Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: Xr/OAGLwRcw6Iomn48gDE3/Wjc5ozo49T0JQd90uZg4=
Subject key identifier: 3A:C3:F8:D5:09:50:99:8A:EC:74:B1:E1:E3:46:27:14:F7:B7:B1:DE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 61837FCC8E6C33081D54022080E1147F7DBF6B81
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Tue 15 Apr 2025 23:19:05 +0000
ROA not before: Tue 15 Apr 2025 23:14:05 +0000
ROA not after: Tue 14 Apr 2026 23:19:05 +0000
asID: 214025
IP address blocks: 141.11.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:83:7f:cc:8e:6c:33:08:1d:54:02:20:80:e1:14:7f:7d:bf:6b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 15 23:14:05 2025 GMT
Not After : Apr 14 23:19:05 2026 GMT
Subject: CN=3AC3F8D50950998AEC74B1E1E3462714F7B7B1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:8c:30:f6:0b:02:46:58:d2:74:db:aa:e9:
5b:3b:e8:be:e1:8e:2d:09:de:b6:b4:56:01:9d:f5:
7c:5d:a9:25:fb:ce:a9:cf:be:50:ed:7b:b1:4b:5e:
7f:7e:63:c0:ce:7c:e6:48:62:b9:da:f0:b6:37:c3:
5a:43:b8:dd:5f:e8:a0:69:75:aa:c5:79:ec:5c:6a:
1d:4f:15:d2:ce:69:80:ae:b2:d9:2e:f4:99:04:3c:
77:c2:bf:93:ca:02:bb:a1:33:87:42:a1:1f:a0:9a:
68:e3:c2:79:2e:f7:12:24:e3:8c:dc:ab:28:b1:c4:
25:ef:78:b0:94:e2:52:4c:d9:fb:48:a2:04:80:ef:
3e:0f:6f:e7:25:78:98:56:d1:d7:1b:dc:12:e1:c0:
0e:05:67:51:53:38:8e:83:ad:67:db:54:f0:e9:0f:
82:a4:39:0e:fb:80:25:79:0d:9a:1c:25:f6:a3:af:
c5:7b:eb:60:83:ec:74:8c:48:22:e7:de:3c:0b:bc:
34:86:75:f5:a7:aa:9e:28:97:59:2c:78:82:89:3a:
18:c0:f6:c5:ea:20:e1:b8:76:bf:91:f6:25:c5:86:
5f:41:c1:d9:22:f5:61:f2:2e:04:19:4c:68:7f:e1:
9d:3f:20:e4:d8:26:2a:78:a0:5e:69:6d:be:6d:2c:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:F8:D5:09:50:99:8A:EC:74:B1:E1:E3:46:27:14:F7:B7:B1:DE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:60:2e:45:42:8c:fe:0b:1e:6e:5d:1e:f2:65:e3:7b:4c:3e:
5a:df:fc:c5:61:85:ba:2a:21:31:d6:e5:46:32:b3:2d:43:46:
4d:8f:6d:bf:f3:cd:3d:2b:ab:8b:de:17:21:33:2c:e7:f1:eb:
3a:36:79:85:c3:99:53:21:6a:9e:90:30:ee:a8:7e:0a:f1:66:
1a:16:54:22:ff:4e:16:e1:c1:2c:d8:9e:d1:ff:47:03:48:10:
ae:7f:8a:d7:0f:8c:12:f4:f1:9b:c0:05:29:ff:11:70:c7:78:
fb:e9:60:6e:e4:d4:a8:d4:3d:59:00:bd:4f:11:81:bd:81:c0:
39:64:f8:29:3f:07:66:2a:18:32:10:4c:0b:a0:3c:9b:65:14:
cd:d5:b1:1e:5a:00:07:6d:f7:fd:68:ff:60:1f:6d:06:71:98:
c7:42:7f:bd:7e:6b:bc:5f:5b:cf:c1:88:f8:77:42:78:90:79:
68:51:2b:a8:06:12:71:d8:e7:04:e3:45:9f:59:81:be:70:7c:
b1:c0:e2:e4:b2:e9:c0:61:85:1e:2b:b9:5f:39:19:56:b0:f0:
47:d2:0a:92:e5:63:76:ae:f2:c0:77:4d:d1:fd:10:d8:bd:fe:
04:78:7c:ae:bf:2c:0b:27:ba:02:9f:d3:bb:f2:f8:ed:03:d9:
fe:56:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:22:45 2025 by rpki-client