Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa
File: AS215470.roa (raw, json)
Hash identifier: irorP9DJ8h3runJ1ccrgZFlYCGpT28hFCnKPInd5eig=
Subject key identifier: 3A:D9:D3:41:63:90:43:BB:EA:B1:22:CC:2F:72:78:9F:A8:D5:2B:20
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7ED43EF99009B010A5F1D2C4D8990B89A330AD93
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 215470
IP address blocks: 2a14:7580:8000::/36 maxlen: 48
2a14:7580:f300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d4:3e:f9:90:09:b0:10:a5:f1:d2:c4:d8:99:0b:89:a3:30:ad:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=3AD9D341639043BBEAB122CC2F72789FA8D52B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:72:e9:28:d4:1e:32:55:2e:6d:09:bc:af:
d2:bd:2a:c1:63:d5:36:a5:d4:e5:ee:a0:41:0c:f7:
7e:b9:ec:9c:64:98:eb:fd:03:b4:8b:92:f5:f1:76:
da:17:bb:55:83:0c:8e:1e:c7:d8:e1:57:13:47:f9:
9f:01:ec:bc:1a:4a:e2:28:ae:04:66:7f:2e:eb:21:
93:ba:f1:8a:7f:d6:a4:16:25:34:da:91:c3:a8:cf:
ce:fe:58:15:60:f4:38:73:f5:82:7c:f6:fc:51:96:
3c:d6:94:ff:cb:12:9e:af:33:59:70:23:98:8d:49:
4a:36:98:6e:e3:49:19:4d:8a:2c:0f:3f:f9:9c:4b:
40:c0:35:8a:b8:4e:c0:fb:ae:2b:d6:08:25:0c:0c:
d7:bc:e8:4b:ef:4f:6c:88:6e:f9:c4:c2:36:c2:00:
04:da:ff:0f:5b:9f:fe:93:d1:1c:4c:2a:c2:bf:fc:
63:85:32:b2:38:f7:40:3a:4d:57:63:7c:a3:7e:49:
68:a5:2e:85:7d:d6:ec:9b:fd:b7:87:9f:94:7b:5d:
bb:6d:3e:d8:93:9a:dd:6c:cd:7b:08:06:cf:ee:0e:
c5:fc:00:32:f8:b7:b3:1a:e5:c0:81:67:c8:c1:f6:
33:f3:30:f9:72:13:df:0f:d8:51:9e:20:a9:c1:0e:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:D3:41:63:90:43:BB:EA:B1:22:CC:2F:72:78:9F:A8:D5:2B:20
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:8000::/36
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
19:98:93:14:11:79:f3:5f:54:2d:9c:26:4f:0f:98:88:30:94:
98:b7:b8:ac:f1:31:b1:ea:79:6d:49:90:e9:7f:e3:26:63:f1:
44:26:c2:49:36:96:82:d9:d9:c6:e9:fe:a1:26:ba:7c:e2:07:
2e:17:0b:0d:0d:f5:41:f3:af:95:ce:df:3d:03:30:50:8f:92:
8d:76:ff:f8:7c:1f:a3:07:45:73:24:af:b1:a4:36:5a:1e:59:
b7:ad:12:e8:33:d8:82:14:d2:64:82:41:37:79:5b:f5:5b:3b:
eb:e4:5a:bb:30:51:7b:59:49:d0:13:40:c7:a2:26:fd:52:e0:
de:60:a9:7f:80:68:92:3f:2c:3e:19:b6:ea:f1:07:15:95:9c:
14:1f:39:d6:69:a3:4d:c5:48:0d:bf:3a:7b:dd:e1:ec:d4:17:
e1:88:c9:96:40:44:76:c8:49:fc:d7:53:5d:88:e5:9c:fe:5a:
7f:9c:12:c3:06:5f:ce:80:12:9f:ff:f0:eb:67:a4:67:19:9b:
52:32:7a:cb:ff:ec:4a:8c:9d:af:b2:7d:e4:aa:37:38:3f:a6:
f9:26:89:01:a8:44:e0:87:9b:b8:d4:d9:75:6d:a1:fc:c6:7a:
35:54:46:dd:95:f9:ee:89:f9:05:de:73:a3:9a:68:0b:4b:09:
dd:a9:60:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:00 2025 by rpki-client