Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa
File:                     AS214376.roa (raw, json)
Hash identifier:          mJNwd/4WEHNpuv6s8CFTJXi/bZR8+E3rPQ10m6Sk9xs=
Subject key identifier:   FE:71:7F:A7:B5:9D:C3:C0:24:36:1F:D5:66:C4:A7:24:A6:E4:C3:23
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       0FA66658948AA9FE772907C1D925C7877FA2E353
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa
Signing time:             Fri 25 Jul 2025 08:07:45 +0000
ROA not before:           Fri 25 Jul 2025 08:02:45 +0000
ROA not after:            Fri 24 Jul 2026 08:07:45 +0000
asID:                     214376
IP address blocks:        2a0f:85c1:84f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:66:58:94:8a:a9:fe:77:29:07:c1:d9:25:c7:87:7f:a2:e3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Jul 25 08:02:45 2025 GMT
            Not After : Jul 24 08:07:45 2026 GMT
        Subject: CN=FE717FA7B59DC3C024361FD566C4A724A6E4C323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:0f:c4:8b:eb:85:44:8b:e2:59:d6:70:06:
                    2e:e3:de:a6:2d:65:3a:02:72:40:73:cb:2d:c7:43:
                    40:e3:53:7f:40:37:c0:86:8b:98:da:34:ce:46:39:
                    82:e9:f2:1c:4e:e4:de:1c:6c:60:fe:91:d5:1c:5c:
                    b8:27:17:97:e7:14:0f:a5:56:15:be:2d:43:06:86:
                    b4:12:91:f2:17:ff:8b:1d:7e:ff:0f:79:36:51:8c:
                    27:61:ad:ed:cb:a2:2a:71:11:a0:5d:5f:95:ca:ac:
                    80:e1:39:14:0d:e5:09:ef:5f:2d:03:fc:fb:9f:1f:
                    e2:6d:06:9d:c2:25:7b:fd:e8:e2:67:87:c9:05:a7:
                    7d:bc:8a:ed:51:c4:db:ae:ea:ef:16:e0:02:3b:57:
                    a0:18:11:04:cd:2e:6e:2a:9c:d6:e5:a8:93:a7:7e:
                    63:ec:45:8c:6c:10:54:33:f0:f8:35:a1:8a:9c:ce:
                    ff:10:86:dc:5c:23:56:fd:56:0a:ee:39:74:b1:b4:
                    5e:3c:fe:0a:8a:e9:9f:a9:8b:20:56:74:30:32:46:
                    70:db:83:e0:f0:55:6c:5e:4b:d1:8c:f8:26:c0:73:
                    ad:c8:90:32:24:7a:26:5d:f8:61:10:cf:0e:c3:04:
                    e4:34:62:11:c9:ce:2b:8a:02:5c:f5:a8:1e:a1:09:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:71:7F:A7:B5:9D:C3:C0:24:36:1F:D5:66:C4:A7:24:A6:E4:C3:23
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:84f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:78:60:50:6e:43:d7:4d:76:45:a0:97:fc:1f:fc:bc:db:
         71:25:04:b9:63:25:54:f3:3c:f2:e6:4f:f6:48:37:0f:93:e5:
         aa:9e:ed:82:31:d4:17:3a:3e:05:4b:63:dc:9e:da:85:b8:b0:
         88:17:76:65:c9:b2:c3:3d:ca:aa:5f:58:fb:3d:d6:5e:5a:6a:
         18:8a:1a:78:82:2e:0e:03:b2:89:c3:8b:a1:9d:d7:e2:4a:37:
         c6:db:a2:93:f7:15:bb:b5:95:4e:3f:d0:d7:2a:b7:98:91:16:
         03:04:b5:b5:56:00:23:81:5a:99:d6:84:2f:93:1e:d5:c6:96:
         7e:86:d1:4f:6d:62:61:5f:08:72:bd:23:0e:20:1b:f8:b4:d1:
         12:0c:1b:5b:b0:45:a0:b1:83:db:60:30:de:88:40:a0:66:62:
         a2:26:6c:43:36:09:b0:f8:dc:8e:d3:26:b2:aa:a9:7d:a1:93:
         37:b1:27:77:db:dc:22:20:e5:5a:35:77:02:3f:90:5c:a7:cd:
         b7:12:ca:d4:15:e5:84:b1:20:77:72:48:b6:ed:37:a6:71:c6:
         9f:20:7d:bd:ca:92:ca:99:b0:6f:e0:e5:97:b6:9a:8c:41:b1:
         a9:46:de:b8:d1:7a:a4:ca:d9:2f:61:9c:74:ed:69:c3:c0:91:
         f4:0e:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:22 2025 by rpki-client