Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa
File: AS210146.roa (raw, json)
Hash identifier: 5x3f2Q2BEYdyLuhhbRhBZA32mtGCaIOQiuHjJWgeRL4=
Subject key identifier: EB:2B:6F:E9:2E:0B:7B:FB:FE:3D:C0:F7:18:76:71:2C:24:B5:0C:EA
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 49FBE78674BDDFF2CBB91C9BB474B4D135E3F7F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa
Signing time: Tue 22 Apr 2025 14:22:40 +0000
ROA not before: Tue 22 Apr 2025 14:17:40 +0000
ROA not after: Tue 21 Apr 2026 14:22:40 +0000
asID: 210146
IP address blocks: 2a14:7581:fee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fb:e7:86:74:bd:df:f2:cb:b9:1c:9b:b4:74:b4:d1:35:e3:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 22 14:17:40 2025 GMT
Not After : Apr 21 14:22:40 2026 GMT
Subject: CN=EB2B6FE92E0B7BFBFE3DC0F71876712C24B50CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:d3:d8:c7:38:e5:78:20:39:66:90:60:1b:
e9:95:96:0a:15:89:f0:68:d8:95:d8:75:95:78:1e:
cd:ba:09:bf:8b:97:24:32:ab:cf:e5:83:1a:6f:e5:
3a:60:f8:7a:98:3d:a8:bf:ee:45:95:9d:9a:03:0d:
e5:10:38:29:8f:9b:8d:43:cc:09:1b:d8:36:0d:a0:
89:4c:e7:7d:fb:8d:f3:73:b6:d8:e9:01:7e:7d:22:
c1:15:99:c4:5a:ae:d2:8b:58:61:19:3f:d0:23:ca:
72:56:b7:49:9a:df:9d:57:8e:f4:45:c0:01:bb:1d:
b1:11:d6:a9:5a:80:33:de:76:98:e2:91:fe:9b:c6:
3e:d2:7b:c7:36:cb:28:f3:51:d5:73:5d:cb:a9:0e:
39:66:92:fe:37:89:00:48:00:12:73:f8:b9:f4:1a:
84:d5:35:28:17:73:90:c6:2f:85:b8:03:82:5e:93:
be:c3:ea:a0:45:8a:b7:f0:39:bb:9d:bf:f7:bc:40:
fb:bc:da:89:dc:1f:12:3c:d2:a1:b1:0e:38:f6:59:
0d:6b:e2:df:48:71:21:7f:f7:6b:17:d1:5d:d9:77:
e5:86:61:d8:5a:f0:45:6c:bd:15:1f:fe:38:74:97:
26:e8:b6:bb:c4:4d:58:61:e6:9a:aa:e8:cf:79:f0:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:6F:E9:2E:0B:7B:FB:FE:3D:C0:F7:18:76:71:2C:24:B5:0C:EA
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fee::/48
Signature Algorithm: sha256WithRSAEncryption
70:08:b6:64:b5:d3:c8:38:d8:a8:7e:33:30:8e:c6:85:8d:6e:
53:3a:5e:ab:ed:74:b6:3b:a3:25:9d:94:ac:af:ee:4d:38:86:
de:e3:a2:8f:88:91:d7:9c:b4:25:de:77:57:2d:cd:2b:c7:fe:
fe:4c:92:b9:51:0f:3d:b2:e4:13:19:ea:49:12:c2:11:40:12:
b4:06:58:1c:bb:af:70:de:09:5b:db:cf:ce:17:b8:8f:95:38:
61:4a:c3:29:95:1c:63:00:ab:17:83:e5:6b:b4:2d:e3:25:83:
aa:b7:63:8e:a4:a7:14:5a:87:ff:55:5e:53:5b:b1:89:ee:ae:
5b:66:d3:f4:af:e8:7f:94:6a:ee:d8:40:d5:72:45:bd:85:2f:
9e:29:86:1f:32:5d:71:70:17:a4:3f:5c:3a:de:81:6a:48:17:
9f:97:44:d2:8f:36:36:49:77:8e:2d:8c:46:d7:7c:ba:6c:35:
f8:18:a3:9d:16:57:dd:45:77:bc:8b:5d:a9:c0:ae:a2:70:e4:
bd:83:3c:6c:a8:93:e7:77:7f:2d:bb:73:02:76:e8:73:b1:be:
f8:3e:2a:bd:4f:33:13:54:55:9a:fc:02:c8:5c:a3:dc:aa:56:
d9:97:c2:34:d6:6c:b0:a6:ac:ac:62:de:cb:52:ec:31:ba:06:
40:c0:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:20 2025 by rpki-client