Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
File: AS142111.roa (raw, json)
Hash identifier: WMnIFkFnRfzmFAOHbxwqvBfdgHytkfSAOd1D3USedgo=
Subject key identifier: 53:0B:67:7C:2F:C9:E8:81:5B:8F:AD:C3:3B:C3:B3:88:B8:5F:B4:82
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 34C0E89582A87E8BC8F63CF6C106744684E620B3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
Signing time: Mon 30 Jun 2025 21:08:35 +0000
ROA not before: Mon 30 Jun 2025 21:03:35 +0000
ROA not after: Mon 29 Jun 2026 21:08:35 +0000
asID: 142111
IP address blocks: 141.11.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 20:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c0:e8:95:82:a8:7e:8b:c8:f6:3c:f6:c1:06:74:46:84:e6:20:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 30 21:03:35 2025 GMT
Not After : Jun 29 21:08:35 2026 GMT
Subject: CN=530B677C2FC9E8815B8FADC33BC3B388B85FB482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:d7:68:13:f5:ce:40:95:0e:8a:ce:c5:d2:
53:6b:42:b4:90:aa:0d:6b:9a:60:d5:bd:fb:4e:49:
7a:80:be:ab:ba:ef:c6:a3:fd:f3:6f:6f:97:98:40:
0b:af:17:19:0e:c9:4b:3c:b2:73:b9:30:8d:8c:dc:
d8:f8:b9:92:ca:5a:24:59:01:ad:92:3c:ae:46:91:
25:ce:69:d5:f2:99:53:5a:44:c5:de:66:4e:ab:9d:
5e:02:be:b6:4f:14:c7:66:10:32:40:80:27:1c:24:
88:4a:59:9e:35:60:d1:77:91:7b:de:51:a6:56:ca:
7a:cd:f9:d5:3c:0e:bc:94:04:7e:3b:76:50:f3:e5:
06:9d:dd:e8:92:b7:b8:fb:e9:a5:61:6a:51:db:db:
7a:1e:8b:c1:59:15:95:f5:b4:4c:c4:8d:d7:81:49:
cd:5c:e4:cd:67:ba:98:61:9c:19:34:bb:d5:92:e6:
f5:d1:d8:93:aa:ef:37:c0:b5:97:e1:a1:bb:4f:d3:
94:65:25:5a:fe:d1:d4:9b:61:db:72:e0:3c:e6:39:
38:de:d5:fc:10:32:c6:4c:47:9c:23:ee:b5:d5:41:
ef:e3:b6:1b:da:56:2e:aa:6b:10:7d:68:fc:88:c3:
6d:83:3d:58:29:87:43:94:81:97:54:da:cc:ef:11:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:67:7C:2F:C9:E8:81:5B:8F:AD:C3:3B:C3:B3:88:B8:5F:B4:82
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:09:fe:ee:fb:10:ec:31:23:b6:8b:4c:01:b4:2d:3e:a4:92:
aa:80:38:22:2a:b5:58:5f:e5:da:0c:46:f4:34:86:8f:78:cf:
93:30:4e:31:a0:48:ab:b4:f4:b9:d0:e2:e2:77:1c:27:d0:b4:
a1:55:6c:1e:94:60:13:a2:5b:6d:e1:b9:cf:21:30:e8:14:73:
26:0c:23:fd:99:63:67:38:7d:35:50:85:37:f3:35:3e:3f:a1:
44:99:21:a5:79:d3:93:02:06:44:5e:44:f4:1b:fb:25:68:84:
62:21:7e:71:16:7b:6f:6a:c0:96:18:c1:56:bc:19:42:f6:80:
52:99:51:40:b9:10:8e:f5:b0:f8:8f:05:43:14:31:a6:5e:8a:
7c:96:98:0c:42:60:7b:ac:fb:28:82:d8:de:25:5b:72:f5:81:
f9:51:fb:76:30:83:23:0e:51:58:89:28:0c:ce:10:ff:69:ce:
ca:f1:93:f4:30:1a:ad:0a:b8:1a:a5:f8:06:bb:b3:f5:04:6d:
07:11:06:4d:0e:d5:f6:78:bd:c2:50:a4:f9:bf:20:8e:d3:f3:
89:9c:ab:cb:bd:bb:16:9c:03:c1:5a:26:25:83:11:88:a7:ef:
f8:df:29:39:20:80:d1:3e:b4:a8:f9:9c:b9:d7:a4:0e:64:d9:
d1:a5:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:45:32 2025 by rpki-client