Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214623.roa
File: AS214623.roa (raw, json)
Hash identifier: qvu+sixWzYX++jOqh21dehjqIh3XLtFWJyK7gltsxTg=
Subject key identifier: 70:ED:B6:05:5B:94:15:20:BE:81:EA:80:91:EA:45:B3:1D:5E:3F:1F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 382BA10C6A0CCADACF1EAF5C04CA3F411EE30D13
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214623.roa
Signing time: Wed 28 May 2025 07:15:58 +0000
ROA not before: Wed 28 May 2025 07:10:58 +0000
ROA not after: Wed 27 May 2026 07:15:58 +0000
asID: 214623
IP address blocks: 2a13:9500:6c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2b:a1:0c:6a:0c:ca:da:cf:1e:af:5c:04:ca:3f:41:1e:e3:0d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 28 07:10:58 2025 GMT
Not After : May 27 07:15:58 2026 GMT
Subject: CN=70EDB6055B941520BE81EA8091EA45B31D5E3F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:29:4f:96:18:d0:29:db:4f:1d:9d:7f:3e:
cc:32:4d:1c:ae:d8:04:ad:c0:d7:13:5c:80:28:00:
a3:dd:d2:98:35:42:16:8b:41:a3:55:ae:60:1b:2a:
05:95:fa:a3:9c:f7:54:57:bf:57:ae:fe:1a:49:42:
cd:0f:69:6c:9c:55:e8:d4:a8:37:1b:09:6a:83:ff:
60:ed:b2:72:86:45:15:88:b3:1f:06:8f:b1:8c:71:
6b:dc:42:f8:5d:e4:ea:d0:56:16:5e:bc:d0:96:8d:
08:42:6d:79:e6:7d:24:49:76:f4:70:d1:9f:49:2a:
b9:3c:78:df:ab:34:4a:78:c4:0e:60:c5:bb:96:89:
91:18:f5:11:02:22:0d:96:ed:6f:79:f5:b6:95:01:
89:da:7f:eb:bc:af:00:d5:90:b7:71:5f:71:38:d1:
19:68:22:bc:de:26:13:7a:21:29:b4:06:03:cd:d2:
b7:eb:db:65:c6:cc:1a:ad:52:c4:1b:26:37:02:d3:
47:5f:28:5e:26:e6:ee:85:33:fb:74:84:c8:9b:e1:
01:e5:8d:ce:11:a6:3e:80:3d:48:85:69:52:86:ef:
88:cb:d7:5f:92:ed:a4:f3:d7:95:77:c5:41:ac:ea:
17:fa:d4:46:6e:80:d1:3c:e0:52:9e:23:fd:d5:fc:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:B6:05:5B:94:15:20:BE:81:EA:80:91:EA:45:B3:1D:5E:3F:1F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:6c::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e5:2b:81:49:7e:a2:3d:f7:8a:ec:8b:4f:8e:4a:a2:31:9b:
21:f7:08:d7:5d:9d:6a:31:e0:84:d6:08:db:82:cb:de:3f:e7:
bf:17:29:85:db:8f:e9:f3:95:9d:16:28:7e:a9:a6:90:c9:cc:
47:42:31:93:f4:73:bf:77:a3:7e:80:86:0d:84:b8:00:90:89:
e5:08:0b:04:6f:89:0d:87:4d:54:03:76:aa:ae:7d:7e:06:5f:
69:bd:f2:17:b0:38:15:e4:ad:48:b0:ce:97:cf:e6:34:3c:68:
ea:12:f9:51:58:28:a5:3b:83:89:79:29:a3:d7:26:85:03:8c:
93:bb:9b:6b:6b:39:5f:85:83:68:18:1e:e1:5d:56:e5:30:08:
fd:fa:4d:85:7a:bb:1e:fe:a7:76:19:e4:78:e9:64:23:a0:51:
e5:a9:05:bb:fe:39:80:9f:21:e7:81:b0:a7:8f:1a:3a:f1:5c:
6c:3c:40:05:6d:14:ad:8a:11:dd:21:1b:53:eb:76:7a:20:ce:
c9:c7:55:5d:17:ec:ab:4d:05:23:b0:2f:dc:85:7e:f8:16:d5:
51:81:23:a7:f2:0c:7d:67:bc:fc:d3:7c:95:77:0d:a5:79:55:
6e:ae:67:b0:02:c3:54:4d:3e:6f:64:ea:8a:8a:b3:32:5d:0d:
6b:63:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:18 2025 by rpki-client