Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa
File:                     AS214481.roa (raw, json)
Hash identifier:          OVDAQmW/GHl2U2L4oJhJlC2N/dCk9mFAbAFGnBMAkuM=
Subject key identifier:   1E:12:EB:FB:06:9E:1B:C4:BA:5A:6A:0B:86:79:25:DD:4D:DF:E4:6C
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       4F0AEC6CB8BDC0D7EBE0B2B086CE25F31A78E986
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa
Signing time:             Fri 25 Jul 2025 08:07:43 +0000
ROA not before:           Fri 25 Jul 2025 08:02:43 +0000
ROA not after:            Fri 24 Jul 2026 08:07:43 +0000
asID:                     214481
IP address blocks:        2a0f:85c1:840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0a:ec:6c:b8:bd:c0:d7:eb:e0:b2:b0:86:ce:25:f3:1a:78:e9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Jul 25 08:02:43 2025 GMT
            Not After : Jul 24 08:07:43 2026 GMT
        Subject: CN=1E12EBFB069E1BC4BA5A6A0B867925DD4DDFE46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:33:9f:ae:b9:8e:57:e3:fc:bf:9e:c6:a3:
                    46:cf:84:59:6d:ea:da:0d:c5:43:4a:46:fa:ed:96:
                    b8:7f:61:f6:dc:f8:c0:7c:d9:00:c5:db:37:0a:60:
                    42:5b:77:7d:a0:c7:35:b0:0a:ca:68:f6:fa:92:65:
                    1a:a1:dc:b6:d7:ea:d9:13:72:3f:b8:fb:10:e7:a6:
                    ab:e1:84:3e:18:65:7b:3f:fb:fc:32:93:87:ec:e5:
                    3d:9e:2b:d7:9b:cc:5c:58:0b:ff:6a:74:20:a7:41:
                    1c:e4:7d:90:71:8c:f0:03:59:b5:7c:6f:0e:a4:68:
                    6e:1a:6c:e4:e8:a8:f9:c8:4e:34:a6:be:72:08:66:
                    74:78:f2:ef:22:37:ad:a2:39:38:31:a7:99:11:6b:
                    90:41:7b:08:10:04:68:45:39:42:86:9d:05:0a:4d:
                    30:40:85:a1:27:f5:04:10:f0:1b:e5:32:bb:2e:54:
                    49:7e:2b:25:1f:f8:e9:a3:dd:2d:e9:d5:dd:ca:e7:
                    8d:e2:b0:cc:02:60:da:b5:f7:bc:9d:c0:36:2f:60:
                    36:64:34:ef:f1:da:af:35:4b:e8:d7:67:e1:fa:26:
                    51:68:23:ad:1b:ba:10:ce:f0:8e:16:5e:83:f4:05:
                    1f:2b:a3:ad:83:40:6d:c5:4b:b9:e1:2d:e3:74:55:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:EB:FB:06:9E:1B:C4:BA:5A:6A:0B:86:79:25:DD:4D:DF:E4:6C
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:840::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:b6:cf:7d:7f:2c:47:5c:36:a1:7d:95:3e:e0:bb:fc:1a:
         37:ae:cd:8f:71:db:cc:53:8b:2b:18:5a:59:90:7c:7a:2b:62:
         90:08:b7:cc:26:71:d9:f0:3c:6b:8f:c1:1e:6f:76:be:e5:ce:
         f2:8d:29:77:52:24:20:c7:0f:a8:78:7e:68:d1:21:28:74:49:
         55:b3:a5:13:40:bd:b7:c8:34:19:33:97:7b:f0:bd:bf:bc:cc:
         12:e9:cd:bb:b9:55:a0:c5:c5:78:22:45:8b:f6:fc:e9:6a:f0:
         fb:06:5b:21:de:59:e0:17:d7:c2:2f:bb:b3:0e:55:86:3d:4a:
         45:ad:42:82:cf:93:14:e7:62:12:d4:3c:dd:66:44:df:1a:63:
         15:e9:74:ba:18:36:9f:94:b6:81:f5:fe:74:7d:74:51:4d:92:
         5c:3d:46:c2:93:41:1f:31:c4:82:47:15:27:9b:fc:85:ac:2e:
         7b:84:28:a3:f9:2c:fa:5b:dd:30:2d:06:da:fe:6f:98:79:6a:
         f6:08:8b:7b:eb:30:81:31:bf:6d:3c:a5:af:b9:3c:ef:56:5d:
         a9:01:be:a5:9f:c1:02:75:dc:cc:c6:e2:7e:58:dd:fa:5c:47:
         83:3e:1f:a6:05:43:ab:be:6e:51:7e:36:0d:13:43:67:e0:72:
         66:cf:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:15:02 2025 by rpki-client