Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
File: AS214818.roa (raw, json)
Hash identifier: 7uSemQD3Yhrg7oLa7MK15HOJoZvLfdKhLaq2j0x0aoc=
Subject key identifier: 44:3D:EF:16:BF:76:70:06:FD:D2:8F:A9:BF:CC:EE:D3:98:62:3E:E2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 36C02EE836B20D560CEE0B0EC3800ADF37A633AA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
Signing time: Fri 25 Jul 2025 08:07:36 +0000
ROA not before: Fri 25 Jul 2025 08:02:36 +0000
ROA not after: Fri 24 Jul 2026 08:07:36 +0000
asID: 214818
IP address blocks: 2a0f:85c1:808::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c0:2e:e8:36:b2:0d:56:0c:ee:0b:0e:c3:80:0a:df:37:a6:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:36 2025 GMT
Not After : Jul 24 08:07:36 2026 GMT
Subject: CN=443DEF16BF767006FDD28FA9BFCCEED398623EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:f7:63:72:ae:fd:4d:ef:c8:f1:65:f0:77:
52:b4:7f:e6:a3:4c:ae:5e:09:58:79:d2:48:f3:d7:
c4:7f:0d:c9:2b:dc:12:09:22:1d:e9:68:38:c8:a6:
a5:e2:81:ac:69:9b:9e:f3:6d:a1:ce:81:6e:18:88:
5b:dd:01:d8:b1:5c:dc:7d:90:90:47:06:c1:20:0e:
05:74:6e:67:a7:c4:a6:25:fa:d6:c8:66:8e:2d:b3:
0d:91:e4:a6:3d:ea:51:f9:91:1b:33:fb:eb:61:d5:
a5:5f:c4:d6:cf:2c:d7:b2:a3:32:07:61:b0:8d:17:
94:7f:56:5b:19:32:a6:20:6d:1b:dc:d0:c4:f8:48:
d7:11:54:5e:07:ca:f2:02:88:af:85:0a:5b:ba:30:
27:81:97:cd:ed:57:52:bb:be:0e:b0:09:10:f8:9a:
68:3d:76:f8:15:7a:3d:9d:06:33:1d:bd:9f:ed:01:
80:3f:84:c7:28:c8:40:7f:bc:15:3a:5c:41:61:9d:
1c:37:6e:1b:57:94:ba:13:76:99:18:7e:aa:bf:61:
15:92:ca:e8:0d:ef:56:1d:d3:52:ae:f1:3f:ca:c4:
25:9b:a6:6e:c0:9e:67:fe:07:0a:0d:f9:d7:f3:8d:
c9:c3:17:8c:bd:37:b4:2e:5b:85:68:02:bc:ac:7d:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:EF:16:BF:76:70:06:FD:D2:8F:A9:BF:CC:EE:D3:98:62:3E:E2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:808::/48
Signature Algorithm: sha256WithRSAEncryption
3c:cb:e8:09:cc:bd:f8:54:93:7e:4b:3f:77:56:bd:23:9d:62:
98:69:a1:2a:fd:f5:81:49:0e:06:03:4e:aa:52:c7:02:55:9b:
34:35:26:26:9c:55:e4:ab:10:97:99:66:c7:a4:3f:d2:00:bf:
c7:a4:a3:7a:b6:26:20:17:aa:8d:66:8e:d4:e3:c4:a4:ac:c1:
0f:56:68:04:8f:5d:3a:a5:82:52:24:bc:2d:55:40:4c:c5:49:
34:85:63:71:bc:6a:7b:6c:56:ee:b9:0c:3b:25:37:f7:d9:4f:
5d:45:d1:be:34:39:fc:98:e7:b2:6a:67:9c:66:36:a7:1c:72:
f3:81:c1:f6:50:9a:92:a1:a2:52:a4:1e:4c:c5:d9:aa:25:79:
4a:9e:cb:1e:bf:85:f4:b9:10:2d:bc:b3:f0:4b:d7:87:4b:ff:
01:ba:3f:d7:03:4b:ac:43:76:38:6c:36:42:43:d7:3e:83:d0:
a7:fa:1e:6e:96:6d:a6:d4:e4:86:e3:ba:09:f3:fb:b8:cb:f6:
0c:16:86:3c:e1:82:a7:61:99:6d:98:be:d9:58:05:09:14:a1:
ec:63:99:de:d2:a7:04:d5:45:18:1d:e5:2c:20:f4:c7:98:b4:
40:6b:1c:7a:07:45:99:e4:1d:78:f3:eb:16:7e:a9:46:9c:29:
cd:af:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:57 2025 by rpki-client