Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: H9hXv07QhJTlbMJ4EtqiobyvyS93szrXvJhH8IAdVQ0=
Subject key identifier: 80:C3:EA:8A:17:6A:F9:B0:77:36:0D:4D:CE:EC:A8:BA:FD:EC:FC:65
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 11C91C76C8F8D2AD4927428CF79A79E46D4F2A81
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
Signing time: Thu 05 Jun 2025 07:48:59 +0000
ROA not before: Thu 05 Jun 2025 07:43:59 +0000
ROA not after: Thu 04 Jun 2026 07:48:59 +0000
asID: 2914
IP address blocks: 143.14.92.0/24 maxlen: 24
143.14.152.0/24 maxlen: 24
155.117.171.0/24 maxlen: 24
155.117.186.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.67.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.88.0/24 maxlen: 24
162.141.92.0/24 maxlen: 24
162.141.98.0/24 maxlen: 24
162.141.115.0/24 maxlen: 24
162.141.136.0/22 maxlen: 24
162.141.142.0/24 maxlen: 24
162.141.152.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
167.148.149.0/24 maxlen: 24
167.148.175.0/24 maxlen: 24
167.148.190.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
167.148.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c9:1c:76:c8:f8:d2:ad:49:27:42:8c:f7:9a:79:e4:6d:4f:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 5 07:43:59 2025 GMT
Not After : Jun 4 07:48:59 2026 GMT
Subject: CN=80C3EA8A176AF9B077360D4DCEECA8BAFDECFC65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:80:80:de:6e:ed:90:36:7e:90:9a:79:30:
40:80:49:50:8c:d3:91:39:84:f1:0c:92:88:7c:6f:
0d:30:b0:10:27:55:88:ef:e8:6d:ad:ca:07:5b:9f:
d4:ef:4d:62:ef:81:b4:69:20:4d:0e:88:15:f8:1d:
37:3c:f1:a9:4f:5c:3d:97:ba:56:e4:04:3c:f8:a6:
af:92:5b:dc:97:dc:b4:e8:12:9d:5e:50:ad:8c:b2:
38:45:ab:8e:dd:d5:18:b6:f0:d4:51:f8:f6:92:88:
f1:7b:48:a9:54:03:5e:97:b2:7c:29:b7:05:8b:49:
17:77:46:5c:2c:9d:4d:5a:fc:45:62:b6:7f:14:17:
41:c8:d1:d2:e7:9e:46:e7:a1:47:08:c3:44:b1:e1:
22:28:c1:07:83:f2:24:3a:58:4e:da:33:91:98:d1:
ab:cb:90:7c:60:51:91:fb:24:d1:68:a3:ef:cf:5d:
c9:74:ea:e9:57:9e:25:32:b5:2a:f8:88:5e:17:56:
ed:26:4d:25:90:db:2d:10:0f:16:a6:85:1b:c6:ec:
3d:01:64:5d:fa:18:d7:6d:42:0e:5c:37:de:b9:1e:
f4:cc:a5:d4:82:41:bb:36:31:37:ec:c7:70:eb:ad:
e8:dc:2a:51:23:78:79:74:91:28:7b:02:f8:06:de:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:EA:8A:17:6A:F9:B0:77:36:0D:4D:CE:EC:A8:BA:FD:EC:FC:65
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.92.0/24
143.14.152.0/24
155.117.171.0/24
155.117.186.0/24
162.141.44.0/24
162.141.67.0/24
162.141.80.0/24
162.141.88.0/24
162.141.92.0/24
162.141.98.0/24
162.141.115.0/24
162.141.136.0/22
162.141.142.0/24
162.141.152.0/24
167.148.40.0/24
167.148.149.0/24
167.148.175.0/24
167.148.190.0/24
167.148.197.0/24
167.148.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:11:71:a0:15:5e:0b:f3:54:3a:15:ae:1f:f1:fe:91:64:33:
78:71:2a:26:26:78:24:0d:90:c9:c9:89:42:d7:a2:60:b2:27:
a5:5e:a1:c1:80:9a:37:f3:73:85:56:9a:12:b4:7b:15:56:61:
04:d1:77:9f:2a:86:38:55:90:03:35:9d:bd:58:8a:c9:75:2a:
4f:37:10:17:49:1a:1d:52:1b:63:3e:00:44:de:9a:83:94:d9:
18:f0:76:5b:71:80:52:5a:4b:cb:6f:49:a7:d7:6e:74:70:4e:
2d:10:0e:9e:85:c5:b8:c7:23:91:bb:f9:d0:87:e1:f9:ca:ee:
2e:3d:ea:ea:a6:e0:d9:cc:25:84:1d:e9:79:38:18:3b:cd:92:
42:c5:2d:34:82:69:5b:06:b5:49:cb:fb:19:5d:75:a9:81:d5:
78:2e:6b:04:12:85:a6:3f:77:bf:fb:0f:34:b1:8e:9e:7e:ec:
1a:8e:ae:fd:2c:5f:fb:54:f0:2f:35:a6:86:dd:af:3e:38:63:
bb:64:60:2b:7d:9a:c3:4a:a5:4a:69:80:f3:1a:c3:cc:5f:d6:
00:1b:a7:95:c3:9b:03:8a:87:06:2c:93:e3:6c:fd:33:34:01:
5c:07:8b:eb:85:72:70:54:1c:85:9e:c9:67:b7:a9:bc:a7:14:
df:6d:a5:fc
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIUEckcdsj40q1JJ0KM95p55G1PKoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MDUwNzQzNTlaFw0yNjA2MDQwNzQ4NTlaMDMxMTAvBgNV
BAMTKDgwQzNFQThBMTc2QUY5QjA3NzM2MEQ0RENFRUNBOEJBRkRFQ0ZDNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2oCA3m7tkDZ+kJp5MECASVCM
05E5hPEMkoh8bw0wsBAnVYjv6G2tygdbn9TvTWLvgbRpIE0OiBX4HTc88alPXD2X
ulbkBDz4pq+SW9yX3LToEp1eUK2MsjhFq47d1Ri28NRR+PaSiPF7SKlUA16Xsnwp
twWLSRd3RlwsnU1a/EVitn8UF0HI0dLnnkbnoUcIw0Sx4SIowQeD8iQ6WE7aM5GY
0avLkHxgUZH7JNFoo+/PXcl06ulXniUytSr4iF4XVu0mTSWQ2y0QDxamhRvG7D0B
ZF36GNdtQg5cN965HvTMpdSCQbs2MTfsx3DrrejcKlEjeHl0kSh7AvgG3ompAgMB
AAGjggJ9MIICeTAdBgNVHQ4EFgQUgMPqihdq+bB3Ng1Nzuyouv3s/GUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBkwYIKwYBBQUHAQcBAf8EgYMwgYAwfgQCAAEweAMEAI8O
XAMEAI8OmAMEAJt1qwMEAJt1ugMEAKKNLAMEAKKNQwMEAKKNUAMEAKKNWAMEAKKN
XAMEAKKNYgMEAKKNcwMEAqKNiAMEAKKNjgMEAKKNmAMEAKeUKAMEAKeUlQMEAKeU
rwMEAKeUvgMEAKeUxQMEAKeU0TANBgkqhkiG9w0BAQsFAAOCAQEAWxFxoBVeC/NU
OhWuH/H+kWQzeHEqJiZ4JA2QycmJQteiYLInpV6hwYCaN/NzhVaaErR7FVZhBNF3
nyqGOFWQAzWdvViKyXUqTzcQF0kaHVIbYz4ARN6ag5TZGPB2W3GAUlpLy29Jp9du
dHBOLRAOnoXFuMcjkbv50Ifh+cruLj3q6qbg2cwlhB3peTgYO82SQsUtNIJpWwa1
Scv7GV11qYHVeC5rBBKFpj93v/sPNLGOnn7sGo6u/Sxf+1TwLzWmht2vPjhju2Rg
K32aw0qlSmmA8xrDzF/WABunlcObA4qHBiyT42z9MzQBXAeL64VycFQchZ7JZ7ep
vKcU322l/A==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:44 2025 by rpki-client