Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14061.roa
File: AS14061.roa (raw, json)
Hash identifier: pzk3hf4/PTAPIa8ufBUExkjvjlQiX1yC0T5z2zE/1sM=
Subject key identifier: D6:E5:48:E7:5B:AE:51:B1:10:FF:58:4A:41:56:B2:DE:BC:B9:0D:19
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3281C1169F34F552E7316871C0C854A44372C1B7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14061.roa
Signing time: Fri 18 Jul 2025 08:18:35 +0000
ROA not before: Fri 18 Jul 2025 08:13:35 +0000
ROA not after: Fri 17 Jul 2026 08:18:35 +0000
asID: 14061
IP address blocks: 2a13:9500:b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:81:c1:16:9f:34:f5:52:e7:31:68:71:c0:c8:54:a4:43:72:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 08:13:35 2025 GMT
Not After : Jul 17 08:18:35 2026 GMT
Subject: CN=D6E548E75BAE51B110FF584A4156B2DEBCB90D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:fe:16:44:82:41:b8:33:55:00:94:83:e2:
21:ec:00:11:5f:76:f1:ba:a8:22:3c:6d:06:40:d3:
a5:42:d7:0b:43:04:a9:2e:7a:f7:68:b4:55:f2:0c:
71:02:32:0b:a6:56:9f:b7:4f:59:c1:8d:41:15:f9:
7b:e2:3c:1d:62:72:8d:8b:a1:cb:15:cc:25:ea:3c:
0a:2f:6c:7e:69:dd:7b:9f:8b:28:30:f7:5f:a3:bc:
b1:c9:2d:65:f9:9f:c4:51:3b:14:2b:55:1d:d3:b3:
7e:44:07:20:a8:b3:6f:ab:48:28:ba:23:68:14:7e:
81:37:f1:e6:e8:d9:60:38:60:25:a7:b4:66:fd:c2:
ae:48:d3:52:ff:ee:fc:72:e4:97:2b:48:60:2e:fc:
07:d2:fc:78:cf:05:48:97:53:3a:eb:05:96:6d:60:
b6:06:4a:d3:ea:c9:d0:86:07:0d:13:7f:2d:7b:78:
65:cb:46:7b:32:86:69:0d:b6:bc:f2:62:89:88:d3:
1b:8b:3e:90:f2:f1:b7:06:d1:0b:35:00:95:85:95:
15:34:49:88:88:8a:d5:9b:35:2c:3c:a5:91:fa:3c:
25:79:82:9f:a5:6e:5d:50:59:e0:45:4b:63:99:80:
ba:17:64:0e:2f:f9:b7:dd:8a:2d:c4:6f:83:0a:35:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:48:E7:5B:AE:51:B1:10:FF:58:4A:41:56:B2:DE:BC:B9:0D:19
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS14061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b5::/48
Signature Algorithm: sha256WithRSAEncryption
99:6f:e2:76:9c:a0:58:fa:8b:aa:a3:36:b4:f1:f4:d2:49:d4:
7b:5d:8e:36:2c:9b:95:e8:a9:30:df:eb:24:d7:1a:0c:0b:ad:
b7:cd:62:a2:9a:77:17:ce:5a:cc:f6:39:20:39:e9:c8:bc:91:
2c:17:c3:fa:ca:42:4f:70:0b:ef:bd:35:5f:22:2f:6e:24:63:
4a:68:f5:27:31:cc:28:55:0a:37:02:79:ec:39:1c:0b:b5:e2:
cc:e8:07:25:23:6c:4c:7c:39:37:c2:63:7f:cc:fe:03:f2:7b:
d6:cf:f1:99:71:0e:84:a4:e8:97:b2:bf:8b:74:81:cb:d5:e7:
b1:0b:2a:d2:17:bb:d6:1f:d7:55:7c:6a:5c:04:7e:8e:ec:35:
d9:6d:ba:c8:9c:59:bb:1b:7e:11:b3:71:81:8a:d9:f8:f3:4f:
de:7d:81:4e:4b:fb:df:f5:2c:45:72:16:16:67:d2:d1:71:17:
a4:fb:e8:06:2e:10:95:0e:05:92:5e:5b:fd:fe:26:1b:3e:12:
c2:d4:0b:2f:94:c5:26:00:17:e8:9e:a0:91:91:57:e7:9b:69:
83:aa:15:1f:2c:c6:27:02:70:f5:d8:47:11:41:b9:3d:94:06:
38:6d:83:cc:39:43:7d:ea:7c:24:0c:a3:ac:f5:5b:df:28:e1:
d2:52:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:54 2025 by rpki-client