Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214083.roa
File: AS214083.roa (raw, json)
Hash identifier: 1zLk+B9NDfwLZJ9hHi8y5L2zpUrioSrLutwbIrtXkk8=
Subject key identifier: 9C:52:F9:4A:0D:53:0C:54:9E:52:39:61:7D:A0:E6:8F:21:1C:2E:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E3CB49546B7FB9D8E7F38328E6334A37E50A9E1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214083.roa
Signing time: Thu 15 May 2025 18:08:12 +0000
ROA not before: Thu 15 May 2025 18:03:12 +0000
ROA not after: Thu 14 May 2026 18:08:12 +0000
asID: 214083
IP address blocks: 2a13:9500:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3c:b4:95:46:b7:fb:9d:8e:7f:38:32:8e:63:34:a3:7e:50:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 15 18:03:12 2025 GMT
Not After : May 14 18:08:12 2026 GMT
Subject: CN=9C52F94A0D530C549E5239617DA0E68F211C2E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:da:02:70:34:e0:69:24:93:82:64:47:a1:
5d:47:2d:2f:2c:7c:4e:9b:00:43:c6:b9:8d:72:f4:
51:2b:a2:03:0b:fc:0e:0d:b7:b5:78:f4:31:3a:49:
3a:13:30:20:75:91:56:2d:fe:c6:d3:68:e4:85:61:
a3:46:43:86:a8:6d:ab:ea:39:90:3e:a7:44:71:df:
2d:c1:46:e7:d0:d2:e8:07:80:d9:be:df:94:a5:99:
45:98:4e:b4:e2:8f:1f:f5:46:a4:65:f7:d9:58:07:
4e:16:95:38:90:fa:91:ac:d5:d0:93:56:c2:04:8e:
f9:c7:7a:4c:46:69:68:12:c5:17:c4:fd:0f:22:c9:
cc:d1:e0:55:73:0c:2a:6c:b3:3e:37:5f:d7:2b:60:
bd:a6:ee:95:5f:d7:25:79:56:8d:33:19:07:8f:1b:
ea:ca:9a:08:c0:ce:9a:17:b2:bf:a1:30:7b:e5:4b:
94:0d:a8:56:e9:a1:fd:3f:bb:d6:35:4e:37:33:ca:
c7:a6:b5:07:68:f7:f6:2d:51:6f:24:88:ac:64:f2:
4a:c5:ef:13:29:c4:2c:af:d2:fb:a4:31:ba:5c:98:
a5:e7:92:ae:d5:bf:76:14:23:9c:b7:5b:cc:9c:82:
01:20:81:a3:55:71:8f:1e:af:ec:f1:f0:4b:28:9a:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:F9:4A:0D:53:0C:54:9E:52:39:61:7D:A0:E6:8F:21:1C:2E:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:42::/48
Signature Algorithm: sha256WithRSAEncryption
1a:df:6f:66:8b:70:b0:43:bf:e9:fb:1d:ea:d3:1c:df:3a:df:
b6:eb:c0:82:66:0a:c3:24:29:91:5d:32:84:cb:93:8c:bc:f6:
fe:ce:12:d9:ca:ab:cd:e3:69:42:e5:10:05:22:7f:b8:d8:21:
71:7e:cc:6f:0b:a1:a6:9d:ec:25:9e:0d:68:b4:24:20:ce:ef:
69:3e:b3:39:0f:ae:f8:9a:c4:48:d4:1a:18:e6:52:2d:1f:f3:
f4:e9:8f:3b:c8:fe:96:6d:04:45:de:99:80:ba:4c:a4:09:d7:
71:af:ad:15:bc:d5:be:8b:20:ff:b9:09:3c:e8:13:e6:60:99:
38:59:d7:d7:59:b1:f1:8f:e7:94:22:41:e9:c1:34:9d:fb:a5:
5d:0a:74:f7:ff:90:88:ad:e3:0f:e4:43:6a:72:a5:c1:a6:c5:
08:6c:10:90:0d:0c:6d:b0:79:b6:e1:73:70:f8:9e:eb:4d:07:
8f:8d:b8:a2:1e:1c:c9:7d:91:99:61:36:15:c8:4d:fc:1c:04:
be:8c:fd:95:11:1b:d7:16:42:53:f5:b4:56:3e:8f:d2:8b:ab:
02:e1:4b:8e:58:34:00:8d:ac:6f:2c:e6:8f:00:0f:64:54:fc:
7e:3a:f2:d9:7b:80:fa:04:18:75:ef:94:15:80:5c:bf:3c:8b:
89:ea:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:09:27 2025 by rpki-client