Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
File: AS215134.roa (raw, json)
Hash identifier: 6Gz3oY38tUy9NCrEGGQUBWtWwLIdedFWCBSGFKxt4Fc=
Subject key identifier: 2A:F8:A9:57:88:37:8D:95:4B:38:65:CA:BD:AD:2B:97:47:53:DC:2C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6F47AB17D040A22D4A33B928A7950109A7E0BDB1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 215134
IP address blocks: 2a0f:85c1:3bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:47:ab:17:d0:40:a2:2d:4a:33:b9:28:a7:95:01:09:a7:e0:bd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=2AF8A95788378D954B3865CABDAD2B974753DC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:04:53:fc:74:e0:d2:86:3f:65:10:6b:a4:
a4:68:0a:69:c6:2b:69:f1:30:f8:f0:fd:c0:48:27:
6d:98:28:a7:50:9a:5f:0c:bb:5c:60:c2:57:3c:46:
61:75:3c:9e:d8:d8:97:35:6a:a6:20:11:cc:51:c4:
d7:e2:c3:6e:a8:51:56:ec:b9:5b:9b:8a:71:d7:c4:
80:60:e4:f1:87:b8:8e:c6:96:45:ce:81:a6:d3:42:
07:dc:1c:f5:3a:11:e7:63:a8:33:f8:fc:02:b8:35:
7a:fd:f7:fe:85:e2:3b:09:b6:24:6b:a3:49:07:60:
6a:28:b6:d2:69:82:da:bb:cf:48:82:af:07:6b:2d:
fa:ae:c9:6a:c0:91:83:52:58:96:fb:df:47:b1:76:
f7:59:89:0b:e9:8b:4d:8d:70:f6:52:2e:2a:a9:c2:
50:10:55:ba:c0:4c:c3:c4:6c:2e:6b:10:c1:58:f9:
9e:2d:59:85:1b:a4:ae:9c:69:75:2a:41:f1:2a:e7:
5d:fe:1f:f1:53:b8:51:39:96:fb:92:d0:f5:77:5c:
6d:47:bb:e4:15:d9:b3:87:00:67:1f:a6:03:c6:f4:
71:c5:f3:af:1f:c3:c0:d9:2b:db:b1:fd:c5:43:b1:
d6:a0:be:47:5d:96:35:c0:25:6f:ee:7b:ff:09:8a:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:A9:57:88:37:8D:95:4B:38:65:CA:BD:AD:2B:97:47:53:DC:2C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3bc::/48
Signature Algorithm: sha256WithRSAEncryption
66:5b:ef:af:6f:b7:e7:e5:97:51:78:0a:fb:39:bc:2e:81:f9:
59:e2:21:94:ca:36:15:96:78:cc:96:1e:e5:72:d3:39:1d:3a:
98:c7:16:61:28:14:8a:6e:7c:61:d1:42:51:fe:b4:eb:ca:01:
27:73:e9:12:de:3c:f2:6f:dd:90:57:6a:b5:e9:1b:58:da:0e:
71:f8:56:fe:54:cc:ab:c9:16:94:90:ec:e2:e7:5d:3b:03:1f:
e8:56:91:b9:c4:7c:40:ef:f0:e0:ca:9a:33:9f:dd:2d:e9:27:
b3:1e:e9:07:26:7c:40:a3:05:14:96:0c:bf:93:87:a9:a6:f2:
fe:46:72:30:4b:8d:d0:02:f3:df:ac:2a:d8:4a:47:f1:af:8c:
15:71:e7:de:c7:83:ac:cd:26:4a:f4:66:c6:2c:6c:4d:0b:f7:
d4:40:cb:5d:2b:13:77:6c:b4:e1:44:12:dd:8f:17:20:8b:4c:
80:a0:0b:6c:7f:0f:7b:15:c9:53:ed:36:0d:ff:d8:d7:59:f1:
b5:13:c0:e0:46:25:dd:44:17:74:45:e3:e5:17:32:04:5e:93:
d4:f3:d3:43:72:b5:00:cc:a8:48:87:73:7d:53:b0:04:61:e7:
c5:7d:8c:3e:62:0f:e8:e7:16:ea:82:9e:e8:b0:1d:e5:9e:53:
6d:08:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:56:55 2025 by rpki-client