Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
File: AS214906.roa (raw, json)
Hash identifier: 8bit6HU9VAMkA2miBSqqxl8+86/wNW9KDqr1j2wRXXo=
Subject key identifier: E4:55:A5:34:69:01:11:3E:87:24:72:FA:72:BE:99:E8:58:4E:16:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 527A236274FB89BBF1E96F0CC970839C3CF1C2D5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 214906
IP address blocks: 2a0f:85c1:3f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:23:62:74:fb:89:bb:f1:e9:6f:0c:c9:70:83:9c:3c:f1:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=E455A5346901113E872472FA72BE99E8584E1641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:fe:c4:cf:73:f3:64:d4:a2:89:b1:34:8c:
fc:f0:f3:06:c7:ed:b1:86:e5:0e:fe:5c:77:51:b1:
c4:ee:d9:56:09:b2:e1:cf:64:cd:aa:f8:e0:c1:e3:
b8:da:49:3c:bc:ab:be:8d:eb:57:77:cc:08:d7:5c:
91:cd:5e:55:54:7a:49:0f:ef:37:cf:13:72:e4:88:
08:dd:40:47:5e:e7:84:de:17:ca:93:bf:e7:f7:43:
95:9c:b1:68:32:10:d4:fc:a5:1a:53:30:01:22:e8:
45:6b:95:14:fd:0d:b4:f5:c5:35:d2:3a:bf:c5:24:
f3:07:af:ba:54:50:ed:81:38:91:d4:22:0b:ac:9c:
27:15:db:08:2f:86:47:1b:62:4c:68:0b:be:ed:4c:
0b:c6:5b:f2:44:fc:f8:66:a2:4e:da:19:92:5e:1f:
f5:a9:27:1c:9a:84:1c:eb:17:06:33:4f:71:25:49:
81:ba:44:75:02:e3:fd:5f:b6:b4:b8:72:e0:0e:f7:
7e:ae:57:1e:6a:7d:c4:9a:ab:66:b5:a7:4e:41:5e:
6d:85:2e:c1:54:c0:fb:d9:fc:f1:3d:7e:70:6a:8a:
6a:64:70:aa:2e:50:d5:c1:e7:95:e4:84:7d:a2:97:
25:63:e6:f3:bd:ef:f3:de:b5:e9:ff:1a:a7:23:e0:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:55:A5:34:69:01:11:3E:87:24:72:FA:72:BE:99:E8:58:4E:16:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f2::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d2:e6:40:09:13:da:dc:dd:50:92:71:e0:e3:f7:99:96:1a:
1f:15:d2:10:83:78:0e:b7:fd:19:60:22:8f:b8:d9:ff:3d:11:
0a:88:6e:ef:88:5d:3f:1f:e5:a5:3b:3f:bb:21:d3:6d:11:fe:
21:e8:69:6c:30:3b:b3:fa:01:06:93:7b:29:be:b7:b9:54:33:
ee:d0:63:00:fd:55:fd:a0:1b:cc:7e:aa:86:2a:24:54:89:54:
dd:3e:b0:9c:60:50:72:ed:37:60:36:7f:75:72:b4:0c:e7:8e:
18:2a:5a:bd:9a:11:80:15:81:a2:8a:c1:af:7a:f0:3a:31:48:
16:ad:7a:27:83:74:bd:1b:1f:e4:e1:7f:7a:b0:4a:93:7e:bf:
3c:8c:6a:27:48:4f:0d:12:c9:77:c0:be:a2:b2:d8:07:5a:72:
9a:81:9c:7c:35:f4:d5:06:c3:e7:7d:c2:d9:8a:46:37:21:a8:
c2:ee:b1:f3:e8:16:05:bc:ae:98:d0:38:55:a2:c0:97:35:7e:
8a:91:9d:b5:7c:69:e9:b7:3a:30:17:7b:4d:0c:ff:c5:83:d3:
de:19:e8:0b:cd:0c:7f:ca:5e:fa:05:16:98:c7:67:bc:60:37:
a5:e8:db:ca:65:cf:6b:f0:1e:1c:c3:ca:55:16:21:99:9f:f7:
d5:09:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:37 2025 by rpki-client