Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
File: AS214751.roa (raw, json)
Hash identifier: wTHw3F6LR9I9mxPwg1GYJYoESBary3REdFb1nENph8I=
Subject key identifier: 39:64:F3:AC:D6:E7:22:FB:D2:E7:8A:D7:E7:B3:FB:B4:81:8B:08:32
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4EFE28F9119C20073C949B60493C5BC717B5360B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
Signing time: Fri 25 Jul 2025 08:07:43 +0000
ROA not before: Fri 25 Jul 2025 08:02:43 +0000
ROA not after: Fri 24 Jul 2026 08:07:43 +0000
asID: 214751
IP address blocks: 2a0f:85c1:813::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fe:28:f9:11:9c:20:07:3c:94:9b:60:49:3c:5b:c7:17:b5:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:43 2025 GMT
Not After : Jul 24 08:07:43 2026 GMT
Subject: CN=3964F3ACD6E722FBD2E78AD7E7B3FBB4818B0832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:cb:e9:32:11:ab:c8:3f:22:64:65:82:6a:
40:2e:85:af:90:d1:d7:65:62:4d:1d:33:40:2f:fb:
8f:23:a1:6d:22:dd:e8:fe:b0:25:d4:cd:01:c4:a9:
51:3e:42:39:f2:a2:15:93:71:8f:3e:29:7c:d2:69:
d5:48:d7:9e:45:77:5d:2b:3a:78:0c:ad:c1:d4:c4:
16:eb:dc:5c:a7:c6:f9:60:57:b3:8c:f5:84:5c:3a:
c4:5b:2b:36:68:36:55:3c:aa:d0:13:3e:f1:bd:24:
50:c8:b7:e8:4c:b9:e6:15:01:59:cf:e2:53:8c:c0:
f3:34:b5:00:2c:bd:56:eb:85:33:c2:8f:8b:b7:ca:
88:d3:56:3f:a1:67:cb:6b:65:3c:28:18:aa:88:30:
87:e9:12:de:fa:80:05:1e:bf:67:3f:b8:50:05:17:
8e:70:2a:cf:c4:f0:6e:51:e6:d7:fd:29:ba:a6:a6:
cb:4f:57:cc:81:ab:b0:fd:3a:48:ac:18:d2:b8:3a:
80:cc:72:27:d0:a4:cb:ef:39:0c:39:40:c6:39:4a:
45:b5:4b:83:6c:45:8e:01:90:e7:bd:b0:73:12:bc:
a7:a6:40:f3:a8:fa:e3:ad:b8:cc:1f:70:0a:dd:ea:
94:23:f5:17:ca:0f:82:0d:92:8c:5f:48:dc:de:06:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:64:F3:AC:D6:E7:22:FB:D2:E7:8A:D7:E7:B3:FB:B4:81:8B:08:32
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:813::/48
Signature Algorithm: sha256WithRSAEncryption
aa:2f:ad:31:82:a6:19:09:36:40:4a:c2:75:f1:fa:82:0a:75:
d9:ed:4f:2f:1e:c4:38:d0:2a:47:c5:8c:5c:42:56:0c:8e:2d:
d6:a5:c0:bc:e1:df:57:7c:85:c0:41:5a:c2:6a:de:f3:27:39:
58:1e:18:41:e0:20:ab:93:9a:e7:50:58:84:82:61:ff:6f:c3:
d5:81:10:d1:a3:f1:cf:ee:c2:01:a0:24:8e:a3:8f:52:74:8d:
5d:44:34:54:d1:62:a8:b6:99:e8:06:48:90:fc:9a:ba:73:9e:
63:8a:ec:b2:6b:d0:73:26:ec:32:ee:21:e5:46:ec:41:71:98:
10:42:bd:80:1e:cb:1c:0c:15:d3:1a:35:a6:a6:83:94:66:ba:
af:ab:6c:af:dd:cd:65:42:2e:98:c4:fc:c9:4b:38:63:6f:d3:
86:b4:60:af:ae:1d:e7:29:95:08:ca:9d:0e:55:3a:f6:d6:fb:
89:8c:f1:c6:aa:f7:b9:55:7f:45:a7:eb:95:fa:91:2a:cc:b0:
6a:3c:01:e3:6b:57:fb:a0:07:92:fb:cf:d9:7d:bf:cb:e8:5a:
fd:73:8b:2f:21:ca:7f:a5:bf:b4:fd:42:dc:79:99:95:c1:a8:
ed:26:12:fc:5f:9d:a5:4a:f1:e5:71:d9:5b:95:fe:7d:68:d0:
ec:f6:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:20 2025 by rpki-client