Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
File: AS57142.roa (raw, json)
Hash identifier: S1mnxvnBXAkE2cgA0kVfQByPIbPAJNpxlcH/H4UzTeY=
Subject key identifier: 6C:87:C7:4E:A0:2B:D1:3B:38:4A:86:F7:FF:03:73:D8:FF:75:BA:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7657F9B012334EF9E2AD8426E15AF545B3741EA8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
Signing time: Thu 24 Jul 2025 17:38:45 +0000
ROA not before: Thu 24 Jul 2025 17:33:45 +0000
ROA not after: Thu 23 Jul 2026 17:38:45 +0000
asID: 57142
IP address blocks: 2a13:9500:b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:57:f9:b0:12:33:4e:f9:e2:ad:84:26:e1:5a:f5:45:b3:74:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 17:33:45 2025 GMT
Not After : Jul 23 17:38:45 2026 GMT
Subject: CN=6C87C74EA02BD13B384A86F7FF0373D8FF75BAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:a9:a7:4c:45:5a:79:1c:35:04:1a:c8:55:
0c:93:f1:0c:8b:3c:9a:c3:2d:c1:8b:df:c0:8f:8f:
0b:86:1b:06:58:89:a0:9d:2a:1c:77:a4:d2:3d:d6:
b8:d8:a0:db:91:02:0b:9e:de:43:ac:ec:ed:d1:4f:
17:9a:94:fe:13:d9:6e:42:16:99:d0:f8:69:65:0b:
ad:fa:cc:30:06:08:24:16:8c:25:14:a5:d4:84:22:
a7:2d:31:87:97:d3:e1:a3:a4:81:47:7c:98:42:1a:
11:ef:35:26:b0:1e:19:6b:5a:07:f4:e1:ae:75:04:
2d:37:72:4a:8b:85:dd:cd:3d:a7:5d:12:43:7e:95:
d2:28:73:7d:bc:e5:c8:75:90:a4:a0:30:d4:bb:50:
82:7f:42:46:5c:aa:cb:d2:fa:67:0f:32:8f:cc:c4:
dd:e0:dc:04:40:67:6f:f3:92:29:98:11:c9:7d:c8:
17:96:d5:a2:fc:5a:45:b6:10:42:ae:77:4f:2e:09:
a6:b6:0a:53:87:c3:df:f5:c1:fb:bc:96:ba:cc:bc:
90:51:6d:a4:b4:83:18:f5:5b:14:f3:74:13:82:1c:
88:a7:df:16:be:45:6e:ad:fa:fd:39:b6:df:db:83:
00:01:c5:1d:73:ab:82:fa:21:89:a6:f0:63:d3:23:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:C7:4E:A0:2B:D1:3B:38:4A:86:F7:FF:03:73:D8:FF:75:BA:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b8::/48
Signature Algorithm: sha256WithRSAEncryption
11:f5:42:56:2d:6a:44:61:1e:dc:f2:19:06:1b:9d:28:3f:45:
24:59:d6:78:12:5c:9a:81:68:b2:21:ef:63:7a:2c:fb:66:1a:
e3:89:82:26:b5:c3:a4:1d:04:cd:d0:de:fc:69:08:d2:73:37:
96:e9:79:70:0f:49:e1:df:14:d7:99:ad:47:8e:5e:73:9e:79:
0d:26:af:d0:74:c4:5f:5b:56:7e:74:13:ce:dd:c5:51:a4:d2:
9f:fb:63:a0:d1:99:6b:4f:66:b3:a1:f0:83:81:d4:75:7e:d8:
97:a7:39:c5:d3:39:f5:4d:b1:2d:51:e1:5a:ab:cb:02:2b:5d:
5d:16:95:62:8f:6e:c7:7a:68:96:f9:83:7e:e4:f5:5f:14:51:
73:d9:12:ef:8d:a8:12:23:cb:d6:cc:e5:ee:d2:1b:f7:03:35:
c7:da:92:c9:db:4b:85:3f:36:d2:fa:9c:48:8b:2a:91:0a:68:
cb:04:cc:dc:b8:15:81:9f:0d:9b:35:c4:f6:7a:8d:75:6f:9f:
c5:2f:90:3d:a6:a8:c1:11:e2:23:53:47:bc:94:1c:39:e8:0b:
ac:33:0f:f1:8a:8e:07:06:ea:08:fe:d8:4f:86:48:39:e0:e5:
62:53:8e:64:0e:a1:e6:a8:15:2a:18:78:c0:3f:7b:8f:ef:05:
cd:0a:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:42:12 2025 by rpki-client