Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215142.roa
File: AS215142.roa (raw, json)
Hash identifier: 8rOeOQXUonyXoipDujRVlLcNM+nEtBD04aNc5xU9DY8=
Subject key identifier: E6:C5:79:77:D1:7C:19:5E:57:9F:62:B0:3B:21:56:D7:5A:10:F8:06
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 04A7DD34FED2ACCD06BB87A7EF80AFB03501D0B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215142.roa
Signing time: Tue 08 Jul 2025 05:55:00 +0000
ROA not before: Tue 08 Jul 2025 05:50:00 +0000
ROA not after: Tue 07 Jul 2026 05:55:00 +0000
asID: 215142
IP address blocks: 2a13:9500:a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a7:dd:34:fe:d2:ac:cd:06:bb:87:a7:ef:80:af:b0:35:01:d0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 05:50:00 2025 GMT
Not After : Jul 7 05:55:00 2026 GMT
Subject: CN=E6C57977D17C195E579F62B03B2156D75A10F806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:d1:65:99:df:f0:e8:a0:69:23:a4:c1:e5:
d8:13:ef:48:ba:4c:81:ec:0a:40:57:91:54:da:6c:
8d:b7:1b:74:d2:b9:e9:22:fd:6c:6d:a1:83:68:4f:
8d:a0:2a:a6:ba:e9:fd:b8:26:1b:0c:8c:f4:04:a5:
fe:97:e8:8a:b2:da:5f:16:92:68:1b:dd:81:23:31:
d0:b6:cb:77:8f:54:42:bb:ec:6f:d6:31:f5:da:78:
b9:f4:5c:8c:90:c3:29:24:30:c3:ea:19:5a:5f:31:
9b:fd:a3:17:88:6c:cb:4b:ae:b7:68:b8:05:a0:55:
5e:6d:7f:28:cd:b6:68:04:2e:15:50:64:61:da:0f:
95:07:64:61:84:c8:ce:26:8c:5b:12:29:57:10:c6:
af:d0:f1:fa:eb:d2:7e:04:03:eb:21:7a:00:39:ba:
65:5c:f5:23:f4:d2:94:f1:5f:99:53:09:ba:af:94:
1e:b8:53:26:d9:8e:9c:55:1d:cf:0e:58:cb:0f:20:
08:e7:7b:f0:5a:44:f1:c5:c5:47:df:e4:bd:e6:ae:
5b:b9:f5:d6:85:8b:a9:cb:a9:12:9d:c1:22:44:3a:
c8:41:40:63:1b:c0:23:01:3a:f9:05:8a:a5:bb:97:
c6:ba:43:3e:24:a0:21:6d:01:27:21:8f:07:ba:e9:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:79:77:D1:7C:19:5E:57:9F:62:B0:3B:21:56:D7:5A:10:F8:06
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a8::/48
Signature Algorithm: sha256WithRSAEncryption
70:9d:0f:fe:2c:8e:70:37:34:c0:7a:79:4e:da:e1:7c:61:f5:
66:bb:29:62:36:a7:bf:86:b8:39:86:be:bb:fd:b1:96:a7:3e:
92:03:4d:63:ae:dd:ff:ab:17:0f:65:fc:f2:b8:74:97:ee:83:
ec:43:6b:8d:01:0b:b6:0f:ec:7e:df:df:65:d0:68:16:7a:64:
80:88:9f:cf:b6:0a:d3:4f:3a:10:cb:d7:7a:43:84:90:d5:bb:
d2:43:ab:08:01:aa:12:68:ed:71:2e:15:44:85:fa:71:93:c6:
a7:f4:41:f8:71:be:af:41:83:f4:4e:1f:f3:14:62:7b:3d:3f:
01:f6:d5:23:98:1f:22:ec:b4:8c:11:9e:bc:86:2b:3a:a5:8e:
3f:1e:6f:95:e5:4f:6b:a8:ac:53:eb:54:8b:1d:f5:12:7d:ef:
8b:63:9d:22:ca:14:32:64:31:97:b6:2f:86:98:5b:3f:1c:2b:
29:80:52:4d:72:68:50:87:64:9f:8f:86:34:e4:5b:77:49:e8:
c1:6c:14:d9:c6:23:e7:26:10:5d:a9:68:a6:67:f1:62:28:61:
46:b2:0c:13:b0:71:8e:50:1a:4e:34:d1:e3:d2:6d:5e:f4:8f:
b8:61:3e:c7:58:71:69:80:ca:b6:c0:37:5e:0e:41:e9:67:9f:
26:c2:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:55:47 2025 by rpki-client