocks: 2a0f:85c1:889::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:1b:8b:95:d7:94:59:f5:49:ed:66:f9:1e:5b:09:a4:56:13:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:39 2025 GMT
Not After : Jul 24 08:07:39 2026 GMT
Subject: CN=EDE1C84D598B35C37CB70B0C077A5344236A1BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:24:ce:16:d7:7b:d1:84:13:f3:f6:3d:e7:
cf:10:ec:02:dd:3a:0d:75:1d:85:0b:59:c9:35:4c:
c9:69:58:4d:d8:37:31:c1:9a:d5:1a:51:eb:96:4b:
93:46:21:a0:0f:16:a2:94:f5:56:07:38:12:4b:63:
f4:16:60:26:1c:89:23:db:11:82:fd:be:bf:48:05:
57:87:3c:20:fa:89:4e:9e:b3:1c:17:f4:69:e5:a2:
eb:72:79:ba:e8:bb:6a:14:e2:75:56:db:79:9a:25:
62:46:00:d9:2e:3f:cc:c5:2a:21:39:0d:d3:f1:00:
f3:5a:cb:1d:9f:64:33:0c:84:c7:84:9e:aa:68:c0:
6b:a7:51:b0:b3:f8:10:ea:86:08:6b:ab:0b:42:b8:
63:73:27:0f:b4:f4:82:ae:8f:65:7e:51:80:de:34:
07:49:19:b6:2f:41:c5:0b:85:0e:a6:ed:86:0d:15:
61:30:8c:6c:bb:dd:2a:51:20:06:76:28:47:a4:8a:
6a:f6:1d:ee:bd:d5:6f:0a:15:40:95:5b:6f:fe:c5:
7f:e1:e8:37:47:4a:17:0e:5d:d5:ca:c5:17:3a:41:
bc:2e:32:f4:2a:11:da:1f:5f:95:7d:f4:41:c8:bd:
c6:a0:ee:da:46:4b:79:79:d3:ed:da:20:b3:e3:09:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:C8:4D:59:8B:35:C3:7C:B7:0B:0C:07:7A:53:44:23:6A:1B:A2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:889::/48
Signature Algorithm: sha256WithRSAEncryption
0a:7c:54:f2:8a:00:90:ca:af:43:38:6f:3c:d4:88:f9:80:ef:
f7:d5:4b:d4:ce:d3:b7:4c:26:c4:d7:f0:8a:62:85:8a:eb:fb:
37:e2:fd:e7:ad:b1:b5:20:21:5b:64:ca:53:e1:10:a4:46:c0:
ac:64:74:84:e6:97:4e:75:7d:b7:9a:81:7e:22:02:59:ba:3d:
94:f7:fc:d5:38:b6:f9:3e:aa:2e:66:fa:b4:5e:dd:61:55:40:
df:e8:44:17:35:85:60:dc:00:90:a6:a5:37:64:24:ca:0f:5e:
32:2b:23:69:16:21:a9:61:a4:3b:4c:45:31:8b:02:0d:b5:a0:
1e:59:df:c7:35:62:02:9e:bc:31:e3:f3:4c:94:f0:c8:dc:64:
a9:09:cc:a9:86:93:77:85:96:6d:57:b8:6a:70:fa:c6:81:4e:
10:c9:6d:24:15:87:9a:3d:a4:57:da:50:7a:c9:6c:75:fa:c5:
83:83:03:ab:43:48:31:d9:49:e3:17:0d:be:21:13:f4:df:58:
48:2f:f3:3b:e4:2e:45:44:90:57:f5:16:2f:a8:53:1e:2f:0f:
75:d1:aa:47:0c:38:a4:a8:fe:c1:2f:a3:11:7d:cf:93:0b:cc:
56:e4:bd:8b:12:93:5e:dc:15:aa:9e:ef:3a:e9:ac:c8:f4:84:
61:bf:ae:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUSxuLldeUWfVJ7Wb5HlsJpFYTnB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA3MjUwODAyMzlaFw0yNjA3MjQwODA3MzlaMDMxMTAvBgNV
BAMTKEVERTFDODRENTk4QjM1QzM3Q0I3MEIwQzA3N0E1MzQ0MjM2QTFCQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCyTOFtd70YQT8/Y9588Q7ALd
Og11HYULWck1TMlpWE3YNzHBmtUaUeuWS5NGIaAPFqKU9VYHOBJLY/QWYCYciSPb
EYL9vr9IBVeHPCD6iU6esxwX9Gnloutyebrou2oU4nVW23maJWJGANkuP8zFKiE5
DdPxAPNayx2fZDMMhMeEnqpowGunUbCz+BDqhghrqwtCuGNzJw+09IKuj2V+UYDe
NAdJGbYvQcULhQ6m7YYNFWEwjGy73SpRIAZ2KEekimr2He691W8KFUCVW2/+xX/h
6DdHShcOXdXKxRc6QbwuMvQqEdofX5V99EHIvcag7tpGS3l50+3aILPjCVBdAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU7eHITVmLNcN8twsMB3pTRCNqG6IwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0MzQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQiJMA0GCSqGSIb3DQEBCwUAA4IBAQAKfFTyigCQyq9DOG881Ij5gO/31UvUztO3
TCbE1/CKYoWK6/s34v3nrbG1ICFbZMpT4RCkRsCsZHSE5pdOdX23moF+IgJZuj2U
9/zVOLb5PqouZvq0Xt1hVUDf6EQXNYVg3ACQpqU3ZCTKD14yKyNpFiGpYaQ7TEUx
iwINtaAeWd/HNWICnrwx4/NMlPDI3GSpCcyphpN3hZZtV7hqcPrGgU4QyW0kFYea
PaRX2lB6yWx1+sWDgwOrQ0gx2UnjFw2+IRP031hIL/M75C5FRJBX9RYvqFMeLw91
0apHDDikqP7BL6MRfc+TC8xW5L2LEpNe3BWqnu866azI9IRhv65I
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:39 2025 by rpki-client