Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214480.roa
File: AS214480.roa (raw, json)
Hash identifier: crZIL9FnJ7/s2YJExihc0w0FuEfZGVMU8rBbLGuCLT8=
Subject key identifier: A4:2F:17:D3:F6:81:FA:45:2F:3F:21:D1:56:04:14:13:79:AD:16:EC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2EF5922A12C199552B6023D2E915ADED60E7414A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214480.roa
Signing time: Thu 22 May 2025 11:37:09 +0000
ROA not before: Thu 22 May 2025 11:32:09 +0000
ROA not after: Thu 21 May 2026 11:37:09 +0000
asID: 214480
IP address blocks: 2a13:9500:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f5:92:2a:12:c1:99:55:2b:60:23:d2:e9:15:ad:ed:60:e7:41:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 22 11:32:09 2025 GMT
Not After : May 21 11:37:09 2026 GMT
Subject: CN=A42F17D3F681FA452F3F21D15604141379AD16EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:81:4f:23:16:03:e3:a0:56:1f:12:39:bb:
62:63:d1:30:a2:e5:9d:60:3d:65:fb:10:17:24:24:
09:c1:45:6c:4c:03:55:e2:85:f5:d2:fc:2d:af:a0:
6a:23:72:58:75:f2:37:dd:e5:90:e9:42:4b:da:9d:
e7:fb:5e:b9:f9:56:3b:b2:2f:6b:8f:00:61:ab:c3:
28:5f:da:bd:d4:fb:79:2f:f9:3a:38:fa:d9:1c:37:
9d:96:ef:45:4b:d6:a4:d2:74:36:90:1f:53:28:e0:
1a:07:79:9a:a4:a0:20:eb:a1:dc:20:84:3d:3e:4a:
34:f3:18:50:f1:a3:fb:e3:3a:cf:8a:94:1d:4d:71:
2a:51:88:8a:ab:48:ad:b4:bc:1e:a6:f6:2b:cf:4b:
8a:af:6c:7c:b4:50:1f:6d:0e:54:c8:a8:7d:c0:0c:
d3:3e:f4:7b:78:28:96:a1:c1:94:2b:cb:68:78:bf:
e7:77:79:b6:7b:8d:5a:f3:40:ea:1c:57:56:e3:26:
98:fb:63:78:52:63:3a:d4:90:d0:76:f6:73:60:c3:
0a:f8:ef:60:d9:5f:8f:c4:d0:81:8c:2c:c5:c2:94:
aa:32:c5:41:23:1b:b1:7d:b5:aa:80:46:99:6a:d9:
a0:27:1b:e8:48:2a:24:48:84:80:2c:b9:a3:0c:0d:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2F:17:D3:F6:81:FA:45:2F:3F:21:D1:56:04:14:13:79:AD:16:EC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:60::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f6:aa:69:8b:be:c1:af:c1:fb:9b:a1:4a:0f:9b:a5:ca:9f:
b4:c0:97:cf:82:f6:65:65:ef:da:fd:37:76:49:4d:45:08:c3:
73:06:91:a0:96:2f:90:54:ae:d7:c8:df:43:2c:a1:77:35:03:
a2:04:f7:2c:fa:bd:dc:30:28:86:fc:3e:bf:b5:8c:26:dc:5d:
f2:7c:f7:66:ea:4c:a7:a6:fa:bb:22:29:dd:bc:fa:2e:57:1e:
da:0d:da:3c:ee:8f:24:ec:9c:26:2b:b2:ed:0f:75:bc:d0:d2:
42:f8:23:f9:ae:56:f0:2a:0f:5b:11:fd:aa:19:be:e4:45:4a:
78:a7:33:1d:d4:79:3a:20:1e:03:95:a5:fb:04:a1:c9:6d:7b:
16:16:af:20:e4:92:87:be:95:ce:88:e8:87:b6:57:e1:61:a1:
c4:66:7a:6a:0c:09:37:fb:68:70:b3:1d:db:f3:b0:c1:7d:fe:
e7:53:b9:8f:0f:cc:8a:8f:5f:30:43:31:12:4f:5d:fb:59:b0:
34:5e:b0:ba:17:cd:45:2a:20:ce:7e:f2:9f:9f:f4:7c:c3:95:
77:3f:ca:2d:71:4b:a2:0e:c9:93:e2:32:ca:cd:4f:59:c9:12:
51:c6:56:29:f5:06:e6:59:63:61:0e:4d:a8:da:9a:49:fd:9e:
4c:4a:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:10 2025 by rpki-client