Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214041.roa
File: AS214041.roa (raw, json)
Hash identifier: 6hCarwSCrwAnXDEFwEpqviZWnubxXXddmzEgr9ge3ro=
Subject key identifier: B0:CF:90:F7:DE:77:1A:56:87:4A:FB:B8:71:58:B7:69:D2:44:D8:D3
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 02D2CF132AA4D7EB67AE360CD755F086B047AD41
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214041.roa
Signing time: Tue 20 May 2025 15:24:23 +0000
ROA not before: Tue 20 May 2025 15:19:23 +0000
ROA not after: Tue 19 May 2026 15:24:23 +0000
asID: 214041
IP address blocks: 185.231.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d2:cf:13:2a:a4:d7:eb:67:ae:36:0c:d7:55:f0:86:b0:47:ad:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 20 15:19:23 2025 GMT
Not After : May 19 15:24:23 2026 GMT
Subject: CN=B0CF90F7DE771A56874AFBB87158B769D244D8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9b:d2:78:ab:a2:4b:8a:27:43:3c:44:b9:b1:
60:a9:82:36:b8:42:90:02:44:65:01:5b:13:26:f7:
30:9b:c7:4f:3f:3c:cd:30:9e:36:62:c5:a0:c9:2d:
10:ad:61:d0:ed:63:75:e6:b6:5a:1c:45:81:47:c2:
be:bc:07:98:df:65:6a:e8:91:5f:72:b9:2b:52:95:
19:db:08:ab:9f:2e:49:21:4d:1c:b5:25:e9:4f:82:
3e:fa:2f:d7:1a:2f:c3:cf:e5:e5:03:b3:20:4e:28:
ac:70:83:ab:15:80:5f:c9:ee:b5:23:6e:a3:60:05:
57:39:36:75:84:3c:70:14:78:f3:b5:ab:3c:c2:27:
f5:e2:4f:57:2a:ab:e9:97:92:c6:b0:5d:df:b7:75:
68:c0:cb:5f:9a:c9:8e:75:29:1e:9d:e1:01:c8:47:
0f:5f:df:12:bd:cc:9b:49:24:ba:54:67:88:24:79:
bd:b3:38:4a:ef:e4:f2:26:91:99:60:fc:73:b3:72:
24:d6:58:ee:39:87:15:9f:25:f5:7f:77:be:13:e0:
0f:49:c7:21:72:b3:b8:3a:ef:89:29:c2:40:bc:bb:
3e:18:2d:5c:ec:b5:aa:18:ec:b9:e1:19:41:3f:58:
75:8f:15:06:cf:e1:36:fb:dd:c1:1f:19:2f:72:62:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:90:F7:DE:77:1A:56:87:4A:FB:B8:71:58:B7:69:D2:44:D8:D3
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.226.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0a:65:1a:a2:47:f1:bc:1f:04:5d:f5:83:b7:ca:de:11:52:
71:86:37:bc:52:a3:81:02:a6:6b:f8:c7:5c:4a:57:c5:fc:c5:
a5:23:52:f2:e7:3b:ad:5e:78:3c:f5:fb:ef:34:a4:52:37:d9:
0b:47:90:8b:b2:5c:2d:f4:4d:83:84:01:66:13:e6:ae:a4:89:
45:3e:df:63:ef:89:7d:34:f7:dc:2a:81:89:bd:bc:d0:0c:82:
d3:48:d6:d1:e4:cb:8f:05:9f:53:44:b2:42:89:59:22:c1:0d:
54:4d:7d:97:9e:3a:0c:fc:2c:a4:da:85:b2:de:d2:77:91:c6:
81:77:3d:9b:90:5f:50:42:d6:fc:ae:2e:a3:c2:34:37:c3:da:
39:72:55:cc:13:71:f1:3b:a1:dc:98:b2:e4:6e:fc:e1:76:4f:
81:e5:c8:74:a5:a9:74:c8:46:45:54:04:59:89:99:d0:99:a9:
f3:99:70:6b:21:e5:26:8e:fb:27:e6:09:17:e7:76:5e:99:0f:
13:e0:b5:b7:26:e5:b6:b5:07:3d:22:18:86:9c:3a:82:58:5a:
dc:1d:ae:6c:b6:fb:39:d7:f5:88:2d:c5:45:a0:07:0a:79:bc:
02:af:82:c3:5f:f0:d7:b0:11:95:7d:35:61:5c:c5:50:f0:85:
76:b4:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:18:48 2025 by rpki-client