Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215084.roa
File: AS215084.roa (raw, json)
Hash identifier: tj9iGjyBqtXUBnqnd5GCoQnjcUPmgVpl4sb8ErlcGTs=
Subject key identifier: CA:A0:72:42:02:78:2C:E4:26:5F:0B:E9:69:0B:45:B9:8D:E4:4A:A1
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5A8466AF7D739159CD6F338CCEAD601EC9F98845
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215084.roa
Signing time: Fri 25 Jul 2025 08:07:44 +0000
ROA not before: Fri 25 Jul 2025 08:02:44 +0000
ROA not after: Fri 24 Jul 2026 08:07:44 +0000
asID: 215084
IP address blocks: 2a0f:85c1:3c4::/48 maxlen: 48
2a0f:85c1:80f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:84:66:af:7d:73:91:59:cd:6f:33:8c:ce:ad:60:1e:c9:f9:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:44 2025 GMT
Not After : Jul 24 08:07:44 2026 GMT
Subject: CN=CAA0724202782CE4265F0BE9690B45B98DE44AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:e1:9c:51:34:32:08:73:78:0c:73:b4:1b:
40:35:db:6e:07:29:5f:82:ce:4d:b8:ab:3e:8e:5c:
a6:32:c5:eb:c8:51:61:b3:f6:32:c9:d2:03:47:2f:
b2:0c:e7:92:2a:0f:a4:79:42:fb:c1:f4:03:61:df:
b9:d5:75:66:c2:ed:8d:df:48:35:51:45:84:9f:53:
cc:4c:70:9b:eb:8e:8d:17:4d:76:50:fe:fa:f2:a7:
a0:f9:87:33:21:93:c1:26:ce:a0:28:74:44:8b:23:
89:32:d2:09:b2:34:a3:ce:2e:8e:00:c2:62:d2:26:
df:91:5f:9b:2f:90:9b:b4:06:7e:67:f9:82:07:2d:
25:b4:ad:dd:e9:bf:fa:5c:cb:f4:81:66:ff:e8:17:
3a:2b:e6:4e:77:cd:30:30:82:91:00:a8:05:fa:8e:
df:ee:10:f5:ad:d2:bc:d6:b0:9c:75:24:0b:bd:5f:
3e:a4:90:78:c7:3b:79:40:f2:24:d6:fd:37:b1:6e:
49:37:16:3f:3a:0e:b3:ed:3a:a6:f3:a8:72:6b:13:
37:b1:4d:01:7f:df:a0:1d:6d:3b:42:da:e7:40:5a:
58:08:45:8a:b0:4e:fc:b2:d4:ed:29:8b:fc:62:e7:
6d:3b:36:a3:98:e9:3b:b7:a6:0b:66:93:ec:eb:83:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:72:42:02:78:2C:E4:26:5F:0B:E9:69:0B:45:B9:8D:E4:4A:A1
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c4::/48
2a0f:85c1:80f::/48
Signature Algorithm: sha256WithRSAEncryption
56:ff:64:b1:5c:4f:f5:f6:0d:05:a8:d0:6e:07:58:35:57:1c:
16:9a:29:0c:67:af:0f:db:a5:1c:c9:f6:87:58:29:79:32:34:
de:75:d6:a4:e1:4f:8d:ce:3d:7b:90:04:85:6a:cd:96:ba:89:
d5:0d:97:9e:6d:23:18:f5:73:49:91:03:81:b4:e1:47:93:7e:
54:1c:9a:6e:99:8f:06:39:19:65:9e:e3:69:9f:41:cc:c1:45:
00:33:51:06:52:c4:ba:3a:d4:15:20:73:f9:fd:04:aa:8c:d7:
65:86:e1:5b:74:2e:86:cc:61:97:27:7f:12:32:e2:71:54:b2:
d7:a4:5a:60:03:cb:d7:a8:4d:66:7e:7b:5b:8e:40:33:32:0e:
e2:cd:2b:56:77:bb:c6:c8:72:76:71:51:21:f8:bb:4d:43:ba:
55:0d:26:9d:46:11:e1:06:52:3a:64:d2:0e:d2:c1:83:f2:cb:
86:fb:3b:6e:d7:7a:2d:22:59:4b:0b:0e:65:ed:86:65:c1:98:
f6:78:a3:ff:73:33:d6:23:b2:97:67:43:c8:09:ac:81:75:55:
be:39:e8:12:93:d4:4d:17:40:3b:6c:c8:2e:5e:bf:19:29:7a:
4d:32:f7:c9:6c:25:6f:1d:61:17:a0:61:77:91:62:7a:9d:77:
47:37:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:18:15 2025 by rpki-client