Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214382.roa
File: AS214382.roa (raw, json)
Hash identifier: Ki8nvu0qzrW4FRyCt4/Za1P+arWdctl1aActlFiOoDo=
Subject key identifier: 19:F2:71:16:AB:CC:CF:A8:BC:3A:C7:B7:B0:2E:93:3B:E8:12:21:BE
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 7928B9DA9A895BEFF3BFF30FFD3294B5C124AD66
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214382.roa
Signing time: Thu 22 May 2025 06:20:40 +0000
ROA not before: Thu 22 May 2025 06:15:40 +0000
ROA not after: Thu 21 May 2026 06:20:40 +0000
asID: 214382
IP address blocks: 85.235.75.0/24 maxlen: 24
185.231.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:28:b9:da:9a:89:5b:ef:f3:bf:f3:0f:fd:32:94:b5:c1:24:ad:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 22 06:15:40 2025 GMT
Not After : May 21 06:20:40 2026 GMT
Subject: CN=19F27116ABCCCFA8BC3AC7B7B02E933BE81221BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:4b:13:57:99:de:ba:fa:4d:2e:88:45:a1:
43:a5:d1:5f:38:39:0b:50:5a:92:f3:15:64:c1:05:
54:0e:38:73:95:af:62:71:ac:75:85:77:5c:ee:87:
0c:e9:73:ec:80:be:35:11:45:de:b4:7d:c2:e5:c6:
4e:55:7d:7f:d8:77:e1:eb:da:6e:66:bf:ab:3d:4e:
cd:34:1f:ee:4b:f6:ed:c2:84:ed:8c:7f:5f:dd:ae:
eb:ef:a0:27:28:c4:68:b7:38:5e:15:3a:fe:dc:3e:
ad:59:02:e4:0f:dd:be:49:6d:28:33:f5:18:0c:bc:
c3:8a:f1:44:5e:b5:ca:8d:c7:ef:f7:d5:5d:e2:38:
f9:00:e7:a6:8d:b5:f0:dd:e4:9d:c2:75:39:32:61:
eb:67:73:0c:d7:64:76:5b:2e:33:20:6d:f8:10:9e:
fd:bc:3c:22:5e:32:0d:c1:f1:bf:62:e1:cd:6c:36:
b5:a9:52:d8:43:da:c9:a5:3b:27:7e:af:80:98:4f:
aa:2b:02:50:07:79:03:c3:8e:fc:09:b5:ab:20:ff:
9a:e2:26:54:d1:cb:9a:57:73:30:3e:84:3c:96:4a:
f6:ff:3e:0c:b4:9d:68:8d:32:ee:8c:21:a9:0a:a4:
58:c1:52:1b:5c:15:42:c8:e2:be:cf:6b:c2:eb:99:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:71:16:AB:CC:CF:A8:BC:3A:C7:B7:B0:2E:93:3B:E8:12:21:BE
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS214382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.75.0/24
185.231.226.0/24
Signature Algorithm: sha256WithRSAEncryption
35:23:1d:d5:25:77:b4:1d:f4:d4:5c:19:d9:a1:82:6b:61:cd:
bf:42:8d:b6:fc:dd:57:9d:64:f3:0b:6c:64:b8:46:e3:19:48:
2f:2b:f0:e3:db:e2:31:91:f2:cd:79:49:6e:2e:af:13:a4:f0:
b2:78:90:be:a0:a8:18:e3:6b:91:d8:50:72:cc:cf:7f:8c:5e:
97:16:9a:99:25:25:84:35:59:79:3c:ce:de:44:77:10:60:1a:
9d:3a:93:54:16:6e:bd:21:ae:bc:c0:e9:1e:e5:b8:d7:f1:79:
b3:69:8a:31:b6:3f:cd:63:cc:04:ae:11:ce:71:a5:5f:a2:31:
b1:d8:41:bc:75:17:94:c9:d1:04:ff:32:f3:29:88:0d:3b:5e:
63:fc:e9:1a:5a:ac:33:1e:89:3a:31:bf:c9:36:b1:48:87:18:
2c:8d:da:72:8d:2e:a2:bf:ed:64:bf:d8:fb:44:42:86:ce:1b:
50:96:be:0e:66:c8:d5:0f:29:18:64:28:d9:ad:2f:de:04:83:
a2:6b:2a:9f:12:f2:c8:c5:10:ca:8f:0a:45:2d:fe:d7:1b:f5:
1d:bb:f7:0d:13:8c:fd:1c:2d:47:23:4b:ac:98:88:72:35:33:
19:cc:8f:7e:8c:9c:d3:d2:29:65:e7:f7:d2:f1:e9:e4:a8:d8:
f3:7d:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:22:08 2025 by rpki-client