Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: xw3yv5O9Ld0aeHwinX6syPdNeGcwW2sS4wSosv8lfks=
Subject key identifier: FC:5B:E4:D1:78:A7:7A:DD:6C:E6:0C:EF:B0:1F:68:63:A1:FC:9E:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3A0B468ABFB73B97AFEADD2D98CEA5DC8BB2AC93
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
Signing time: Mon 02 Jun 2025 16:38:34 +0000
ROA not before: Mon 02 Jun 2025 16:33:34 +0000
ROA not after: Mon 01 Jun 2026 16:38:34 +0000
asID: 214481
IP address blocks: 148.135.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0b:46:8a:bf:b7:3b:97:af:ea:dd:2d:98:ce:a5:dc:8b:b2:ac:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 2 16:33:34 2025 GMT
Not After : Jun 1 16:38:34 2026 GMT
Subject: CN=FC5BE4D178A77ADD6CE60CEFB01F6863A1FC9EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:87:4c:73:18:6e:47:27:5d:bb:60:58:89:
58:5e:e6:21:cb:69:75:52:1f:3d:73:54:fb:a6:e4:
99:a6:a8:9b:09:75:9a:fa:7e:4d:f5:eb:80:0f:38:
fd:da:a3:cb:af:d6:88:80:7d:94:ce:d3:cf:6d:03:
2f:c2:85:cf:e9:b9:f7:81:f7:22:29:89:fa:f6:f0:
42:1d:da:2f:41:c5:56:1f:cd:93:43:18:b9:45:9c:
86:83:31:ef:8a:8a:24:6c:dd:5d:e0:90:5f:d5:28:
90:af:91:31:8b:46:19:d0:e8:6d:e8:50:ef:20:94:
98:21:fb:fd:ff:fe:ab:d5:4e:b6:fe:8a:30:21:98:
0b:ef:45:05:2f:37:dc:d3:7b:8e:43:30:13:8a:70:
b6:c1:74:8f:01:44:d8:29:7e:45:ae:4b:55:4a:66:
2c:f2:ba:33:e9:02:45:8b:f2:0d:ad:d5:f3:e9:bf:
a3:b8:ab:2c:16:de:7e:14:9a:ad:ba:b8:cf:1f:4c:
11:16:ce:e9:6d:35:ca:48:b3:d0:7e:6e:7d:c1:fe:
1b:4e:2f:63:06:e5:c7:b9:3f:43:df:59:7c:cc:db:
e8:da:30:1e:6e:85:5c:38:87:85:c5:6a:90:2e:90:
69:e2:08:94:59:42:4d:ce:8c:61:eb:2e:ff:75:f3:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:E4:D1:78:A7:7A:DD:6C:E6:0C:EF:B0:1F:68:63:A1:FC:9E:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:48:44:c4:9a:a2:00:ef:ec:49:0d:82:cb:fc:c9:91:12:f5:
8a:1a:67:bf:c5:d8:e8:59:dc:f1:a8:6a:5e:23:4a:df:1e:2b:
ef:69:b9:7f:95:25:1a:45:09:b6:d0:8b:cc:e7:d3:c5:fb:0b:
e3:ca:7c:82:36:a6:c2:16:96:00:24:bb:ca:66:55:aa:bc:22:
24:d6:48:fc:19:f5:01:58:3e:ea:bb:b3:a2:e7:b2:71:d0:73:
f7:f8:f8:03:42:5c:96:08:28:86:07:19:e8:6e:30:0c:e5:85:
8a:d8:f0:86:30:2d:44:de:1c:f8:b5:24:b3:06:16:29:dd:de:
7a:22:31:61:4a:3b:46:77:96:80:69:3c:ec:41:4c:a7:84:8c:
bd:4d:72:a7:2c:76:d4:1a:65:8a:de:ae:d7:bc:c0:2a:e5:49:
b5:3d:75:f8:52:fb:d9:8f:99:eb:df:f8:b0:d4:cb:75:57:bd:
a0:a3:7d:e6:7d:7e:94:f3:a2:53:7f:e0:1c:12:af:ac:75:a9:
c2:81:55:d1:d6:f8:08:25:ee:ca:e0:02:f6:8b:21:22:32:26:
b9:98:c3:73:ea:8d:08:79:92:e0:6d:e6:e0:fd:8c:52:3f:dd:
56:bd:d5:13:80:e0:0f:d2:9a:8a:0a:85:77:8d:e8:36:28:cd:
43:86:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:22:13 2025 by rpki-client