Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
File: AS215114.roa (raw, json)
Hash identifier: oycKM0jjiLxD1WxC2NdWUc14XYspd03ppnohTAZ3Qyo=
Subject key identifier: 13:06:51:12:BD:73:52:00:E7:58:E7:32:2F:11:24:F8:9E:10:18:8D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 263AA1843976B99125C62581B3781F199FEB4089
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
Signing time: Thu 10 Jul 2025 10:56:03 +0000
ROA not before: Thu 10 Jul 2025 10:51:03 +0000
ROA not after: Thu 09 Jul 2026 10:56:03 +0000
asID: 215114
IP address blocks: 141.11.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3a:a1:84:39:76:b9:91:25:c6:25:81:b3:78:1f:19:9f:eb:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 10 10:51:03 2025 GMT
Not After : Jul 9 10:56:03 2026 GMT
Subject: CN=13065112BD735200E758E7322F1124F89E10188D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:90:94:03:ce:59:59:22:df:b0:3b:ae:aa:
73:e8:81:c6:df:e0:59:ef:c8:27:d3:77:ce:96:a3:
45:2f:57:26:e8:e6:3f:73:38:ad:27:f9:eb:57:7a:
46:75:a0:b9:b5:29:9e:7a:22:63:d4:1a:a3:57:f9:
d2:d1:c2:9e:0a:0e:ad:45:dc:fd:56:5c:bf:3c:d9:
59:bb:92:5f:95:e7:2d:41:d1:c0:07:16:2d:51:34:
42:94:63:34:90:f1:b6:2f:e1:e8:82:23:75:d9:22:
5d:12:03:9f:3e:21:2e:c6:17:59:16:bf:04:f6:c1:
49:71:fb:2e:25:49:07:76:59:4c:9e:ee:a7:3e:28:
43:a1:16:7c:b4:8b:90:94:c0:6d:45:07:e6:2c:3e:
fd:62:b9:94:0d:05:9c:a6:64:dd:f3:ea:46:cb:19:
e2:e9:9c:9f:af:f6:1e:9a:1f:e5:f4:d7:1c:cd:05:
a5:43:47:40:db:0d:9d:40:44:c9:1d:4c:a9:bd:2c:
f6:c6:95:8a:a9:b1:ca:f7:df:a9:14:ef:0a:35:cf:
3c:77:60:2a:84:5a:f6:32:64:31:60:3a:a9:0e:51:
bd:bf:90:86:83:25:27:0c:c5:58:89:39:39:25:92:
9e:14:74:df:c4:52:14:e4:c3:e7:26:0b:b9:f7:60:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:51:12:BD:73:52:00:E7:58:E7:32:2F:11:24:F8:9E:10:18:8D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.5.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1b:3c:ea:37:60:63:3d:9d:82:64:84:bf:da:b8:d7:c3:63:
1f:0d:0b:bf:c4:d3:be:16:a1:98:43:cb:e7:ea:90:35:20:5e:
91:ca:d4:86:82:b0:98:d1:c5:00:f7:82:0b:03:06:bc:18:39:
a4:70:f1:47:d6:bd:5b:f7:98:e3:d6:7b:12:15:ec:56:8c:22:
19:88:97:ee:d4:99:a1:5f:da:a3:4f:c0:55:c7:fa:1a:18:ad:
0c:95:ed:e2:a5:8f:20:39:71:98:d5:ac:29:36:0a:25:76:eb:
aa:e2:a7:5f:16:d7:3c:18:7d:43:2f:63:e1:0c:39:8a:b9:ec:
0f:48:3d:d7:3f:9e:f5:05:7f:31:c7:23:d8:e4:d4:f8:45:42:
87:c8:9e:b9:39:5b:22:56:9f:c3:fa:bc:89:13:18:97:7d:c1:
f0:31:28:14:35:eb:58:90:db:cb:a5:64:12:b1:61:86:77:3a:
3d:c5:33:a1:b0:76:fe:59:70:12:cc:39:4c:4f:0d:9b:f2:04:
a6:72:5e:4b:e2:bb:ec:db:5a:a1:4c:3c:68:02:a7:8c:88:91:
e9:92:4f:ba:94:fb:4f:c0:bc:52:7e:db:a0:c4:d5:18:01:90:
0e:05:81:8c:a1:38:45:d5:50:0e:f2:10:0d:ca:53:64:c9:fc:
e5:98:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:59:27 2025 by rpki-client