Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa
File: AS214841.roa (raw, json)
Hash identifier: ehYEdicKGYicz61WRamX0eo8/QJsMoj7q+38LYNpdLE=
Subject key identifier: 85:22:16:B6:A3:28:9F:E6:64:B1:E2:6D:43:A2:3D:2B:17:45:A5:B1
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0CD8748129DAF9D637074830D6D781461E815706
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 214841
IP address blocks: 2a14:7581:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d8:74:81:29:da:f9:d6:37:07:48:30:d6:d7:81:46:1e:81:57:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=852216B6A3289FE664B1E26D43A23D2B1745A5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:d8:b6:d7:c6:a0:4e:98:f3:61:db:51:40:
cc:02:e6:68:06:6b:0d:98:4e:16:ec:d3:68:9a:1e:
86:13:32:ed:28:f1:5c:99:52:03:6a:7f:f5:3d:52:
70:0b:7c:33:31:af:56:8a:db:2e:58:bd:61:5b:54:
0c:1f:93:0f:bb:81:dc:24:ea:99:34:8d:c4:14:72:
75:5d:2e:ea:45:16:c8:db:f6:da:b8:0b:24:b3:6e:
3c:51:39:8d:82:c9:e3:2c:3a:aa:cf:7d:60:07:74:
43:7b:9f:48:78:4a:d9:45:a5:1a:03:93:0e:e3:94:
2a:cf:04:ae:3e:9c:79:1a:f7:9b:7f:b5:b3:6e:b0:
1f:e4:8f:af:ba:10:b7:d3:5c:4d:57:8a:38:a0:59:
ff:68:20:90:aa:d0:63:1a:22:e2:28:4f:34:24:6b:
82:e8:a7:16:e7:e8:49:2d:2d:ac:43:f0:cf:a3:65:
48:a5:b5:59:2a:fb:bf:e1:38:a7:9e:f7:e9:7f:ce:
12:6d:9a:da:e1:87:b9:c2:d4:f2:27:1a:5d:81:0a:
e3:76:3f:ef:24:ef:11:75:28:37:f9:4d:15:fa:c3:
86:76:7f:98:42:c1:f7:fb:fe:e9:e9:c2:fa:30:0e:
30:ad:89:c8:23:9d:0b:08:20:01:d4:91:3e:73:1f:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:16:B6:A3:28:9F:E6:64:B1:E2:6D:43:A2:3D:2B:17:45:A5:B1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS214841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:e00::/40
Signature Algorithm: sha256WithRSAEncryption
18:76:1e:e9:40:fa:9d:e2:21:ac:6a:62:6d:dc:bd:75:b1:51:
27:f8:0f:17:29:d4:ca:f3:da:3e:66:31:cc:03:4b:55:e4:8f:
c0:80:30:24:3a:04:36:3f:9f:5c:63:c5:d7:a1:ba:bd:1f:6a:
27:b8:ec:17:a5:28:15:f0:14:2a:2f:fa:a2:f9:23:00:79:ca:
b8:86:b7:53:79:18:89:de:09:9f:32:0c:0d:a5:f0:d5:4f:6c:
80:8d:54:1e:bd:e0:4e:9c:f4:17:1f:85:e4:93:9c:b5:9a:5e:
db:57:82:e8:61:2d:45:37:e5:2b:0e:9d:86:04:94:97:41:bf:
af:98:f4:30:5b:56:23:f5:c5:6f:9d:96:e6:44:32:75:81:08:
db:e4:e9:ec:05:85:61:9f:6a:26:af:47:c5:70:31:b3:38:18:
ec:ea:78:ca:b9:59:53:11:21:ca:23:b2:cd:7f:3d:b2:27:d7:
af:7a:95:3c:f3:9e:dd:d1:3b:4c:3c:e7:49:37:55:9a:13:b3:
4f:49:b5:3e:7c:70:3b:82:a2:05:66:74:a1:3b:70:24:91:5d:
63:60:fc:55:3e:17:0a:a7:15:f4:56:8e:6f:fc:40:d6:78:74:
42:bf:4e:e1:74:04:d6:15:64:6a:52:1d:84:51:7f:63:51:9d:
8f:48:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:56 2025 by rpki-client