Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214575.roa
File: AS214575.roa (raw, json)
Hash identifier: 0WnjD+34j0oga3UwpK0s2nnXf1+r9tLPIjcNyR1f9cY=
Subject key identifier: 2F:A0:3E:0B:8F:B4:A9:D4:F3:C9:C6:A5:2E:98:D2:E6:5B:BC:62:6B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 11788C884D43CE6DE907AFD809BE90A9414C3D86
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214575.roa
Signing time: Fri 25 Jul 2025 08:07:36 +0000
ROA not before: Fri 25 Jul 2025 08:02:36 +0000
ROA not after: Fri 24 Jul 2026 08:07:36 +0000
asID: 214575
IP address blocks: 2a0f:85c1:804::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:78:8c:88:4d:43:ce:6d:e9:07:af:d8:09:be:90:a9:41:4c:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:36 2025 GMT
Not After : Jul 24 08:07:36 2026 GMT
Subject: CN=2FA03E0B8FB4A9D4F3C9C6A52E98D2E65BBC626B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:21:e2:89:a2:3a:b8:13:8f:04:b5:c7:70:
c6:55:9d:c2:bf:1f:eb:72:e8:46:26:99:5e:a5:c4:
13:ab:d0:2d:ca:d4:76:c0:a1:de:81:6e:f3:2d:d8:
74:7f:66:48:be:4a:62:80:e0:43:54:22:8c:7c:dc:
a9:d6:9d:60:0f:72:5e:e6:c1:d2:71:8d:59:c4:03:
83:89:4f:f2:da:7d:35:99:28:5f:fb:9b:27:d5:7f:
1a:d6:2f:ea:c4:76:34:b4:93:fc:87:a9:6e:f7:ee:
5d:21:46:4f:82:cb:f9:ed:32:6c:29:f1:5a:d1:54:
b1:02:4d:ec:5e:ee:7c:80:ed:09:39:dc:c7:f8:51:
4f:5c:98:27:1f:32:a4:13:6a:4e:e3:4c:4e:6b:a0:
de:2b:b3:b7:16:e8:b9:71:cf:15:89:3e:06:f2:59:
5f:b6:a2:06:6e:0c:57:66:34:64:04:a1:4c:1a:42:
16:b3:16:fe:dc:8b:fd:54:89:60:cf:83:c7:6a:62:
00:ca:5a:b6:5c:bc:1b:62:8e:d2:6f:0b:85:4a:ae:
a9:e1:e0:83:29:5e:c0:99:76:be:5c:12:49:8a:ea:
06:10:4e:9d:a0:3b:8d:07:98:7a:25:bb:e2:46:09:
09:7e:e8:ac:f6:cd:d9:46:39:e8:bb:84:ce:91:a6:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:3E:0B:8F:B4:A9:D4:F3:C9:C6:A5:2E:98:D2:E6:5B:BC:62:6B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:804::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c6:d2:1a:34:f9:af:48:95:bc:f1:28:79:19:68:29:f6:6f:
43:ca:0f:2b:89:03:5d:5a:1a:4f:4e:a8:02:62:ff:50:c4:09:
2b:78:78:ca:1c:87:ee:e8:b7:8c:34:6b:45:dd:25:e1:df:d1:
36:20:a2:78:1e:b7:be:c0:40:14:13:cc:c0:21:58:eb:48:42:
28:43:3c:e6:c9:3f:d6:62:a0:43:8f:73:39:c8:64:c0:44:24:
56:61:ce:2a:86:6f:b5:f6:84:16:f7:c4:16:a6:71:3b:dd:8b:
43:36:51:a5:f9:c5:e8:6c:82:8c:bb:13:02:3f:50:7f:29:21:
60:8f:48:ad:32:45:3d:af:ca:5b:db:99:b7:04:98:b2:5c:a4:
80:8d:05:2e:d0:47:fe:bc:ff:71:7a:48:84:30:d6:3a:d0:51:
07:04:30:98:76:c9:42:f3:0d:df:88:d1:b9:ce:f7:be:2d:14:
e0:7b:8b:7b:d8:65:cd:36:81:78:65:a4:fd:dd:a3:03:18:2f:
02:c8:10:2a:43:d2:be:2b:b8:e5:5f:a0:47:dd:10:3e:b4:19:
8c:07:f4:0d:e8:d6:85:cd:75:40:55:78:65:81:ca:ea:b7:6f:
bf:f1:22:b8:ad:f3:b6:12:12:cf:74:d3:f1:b6:98:27:d8:ac:
1c:97:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:47 2025 by rpki-client