Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210215.roa
File: AS210215.roa (raw, json)
Hash identifier: jlHmesoSiXYMqaa4eJP1DXfJcPLn4hsXMLGuZN1EKN8=
Subject key identifier: 0A:07:85:F4:25:65:D4:91:1D:8C:A6:C9:A3:86:00:6D:7A:2D:09:24
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 58CBF828199876E9ADF186535FF594E86E531701
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210215.roa
Signing time: Wed 16 Jul 2025 18:07:58 +0000
ROA not before: Wed 16 Jul 2025 18:02:58 +0000
ROA not after: Wed 15 Jul 2026 18:07:58 +0000
asID: 210215
IP address blocks: 143.20.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cb:f8:28:19:98:76:e9:ad:f1:86:53:5f:f5:94:e8:6e:53:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 16 18:02:58 2025 GMT
Not After : Jul 15 18:07:58 2026 GMT
Subject: CN=0A0785F42565D4911D8CA6C9A386006D7A2D0924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ab:59:7d:f0:e3:a7:b7:66:c0:7e:88:12:aa:
d5:fb:3f:34:b5:e5:99:70:ba:7a:ff:ff:5d:c0:bc:
cd:e4:88:1f:fd:22:f2:2f:5b:4d:1e:50:87:d0:05:
3c:e5:80:d7:42:91:eb:cb:46:83:27:d5:88:0c:36:
1d:84:98:ef:42:6a:f5:d6:50:15:32:94:7c:51:6f:
8c:65:fb:0c:4c:70:ab:1d:6b:fc:bd:58:7b:5d:dd:
fc:dc:c8:32:88:59:bc:39:bf:1b:b2:75:17:70:6f:
2b:01:e5:63:e8:d8:8b:ae:20:07:c2:1a:f7:5a:e4:
49:c4:b2:c7:89:bf:61:a2:3f:cc:ef:c1:ac:ec:37:
ce:64:6b:59:60:72:10:9e:84:48:40:02:98:f0:07:
06:67:b5:79:15:8f:51:d2:60:7d:fd:64:b1:8b:3d:
23:fe:b9:37:fc:9b:3b:7a:af:42:8c:e1:3d:ad:25:
af:dc:f6:06:cb:df:2b:59:f8:ac:b8:5a:9e:63:23:
6e:55:60:3b:79:6e:09:08:39:3d:25:31:de:f1:52:
b3:b4:9d:76:cb:88:69:56:e8:8d:32:f3:49:66:4a:
27:63:eb:d8:2e:19:df:06:62:d2:f2:cb:6f:9f:f1:
eb:e0:90:83:f7:5f:c3:64:47:4e:56:5e:9e:bb:d4:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:85:F4:25:65:D4:91:1D:8C:A6:C9:A3:86:00:6D:7A:2D:09:24
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.150.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:97:93:36:a3:df:db:10:bd:4d:cd:7c:1f:e8:6b:47:13:
f3:bc:fb:cb:5e:81:71:f8:00:b6:7b:e5:52:6a:30:08:2d:1c:
60:17:d3:ca:e1:35:1f:24:8f:b0:bc:38:8d:7e:11:1d:0e:16:
5b:d1:50:09:c6:97:53:18:a7:21:5b:d7:3e:93:31:39:a4:12:
2a:c5:29:3f:d0:14:cd:77:1d:1a:a3:f3:f3:11:cc:b9:12:eb:
31:e0:a0:d1:ba:64:2a:b4:f7:28:f2:f0:de:75:2d:2e:2c:97:
4a:d6:19:ab:3e:34:a0:b8:aa:94:94:5e:19:71:52:7f:ad:13:
07:73:a8:cd:1a:72:2b:c1:43:c2:c4:f6:62:d0:3a:a7:e1:79:
f2:da:a7:0c:fd:31:17:7d:93:b8:54:18:58:3c:2f:48:47:b7:
64:30:18:81:08:bf:ab:65:37:a2:4f:c1:f1:c4:b3:61:8a:d1:
c4:69:4f:bb:8f:ae:0c:27:71:86:f9:91:10:9b:da:43:8e:dc:
ff:a0:c6:8c:de:c6:1d:3f:b9:ad:86:2f:91:f5:ff:fb:a7:84:
e5:5a:94:17:52:62:f0:29:24:24:69:cc:af:64:07:f0:f3:05:
35:4e:1d:90:4c:0b:1e:63:b9:2f:1a:0e:e6:52:9f:ab:28:3b:
33:87:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:40 2025 by rpki-client