Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214439.roa
File: AS214439.roa (raw, json)
Hash identifier: A+abbSPSkgnu9NpirYj2zxoCRkpHDcWcnPueZeu5SBM=
Subject key identifier: 45:08:89:69:B3:7F:2B:D3:CD:58:3E:3B:4E:72:EB:C5:6D:C9:AE:60
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 475892E8BBE63DB2FBA0A7C87B8C4278A0741A38
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214439.roa
Signing time: Sun 24 Aug 2025 12:05:01 +0000
ROA not before: Sun 24 Aug 2025 12:00:01 +0000
ROA not after: Sun 23 Aug 2026 12:05:01 +0000
asID: 214439
IP address blocks: 162.141.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:58:92:e8:bb:e6:3d:b2:fb:a0:a7:c8:7b:8c:42:78:a0:74:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 24 12:00:01 2025 GMT
Not After : Aug 23 12:05:01 2026 GMT
Subject: CN=45088969B37F2BD3CD583E3B4E72EBC56DC9AE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:da:0a:53:47:c3:09:00:0e:28:0d:f4:37:
c1:90:6e:85:8a:00:a2:8b:96:57:fd:ce:75:bd:35:
b1:fa:13:e5:db:c0:b9:2d:66:5f:a1:98:a8:f1:44:
b0:4a:b6:8b:8a:e7:ee:28:05:d5:94:e7:cb:1a:99:
e9:db:78:c9:6a:83:fa:d7:f6:75:ef:f3:ab:e4:bc:
92:2a:f7:c9:db:b6:07:a2:97:2b:b4:20:c4:10:4c:
aa:bd:d6:fb:48:74:a5:e9:d5:e9:46:52:03:af:52:
24:d4:1b:d5:49:ae:8b:05:c3:d9:87:22:4e:ce:a9:
16:34:03:d4:42:a5:ed:6c:84:91:a7:67:70:30:81:
a0:c3:1b:ba:e5:07:ce:5b:5b:24:e6:c3:56:98:90:
13:28:82:3f:fa:21:dd:7b:2b:78:3c:79:e9:99:ef:
4f:99:b4:b2:7d:02:4a:ce:c0:10:cf:12:6f:ee:19:
e4:b7:85:7f:fd:2e:ba:41:a5:4a:e4:63:75:c1:eb:
53:45:ca:e6:e3:9f:ac:3c:37:61:c6:1a:32:11:74:
a0:d6:c8:39:02:06:04:8c:ef:4d:f3:aa:99:8c:e6:
87:77:38:68:5d:0f:f8:b2:5d:e3:bb:cd:d4:32:dd:
8f:92:6c:f1:34:a9:1b:b7:ee:7e:d0:fb:94:38:30:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:89:69:B3:7F:2B:D3:CD:58:3E:3B:4E:72:EB:C5:6D:C9:AE:60
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f8:f2:3a:63:fb:7d:81:35:49:e9:0a:c6:16:99:85:6a:c8:
1b:f9:86:a9:89:2d:59:d4:1a:9f:15:09:44:75:8f:50:ed:2b:
1b:14:9b:24:69:c4:33:4b:04:81:6b:4e:28:5c:a5:19:fd:e1:
fc:c1:39:4c:e1:ed:45:bb:85:cb:0f:38:78:11:8d:f1:52:46:
a1:4f:04:c3:a4:0a:29:8d:fa:3b:8f:6a:0d:c5:51:27:aa:ee:
2a:14:9b:d7:5b:08:d2:c5:f3:a8:cf:9d:dc:ef:01:74:d6:10:
f8:59:e7:cc:ca:bb:57:9b:3b:ed:9d:98:b3:25:40:0a:d2:84:
18:65:39:c1:06:8d:38:e1:dd:f8:e7:3b:bd:bd:42:0b:31:44:
d4:d7:10:03:00:d3:03:b6:c1:43:99:51:75:e0:e3:9b:fb:c4:
c2:b7:6b:f3:ee:ee:d4:da:a8:2f:63:48:c9:24:26:3d:5a:2c:
c6:b3:6e:1a:ff:81:b5:e0:0c:7f:28:3d:95:14:f3:02:54:d8:
b1:0c:4d:ae:2c:fd:12:20:ea:4c:25:b6:07:2f:3d:f8:1a:2e:
7a:3b:be:2a:1b:e0:7a:04:5d:af:1b:e6:cb:19:bf:5d:5f:ec:
34:a8:6c:f8:84:e0:4c:05:14:b5:ef:a5:7a:48:38:c6:57:3e:
cd:f4:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:46:57 2025 by rpki-client