Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214834.roa
File: AS214834.roa (raw, json)
Hash identifier: 8ltRanYkeULZrsrvF9dGRICkM7tOEwVAoz/D0kxW1rc=
Subject key identifier: F5:B3:C7:2F:97:B0:08:3C:28:7C:78:10:BA:90:E7:08:7F:5B:76:FE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 79D80C60D4F82C9900E1EA26F8167E2514AA81C1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214834.roa
Signing time: Mon 26 May 2025 22:15:44 +0000
ROA not before: Mon 26 May 2025 22:10:44 +0000
ROA not after: Mon 25 May 2026 22:15:44 +0000
asID: 214834
IP address blocks: 2a0f:85c1:c50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d8:0c:60:d4:f8:2c:99:00:e1:ea:26:f8:16:7e:25:14:aa:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 26 22:10:44 2025 GMT
Not After : May 25 22:15:44 2026 GMT
Subject: CN=F5B3C72F97B0083C287C7810BA90E7087F5B76FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:d3:91:5e:78:71:e6:15:27:b2:7a:80:7b:
fc:43:62:87:0a:e8:af:7d:e7:01:4c:83:07:23:b4:
30:45:82:5d:22:b6:a7:ca:4b:43:a2:e6:65:e9:fd:
ea:b6:3a:8b:9e:a1:f8:ee:56:ca:49:5e:3d:c6:50:
67:3b:e5:7e:41:0c:d1:30:25:3f:f6:30:e7:fa:93:
7d:a4:24:92:54:7a:b2:a5:09:64:e3:7f:11:5f:5a:
f2:3d:7c:93:6f:ad:2b:73:07:19:40:1a:ec:0c:14:
bf:0b:b0:8d:51:e1:2c:4b:16:aa:3d:d4:44:a1:29:
1d:46:3e:ef:e3:78:bd:c9:2f:ef:6c:fe:d0:74:2a:
9c:7e:10:ac:e7:0b:4a:27:96:4c:92:88:73:bb:64:
fd:0e:51:4c:c1:be:9e:7a:06:ce:e7:50:95:ea:94:
00:62:e3:1e:89:6e:d1:ff:e4:e9:57:c0:4f:6f:43:
28:58:f6:e4:a1:66:39:78:91:e0:08:0e:98:27:f6:
f5:ec:11:8d:75:f3:86:c1:d3:f5:0a:d1:fb:f7:c3:
d5:ec:4a:97:dd:c4:d9:47:8b:f0:fa:2c:eb:2c:91:
b0:b6:9c:71:06:e2:97:59:35:72:74:20:b3:f8:87:
51:06:73:00:5e:57:a9:39:0a:49:af:5a:2c:45:b7:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:C7:2F:97:B0:08:3C:28:7C:78:10:BA:90:E7:08:7F:5B:76:FE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c50::/44
Signature Algorithm: sha256WithRSAEncryption
b7:5c:61:93:c2:b6:79:37:0b:d2:10:1e:05:3f:08:3a:94:ca:
c2:a7:fe:24:fe:8f:f7:97:d8:c7:80:1e:20:2c:7a:21:b3:2e:
22:a0:7f:11:ad:77:85:a4:75:aa:fc:eb:d8:40:47:73:5f:4c:
68:0f:15:bd:1c:c9:a7:bd:a5:1f:68:a9:91:45:11:39:48:ae:
fd:57:ef:f6:73:46:ce:bc:5e:c5:5e:9d:cf:9c:e3:e2:2f:b7:
08:65:ba:b3:a4:c2:59:7e:a0:01:bf:2c:15:cf:95:51:39:cf:
b4:c8:ff:34:d6:92:6c:b7:0a:9f:79:22:a3:7f:4d:2c:4d:9e:
1b:1c:82:74:fd:49:c4:a8:f7:55:4e:2e:da:db:9f:7e:2a:9e:
5e:56:93:db:71:d0:d8:90:1a:4a:30:1f:f9:7e:41:9b:65:bc:
d0:66:62:38:77:47:48:cc:3e:9d:8e:b2:5f:f3:17:f4:5b:23:
c3:e2:08:b1:3e:54:68:2c:05:c1:7f:4c:80:05:e2:8c:fd:25:
90:28:4f:3e:7a:50:11:7b:c9:76:78:e0:3a:d4:fb:a7:bd:0d:
ee:b0:68:8c:57:b2:73:da:90:1c:23:34:37:9a:36:36:f1:10:
1c:8e:8d:33:75:94:55:3a:90:0e:95:1e:d0:4a:a8:8c:f6:d4:
c6:cd:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:16:20 2025 by rpki-client