Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214783.roa
File: AS214783.roa (raw, json)
Hash identifier: LXPrY76NeR5GfK+2dA4Qa/OdrHlwldBYtrNSxr7CfmI=
Subject key identifier: A1:71:73:B4:89:65:4A:7C:52:96:4E:EF:28:D4:F1:2E:A0:9D:36:9A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D413ECC48892939B29C125ECA9B458C5E4B9A5F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214783.roa
Signing time: Tue 20 May 2025 14:13:39 +0000
ROA not before: Tue 20 May 2025 14:08:39 +0000
ROA not after: Tue 19 May 2026 14:13:39 +0000
asID: 214783
IP address blocks: 82.29.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:41:3e:cc:48:89:29:39:b2:9c:12:5e:ca:9b:45:8c:5e:4b:9a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 20 14:08:39 2025 GMT
Not After : May 19 14:13:39 2026 GMT
Subject: CN=A17173B489654A7C52964EEF28D4F12EA09D369A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:62:92:da:87:d0:f6:b1:14:bf:01:fa:43:
e4:20:3d:d2:15:c5:3f:5a:d6:ef:4c:47:56:3b:76:
78:a0:a9:a9:e5:40:37:37:a5:4f:51:4d:9f:ac:f0:
61:bd:ac:80:bf:2c:34:1d:09:3b:aa:2b:0a:9c:90:
40:9c:16:5f:28:12:08:02:ec:da:03:ae:db:af:85:
86:ce:07:12:77:8d:a8:ba:75:8a:99:09:2c:3d:89:
99:64:55:e5:ab:e0:a2:59:36:da:ff:50:f6:ce:93:
ee:88:d9:47:74:d4:28:4b:96:81:e6:96:be:d6:4b:
98:e5:40:ee:e4:6e:d3:c8:c7:0c:d6:cc:93:a1:5e:
32:57:ee:4a:f2:55:6b:85:3f:f4:87:66:27:d8:bd:
32:c8:33:6b:7f:c4:a8:ce:0a:ce:48:8a:a4:0e:eb:
eb:69:e5:60:8d:ce:af:de:a9:00:b3:f0:d0:0c:cd:
c1:b4:8c:45:1f:26:93:61:9f:4c:e9:2b:f4:2e:33:
f7:f2:66:9f:5c:2d:82:a2:62:51:1e:79:7c:0c:b2:
e8:5e:e1:b4:b8:46:c0:ec:a8:f2:69:24:fc:ce:5b:
44:a8:b8:3c:de:75:44:a6:0c:21:93:d0:13:f4:9e:
17:bc:06:e7:ff:1f:ab:2a:9d:f2:50:81:59:8c:68:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:73:B4:89:65:4A:7C:52:96:4E:EF:28:D4:F1:2E:A0:9D:36:9A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:91:41:78:b6:ab:73:e7:e1:4c:cf:27:5f:a1:5a:af:b8:e7:
90:03:84:55:4b:14:cc:ed:ea:4b:89:0a:67:df:23:6d:25:ae:
e9:9d:46:b7:ee:73:1d:f6:52:43:e4:bf:76:7e:ed:a2:50:c6:
25:38:4a:d1:3a:fe:2f:d1:e6:07:5a:4a:70:8b:36:33:3b:9e:
5b:5f:98:8a:d5:ad:65:f3:46:0c:12:e6:34:c5:06:7d:1e:8a:
2f:8d:6e:66:c6:dc:7c:98:d1:30:20:6b:9d:17:39:86:17:bc:
53:9c:c3:c3:90:4d:74:47:3b:0e:e5:8c:b9:ad:f7:b7:94:41:
c9:ba:c2:06:1a:e9:94:8b:89:16:d0:c9:1e:91:b1:6e:78:9e:
75:a7:f4:7c:27:53:ec:41:9b:88:eb:9d:f0:b0:1d:4e:26:4d:
d0:20:73:99:b2:df:3d:13:e1:c2:76:e5:c3:f8:c6:a1:fd:4b:
2f:ff:7e:24:0b:9f:80:7b:8e:d7:7e:af:b8:e1:56:91:63:65:
39:4f:ad:00:17:43:af:0e:41:13:88:f4:68:17:af:9d:ca:e7:
a8:13:01:99:42:a6:a9:1f:75:96:e7:40:6a:76:94:02:74:de:
88:7a:64:a6:71:4a:14:84:45:9f:11:c9:b1:dc:e7:d3:13:1e:
76:e8:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:12 2025 by rpki-client