Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
File: AS214965.roa (raw, json)
Hash identifier: mJ6WVgq7K+YQXSxV6IHcZoLB/KQTWZzse7AqGDJtPFs=
Subject key identifier: 35:97:59:91:CD:C2:C6:51:0B:1E:8C:D7:A9:BC:04:51:47:56:95:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3601534E221F7A1545C24A76E7B5EB0ED9AEA5E0
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
Signing time: Mon 12 May 2025 09:04:04 +0000
ROA not before: Mon 12 May 2025 08:59:04 +0000
ROA not after: Mon 11 May 2026 09:04:04 +0000
asID: 214965
IP address blocks: 143.14.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:01:53:4e:22:1f:7a:15:45:c2:4a:76:e7:b5:eb:0e:d9:ae:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 12 08:59:04 2025 GMT
Not After : May 11 09:04:04 2026 GMT
Subject: CN=35975991CDC2C6510B1E8CD7A9BC045147569536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:9e:f7:76:9c:8e:f3:b6:6b:ef:75:1e:e7:
f6:b9:32:04:a7:70:2c:de:b1:4c:15:9b:1b:37:82:
53:d0:43:75:cd:0a:72:31:7b:34:2d:15:39:b9:39:
e0:8a:5a:35:fc:21:8a:29:d0:0a:17:a5:d5:36:89:
28:3f:83:a1:a2:34:89:54:de:d2:c7:7c:e7:71:1b:
8a:c3:28:d7:c2:4f:9d:f3:14:1e:55:49:c3:2c:1f:
6e:85:9e:8a:5a:0e:3e:f4:ee:e7:2f:25:8b:9b:c0:
a8:d8:19:9f:4c:a5:3f:36:9d:11:54:fe:66:93:ac:
e1:4e:a8:9c:ef:0b:0c:21:12:bf:d8:71:80:bd:1d:
e2:20:84:cc:4f:c1:05:43:5f:a5:68:99:b7:95:35:
99:77:d3:4e:4b:fb:8e:e7:cc:57:04:a6:be:67:23:
ad:6d:e3:83:07:94:8a:cf:87:87:8d:fe:4e:49:5d:
83:14:76:c9:b3:9d:02:86:ea:7d:5b:98:f3:4e:e9:
73:83:72:21:32:5a:73:e4:39:c2:7d:0d:9c:02:6c:
d2:bc:b0:a5:ee:4b:f9:e5:3e:a3:04:ae:3c:99:b1:
dd:5c:33:d8:d7:d4:c6:01:d1:6c:06:b1:fc:eb:53:
c7:b9:fb:c0:6f:c7:be:cd:a4:16:0e:47:cb:46:cd:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:59:91:CD:C2:C6:51:0B:1E:8C:D7:A9:BC:04:51:47:56:95:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c5:f8:62:3c:a1:59:39:f0:a6:f3:41:85:37:55:ee:b9:e2:
3c:10:4a:96:5d:15:30:b0:c0:19:5f:8f:df:f8:cc:e1:39:cd:
4c:9f:cb:db:84:87:90:2b:1a:20:83:6f:91:c6:ab:93:a5:00:
21:7e:b5:fe:8a:49:a4:7e:f7:e2:de:a0:94:3b:17:72:3f:67:
44:ec:50:dd:19:73:1f:02:e2:d8:29:62:c5:de:f8:8f:b9:f9:
ce:b1:0d:55:cb:5a:fe:b9:d8:de:37:2a:30:b1:4c:4b:7a:61:
c9:a7:11:c1:c0:f2:40:96:a9:0b:b7:c6:16:fe:c6:ef:6b:7d:
81:d7:1b:c1:b9:1d:69:cc:e8:ac:a7:95:0c:56:60:cd:42:59:
fc:40:ae:ae:29:dc:57:0f:95:b5:d6:98:b2:c5:bc:23:3b:05:
0e:e0:60:cc:70:11:2b:46:d2:b4:db:87:38:0e:77:a6:be:fc:
0e:f3:c2:d7:a0:bf:1a:af:f3:cf:ec:2a:a0:20:86:68:85:6b:
b3:3c:53:8d:18:f2:04:f1:d2:72:29:d8:32:3e:0d:fc:5f:dd:
13:be:01:29:8e:42:cf:49:7a:3c:86:58:fe:a7:58:67:34:3f:
33:f2:43:1e:f0:04:99:b8:a6:62:9d:05:a2:e5:b8:03:8f:6f:
08:3e:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:00 2025 by rpki-client