Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
File: AS214910.roa (raw, json)
Hash identifier: JRoZyqC5UiBveKjYOpvP90ZBPSdHmHBszWGNRHccN4s=
Subject key identifier: 5A:59:3F:05:72:E5:C6:2B:A2:65:31:93:CA:6B:43:BE:4F:69:A9:AF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4BB30950431814BB1C7972681E183B5663BD5897
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
Signing time: Fri 25 Jul 2025 08:07:41 +0000
ROA not before: Fri 25 Jul 2025 08:02:41 +0000
ROA not after: Fri 24 Jul 2026 08:07:41 +0000
asID: 214910
IP address blocks: 2a0f:85c1:3f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b3:09:50:43:18:14:bb:1c:79:72:68:1e:18:3b:56:63:bd:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:41 2025 GMT
Not After : Jul 24 08:07:41 2026 GMT
Subject: CN=5A593F0572E5C62BA2653193CA6B43BE4F69A9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:c4:0c:2a:04:46:54:65:3a:02:d3:3e:e0:
21:09:8e:36:f4:9f:b1:00:d4:b8:2e:9b:1e:5c:cf:
57:71:49:73:1a:56:16:4d:85:69:a6:f6:df:58:c3:
4a:23:d0:06:31:67:be:9b:67:58:ff:7f:92:e2:40:
9f:00:34:80:27:e4:2d:e8:fe:6c:5c:8a:05:89:11:
1e:5a:e8:bf:ae:5a:ad:38:fa:c5:e8:73:db:c0:e8:
1a:93:f9:b2:7b:67:02:d0:b8:c8:0b:d1:7b:a4:89:
1d:b1:84:5d:e3:d2:4d:e1:93:e7:88:11:44:c9:d1:
59:f1:a9:91:88:0e:da:d0:ac:68:fc:55:57:be:4c:
cb:0c:1e:2f:33:5c:cb:be:4e:90:7b:78:3f:f4:15:
64:1b:db:7d:44:6e:65:9e:f2:0a:18:d5:a4:2b:83:
39:7c:e4:bf:ba:75:67:3c:86:c2:3e:6d:36:a7:ff:
65:86:ce:7a:3f:a2:2a:72:6f:73:81:46:45:57:9c:
3b:6e:2d:a4:3d:8f:fb:e7:41:86:9d:1b:0c:6e:9b:
f9:cd:ef:5d:1f:db:8e:76:e3:20:2c:12:61:e5:9a:
ea:37:f7:d8:72:37:2c:6d:29:58:ef:5b:95:6b:8e:
1f:e1:98:54:61:e7:3e:93:bf:7c:5b:b6:14:fb:b8:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:3F:05:72:E5:C6:2B:A2:65:31:93:CA:6B:43:BE:4F:69:A9:AF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f6::/48
Signature Algorithm: sha256WithRSAEncryption
98:2d:47:d8:e4:37:ad:d8:1e:48:72:c6:38:b6:f2:d5:55:71:
91:fd:e7:0a:4b:7d:e2:81:11:fe:cd:8d:50:2e:03:5e:54:fa:
b0:eb:fd:91:ac:c8:e9:82:6c:7d:b9:e3:68:48:08:16:a7:9d:
6d:c7:c5:24:ec:1b:68:42:c8:fc:5c:47:0d:09:28:48:04:d4:
9d:fc:cc:be:93:f5:f8:55:66:79:ed:f5:ac:c0:f1:23:44:0c:
15:2e:a5:0e:2e:cf:73:c6:75:b0:4c:66:72:1e:00:1b:89:65:
3e:25:d4:24:ef:b9:7b:f7:74:f7:ec:1c:b2:1f:6d:80:7d:98:
c5:d6:88:9d:0e:49:e9:c4:60:40:12:6e:64:10:c9:7e:48:2c:
bf:cd:0d:0c:de:9c:b1:c5:c7:eb:e9:ab:63:17:5c:ec:bf:86:
90:69:16:6f:36:fb:bc:f0:92:c0:b6:32:66:9e:8f:38:8e:21:
99:6b:09:9e:50:8c:aa:bc:ad:5f:34:4f:3d:61:fd:cf:2e:a3:
c5:b5:68:45:3e:fe:2e:82:13:72:99:2f:ae:08:6e:52:4a:57:
d4:5b:f5:cf:df:d0:f4:a5:7b:df:f3:4b:02:c0:97:25:74:ae:
61:5b:2f:c5:4d:13:af:27:b7:35:d0:a8:ad:35:b2:5c:3c:86:
30:86:3a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:34:11 2025 by rpki-client