Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: drEizrLJ1iTiS0/PYozrwC+pfS50LyVE3MSoPZPnKFQ=
Subject key identifier: EE:6C:F7:82:5A:A7:BE:20:97:52:A7:61:5B:26:E8:1C:B3:84:F0:66
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1ABEF402B76F15E07544597785670D63AA1F0EAA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa
Signing time: Fri 23 May 2025 17:32:00 +0000
ROA not before: Fri 23 May 2025 17:27:00 +0000
ROA not after: Fri 22 May 2026 17:32:00 +0000
asID: 214025
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:be:f4:02:b7:6f:15:e0:75:44:59:77:85:67:0d:63:aa:1f:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 23 17:27:00 2025 GMT
Not After : May 22 17:32:00 2026 GMT
Subject: CN=EE6CF7825AA7BE209752A7615B26E81CB384F066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:dc:e7:cf:95:1e:b5:83:56:68:94:cd:19:
4a:c2:4b:57:23:d4:cc:df:f5:72:a6:92:39:df:ba:
a6:1c:fa:42:2f:8d:af:7d:6c:8b:b6:69:99:33:7e:
b3:21:70:2b:67:a5:1a:4a:5d:56:93:95:70:e5:22:
90:33:9b:f9:1c:6a:00:be:a9:8b:69:b5:bf:03:1a:
48:5a:fc:e6:96:5a:5a:df:88:fa:a2:c8:87:8e:ea:
26:f6:fe:49:21:6d:cd:85:10:bc:34:f1:e4:5e:a0:
29:b5:48:3d:e3:e4:21:a6:35:0b:f8:02:ae:de:44:
29:ad:a7:8d:c1:9d:d7:5c:ce:8d:35:03:88:6e:05:
51:bc:9e:02:b3:de:1b:1e:28:4c:61:8a:cc:8e:0f:
e6:4e:6c:a0:a8:7e:c5:cf:7f:e1:9c:9e:39:35:24:
27:53:68:56:50:88:cd:a8:13:bf:1e:53:1f:b7:52:
69:87:af:e0:37:6c:bb:c8:2b:86:83:f5:d1:be:be:
4f:9f:45:a4:a7:f5:3b:e9:79:c4:3a:83:87:41:de:
e2:66:77:e7:a9:a6:94:81:88:28:41:71:c9:22:32:
36:a9:fe:9e:3d:9b:4b:02:c4:59:7e:f7:1c:50:e0:
82:7e:3c:a5:6e:e3:f0:91:23:5f:9d:52:68:20:b7:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:F7:82:5A:A7:BE:20:97:52:A7:61:5B:26:E8:1C:B3:84:F0:66
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
94:13:c6:fa:df:62:87:40:d9:4a:fb:be:be:e8:74:0f:33:32:
ee:d3:6e:9d:0d:b8:89:ca:bf:20:5f:0e:b6:17:39:c5:24:c6:
c4:c9:88:e9:8e:52:1f:a9:ab:88:8e:cc:0c:de:6b:77:52:94:
c1:05:3b:ca:94:a5:d1:c9:24:f2:9d:7f:de:1e:9a:a4:af:c6:
4e:63:90:a5:ed:90:fd:d1:a5:33:dc:df:42:2d:7b:1c:f5:fc:
c3:85:28:25:d4:c5:44:75:0e:b2:6d:1c:12:1a:c0:c6:c0:da:
23:6f:e7:2e:bc:56:d6:b0:03:10:d8:14:e9:0d:ac:72:d3:db:
b6:d4:06:42:9a:11:52:b5:9b:73:17:de:70:b6:4a:c9:91:44:
c1:d2:b3:66:30:d4:13:97:3f:94:dc:87:ce:40:47:9e:3f:eb:
e3:3a:ba:af:11:14:13:79:56:a9:aa:72:86:8d:4f:4a:70:35:
20:b0:97:79:2b:18:dc:e7:ab:7b:c7:ed:b8:79:c5:0f:f0:c8:
cc:1a:4e:bf:67:43:48:2c:ae:1b:91:95:18:bc:a3:c5:23:dd:
70:5d:ab:a1:1e:78:37:95:33:47:93:cd:fa:b6:f7:d9:ed:a7:
a6:52:f2:1d:6a:a4:d6:97:6c:9b:f3:5d:38:e7:72:3b:9c:46:
88:52:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:14:28 2025 by rpki-client