Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa
File: AS214970.roa (raw, json)
Hash identifier: sG/J1Yb+A6TuwcGIvGn0+9ysa5FCtcw5XI3BY7iUrOM=
Subject key identifier: 49:15:9C:65:14:86:6E:91:98:9F:05:F1:42:7B:9E:77:2D:05:BC:64
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 371F4ED20D13BFB80FA26A59B19F8482B2B1363D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa
Signing time: Sun 02 Feb 2025 10:36:15 +0000
ROA not before: Sun 02 Feb 2025 10:31:15 +0000
ROA not after: Sun 01 Feb 2026 10:36:15 +0000
asID: 214970
IP address blocks: 45.95.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1f:4e:d2:0d:13:bf:b8:0f:a2:6a:59:b1:9f:84:82:b2:b1:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 2 10:31:15 2025 GMT
Not After : Feb 1 10:36:15 2026 GMT
Subject: CN=49159C6514866E91989F05F1427B9E772D05BC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:db:7c:d2:80:2a:09:a8:37:ec:6c:44:c9:
87:ae:7f:7c:1d:d3:15:cd:92:76:cd:87:d6:0f:ca:
1e:ae:33:12:ca:af:b2:97:f9:3e:f6:3f:7b:43:33:
a7:fe:a3:c7:38:1f:b6:a4:e0:84:8f:fb:31:7c:c2:
4f:f3:6a:4e:cc:5f:c7:24:40:ef:39:a6:18:8b:bb:
65:7d:89:e1:12:3c:c2:ba:5d:e5:c1:05:b4:40:90:
83:16:1f:02:20:a9:24:c5:25:32:f4:d0:d4:e4:72:
42:e1:cd:e1:52:c4:81:87:1b:66:2c:59:44:2e:6f:
9d:7b:0a:b7:99:3d:b9:68:95:11:21:0c:b7:57:f8:
dc:7a:1e:e4:a5:41:8a:2c:7a:02:73:60:cf:00:de:
32:f3:75:57:c3:de:bc:d0:89:5c:e5:e6:79:5f:16:
e3:28:b8:eb:66:f2:a9:12:2a:98:8e:a2:73:63:9d:
5a:6a:12:50:e2:55:10:f2:48:a2:b8:81:c0:c2:29:
4b:e7:d8:11:2c:75:ac:9a:1d:da:01:a0:bb:40:ad:
46:7a:0b:ff:81:cd:de:b8:99:55:75:34:3a:84:20:
70:7d:30:9d:8a:b3:08:f1:a8:45:d4:08:63:89:fe:
59:15:77:35:72:28:83:0b:24:6d:c0:61:fe:15:b7:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:9C:65:14:86:6E:91:98:9F:05:F1:42:7B:9E:77:2D:05:BC:64
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.38.0/24
Signature Algorithm: sha256WithRSAEncryption
90:17:0f:ed:bb:86:c2:25:24:54:7d:dd:33:6b:6f:4f:a8:57:
77:cb:f0:1f:ea:72:49:9c:8b:c8:7e:58:35:be:4d:18:2d:b2:
7c:3e:1f:e2:9d:d4:9c:8d:06:9e:53:53:00:66:f4:ac:4f:28:
f9:43:ce:ad:b7:da:4a:83:5a:76:d1:c5:aa:29:4a:17:18:2f:
68:68:5b:54:9d:aa:bc:f0:c2:34:27:77:6b:ec:73:ce:dd:a8:
dd:85:67:d4:02:8b:ed:8c:14:e1:42:3e:95:13:8b:f9:58:71:
97:af:c2:08:7e:df:1e:35:19:49:3d:52:31:46:7e:f9:4c:11:
e1:64:8e:82:88:94:b5:87:5d:99:4e:e0:1f:49:ba:39:c4:ed:
3d:98:45:e8:8f:1b:b1:4a:da:69:af:6b:a1:16:de:27:9d:4c:
08:11:07:58:42:f0:ac:c4:49:35:dd:84:1f:f9:70:25:c4:6e:
a5:8b:eb:3b:a7:9c:ad:b9:58:01:c1:24:12:d0:0f:61:9c:90:
ef:c2:64:3c:49:e5:70:46:10:e9:1b:7f:2a:44:6b:30:3d:d9:
64:6f:5c:e3:e8:51:b5:2b:be:50:01:19:4f:d6:bb:d5:21:d6:
dd:84:97:c2:38:07:77:09:a8:24:f1:d3:f0:75:50:80:e7:93:
2d:c4:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:25 2025 by rpki-client