Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214307.roa
File: AS214307.roa (raw, json)
Hash identifier: ffsGMJXAzCF12lbf6UQdTq75E0yajY1NbnafBcI4dEI=
Subject key identifier: 10:7B:60:C9:50:85:A5:36:EB:22:21:63:B5:CA:39:E1:4F:66:16:69
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A12339851EF2BC7D52D7994A4CC0CD2399D6DF5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214307.roa
Signing time: Wed 21 May 2025 06:40:41 +0000
ROA not before: Wed 21 May 2025 06:35:41 +0000
ROA not after: Wed 20 May 2026 06:40:41 +0000
asID: 214307
IP address blocks: 2a13:9500:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:12:33:98:51:ef:2b:c7:d5:2d:79:94:a4:cc:0c:d2:39:9d:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 21 06:35:41 2025 GMT
Not After : May 20 06:40:41 2026 GMT
Subject: CN=107B60C95085A536EB222163B5CA39E14F661669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:ad:9b:73:6b:d3:b6:37:cb:bb:a4:10:02:
19:f0:29:c3:c9:1c:72:87:c4:97:cc:fd:de:ac:fe:
e3:c3:4d:99:76:38:e6:55:29:24:8f:26:87:15:98:
55:2b:e5:1d:ac:94:f7:39:ba:df:66:fd:eb:d3:78:
73:7f:09:76:b3:29:1a:ba:53:f6:e7:cc:38:84:cf:
84:78:21:54:ee:46:de:5e:b1:0a:23:70:28:02:32:
d0:61:46:03:06:d3:68:ce:38:e4:43:a4:ff:0f:67:
26:61:53:b9:04:8b:90:8e:71:e4:cf:0d:d0:36:82:
31:0f:74:ff:11:41:11:0e:15:ca:fc:9e:bf:15:3d:
1b:fe:83:9c:52:58:7e:4a:a3:19:c7:2e:e9:9b:df:
69:5e:d7:7b:9c:79:5c:6e:24:27:a8:9f:ea:a9:5f:
7b:c8:26:f8:dc:e8:6d:b4:40:51:72:33:94:77:4a:
11:5f:b4:9e:ed:f5:18:52:79:e9:4a:e2:fc:d5:fd:
7d:1f:d0:50:aa:1b:0f:4d:d6:37:c2:3f:2d:ad:55:
3e:7f:09:88:fe:f2:54:ed:55:03:7b:e7:a5:ea:27:
2a:f2:5c:49:b5:73:38:6e:8b:16:b8:d2:53:29:dc:
dc:3b:fd:14:cc:a8:bd:aa:e2:b5:7e:c0:ac:5b:9a:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:60:C9:50:85:A5:36:EB:22:21:63:B5:CA:39:E1:4F:66:16:69
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214307.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:55::/48
Signature Algorithm: sha256WithRSAEncryption
03:0e:88:fe:44:1b:35:42:00:c7:90:fd:2c:fb:4c:c9:31:8e:
ac:49:2a:70:21:69:28:a5:c8:eb:d0:49:ae:51:98:90:21:bf:
51:4e:e5:d7:d9:fa:12:4b:2c:4b:64:52:a0:dc:05:92:3f:db:
53:79:d5:89:18:d2:e9:2a:0f:c3:c1:1c:20:87:38:d2:01:e2:
10:46:2d:fc:63:7c:53:9b:5c:eb:e2:90:d5:1a:6e:44:ca:32:
02:92:e1:0d:b8:e2:ba:6a:fd:8c:b5:14:c7:a0:8e:6e:80:5f:
e0:0f:a4:5e:f8:26:30:16:ec:60:56:ce:94:3d:cf:2f:4a:c6:
16:98:b7:fb:bb:5a:92:71:38:3d:5e:b2:1d:92:cc:dc:e9:f0:
38:24:25:4c:fa:2c:f4:84:a1:ba:bd:d3:6a:6e:af:c4:0d:82:
93:f6:45:5a:78:79:f9:3d:7e:a9:74:14:30:51:02:d5:77:7c:
c8:69:4b:85:3e:17:9b:7e:dd:aa:24:c2:44:24:d6:cb:71:b2:
01:ca:40:ed:b2:ab:79:a0:65:43:e4:e1:96:f8:ff:42:4a:0b:
ad:e2:e0:6a:8a:08:1c:ed:be:e7:3b:6d:a1:ce:17:83:c1:cd:
af:09:a9:b9:30:09:0a:15:e0:5c:fc:f3:45:37:bb:b0:65:8c:
65:bf:dc:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUShIzmFHvK8fVLXmUpMwM0jmdbfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA1MjEwNjM1NDFaFw0yNjA1MjAwNjQwNDFaMDMxMTAvBgNV
BAMTKDEwN0I2MEM5NTA4NUE1MzZFQjIyMjE2M0I1Q0EzOUUxNEY2NjE2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiO62bc2vTtjfLu6QQAhnwKcPJ
HHKHxJfM/d6s/uPDTZl2OOZVKSSPJocVmFUr5R2slPc5ut9m/evTeHN/CXazKRq6
U/bnzDiEz4R4IVTuRt5esQojcCgCMtBhRgMG02jOOORDpP8PZyZhU7kEi5COceTP
DdA2gjEPdP8RQREOFcr8nr8VPRv+g5xSWH5KoxnHLumb32le13uceVxuJCeon+qp
X3vIJvjc6G20QFFyM5R3ShFftJ7t9RhSeelK4vzV/X0f0FCqGw9N1jfCPy2tVT5/
CYj+8lTtVQN756XqJyryXEm1czhuixa40lMp3Nw7/RTMqL2q4rV+wKxbmktDAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUEHtgyVCFpTbrIiFjtco54U9mFmkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AABVMA0GCSqGSIb3DQEBCwUAA4IBAQADDoj+RBs1QgDHkP0s+0zJMY6sSSpwIWko
pcjr0EmuUZiQIb9RTuXX2foSSyxLZFKg3AWSP9tTedWJGNLpKg/DwRwghzjSAeIQ
Ri38Y3xTm1zr4pDVGm5EyjICkuENuOK6av2MtRTHoI5ugF/gD6Re+CYwFuxgVs6U
Pc8vSsYWmLf7u1qScTg9XrIdkszc6fA4JCVM+iz0hKG6vdNqbq/EDYKT9kVaeHn5
PX6pdBQwUQLVd3zIaUuFPhebft2qJMJEJNbLcbIBykDtsqt5oGVD5OGW+P9CSgut
4uBqiggc7b7nO22hzheDwc2vCam5MAkKFeBc/PNFN7uwZYxlv9xD
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:56:25 2025 by rpki-client