Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
File: AS214083.roa (raw, json)
Hash identifier: C45fBE6+TevdBYlqInCkIvivn9EgIZo1pYhkWqmbCLo=
Subject key identifier: A6:0B:2A:01:3E:8E:A1:C1:F8:10:15:E6:5D:76:35:61:5A:2A:FF:D4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 01954608393E476C14CF8FA69194BB6DB7659C86
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
Signing time: Sun 08 Dec 2024 10:44:01 +0000
ROA not before: Sun 08 Dec 2024 10:39:01 +0000
ROA not after: Sun 07 Dec 2025 10:44:01 +0000
asID: 214083
IP address blocks: 141.11.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:08:39:3e:47:6c:14:cf:8f:a6:91:94:bb:6d:b7:65:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 8 10:39:01 2024 GMT
Not After : Dec 7 10:44:01 2025 GMT
Subject: CN=A60B2A013E8EA1C1F81015E65D7635615A2AFFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:c3:d3:35:91:b9:7f:d4:51:bf:47:d0:d7:
98:37:94:9e:c8:5d:fb:2d:ef:80:e4:f5:3d:8e:5c:
a4:20:3c:9f:ea:d9:47:04:b8:d6:f8:f6:a3:4a:13:
da:90:84:24:92:97:fb:e7:36:5c:3c:07:53:a0:d3:
5b:1f:54:f6:74:92:f9:ee:50:07:7c:69:50:c3:52:
e9:b7:d1:15:dc:37:91:1f:d0:e3:9d:c0:f5:68:7c:
2e:83:e9:df:e0:81:57:7a:96:e3:92:94:89:13:be:
8f:68:2b:14:40:12:01:21:be:89:3b:2c:d3:3b:ca:
88:59:72:9e:0f:c2:7b:6c:69:83:f4:89:dc:8c:12:
24:c3:4f:15:8e:50:d6:57:9a:dc:d5:2e:a0:0c:4f:
18:68:13:6a:64:49:13:d1:1b:92:38:2d:49:22:c2:
80:cb:dc:82:cb:7b:ff:94:ca:60:d2:b4:bc:96:3e:
96:64:86:20:82:90:46:9f:ae:d9:ea:a7:1f:6d:cb:
c7:a4:4b:23:6e:26:31:ff:90:97:ce:f3:e1:fb:d2:
be:eb:ae:e5:34:05:d5:c5:ff:d9:cb:cd:2b:9c:1c:
5b:e2:cf:03:ac:1a:8f:4b:cd:51:36:66:2e:2a:c8:
9b:0c:0f:ae:dd:0f:ca:a0:73:70:e0:3c:98:09:af:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:2A:01:3E:8E:A1:C1:F8:10:15:E6:5D:76:35:61:5A:2A:FF:D4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.49.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cf:d0:95:50:21:d8:25:56:1b:d9:b3:c8:3a:0c:e9:15:b2:
07:15:81:15:dc:79:db:81:55:21:83:df:7e:7d:42:fc:65:20:
ac:27:34:1e:be:60:6d:69:f5:70:79:cc:cc:36:d0:59:d3:01:
87:56:28:90:52:db:12:9d:6e:a7:fe:a1:cd:b2:6a:49:76:41:
b2:71:61:72:6c:66:b7:53:50:2a:59:43:57:ba:60:07:cf:43:
ed:74:8a:f1:44:09:d4:cb:ac:6b:ca:fb:07:42:65:5a:64:ab:
e7:a1:42:ea:56:b4:aa:ba:bb:1c:ac:03:0e:b0:49:3c:05:06:
91:45:e9:c3:99:dd:15:5b:80:f7:0c:c3:ba:c3:0a:3b:23:db:
f7:03:76:3f:74:ac:73:f1:c7:0e:a4:53:b8:a8:d7:72:34:c7:
d8:10:fd:12:a3:01:2f:73:9c:67:8f:48:26:ac:b6:8a:70:03:
cf:76:1f:30:71:0d:e0:70:47:98:56:2d:d1:4a:3a:9b:f3:d8:
d4:07:92:58:24:c3:46:8f:00:59:08:c2:e5:86:5c:d8:27:57:
09:3c:63:d0:04:d9:3a:1c:d0:12:9b:2a:9d:f8:93:66:4f:46:
35:f8:f3:ec:4d:8f:43:ec:78:7b:38:78:e0:75:c5:07:0b:9b:
f2:bc:b2:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAZVGCDk+R2wUz4+mkZS7bbdlnIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDEyMDgxMDM5MDFaFw0yNTEyMDcxMDQ0MDFaMDMxMTAvBgNV
BAMTKEE2MEIyQTAxM0U4RUExQzFGODEwMTVFNjVENzYzNTYxNUEyQUZGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/8PTNZG5f9RRv0fQ15g3lJ7I
Xfst74Dk9T2OXKQgPJ/q2UcEuNb49qNKE9qQhCSSl/vnNlw8B1Og01sfVPZ0kvnu
UAd8aVDDUum30RXcN5Ef0OOdwPVofC6D6d/ggVd6luOSlIkTvo9oKxRAEgEhvok7
LNM7yohZcp4PwntsaYP0idyMEiTDTxWOUNZXmtzVLqAMTxhoE2pkSRPRG5I4LUki
woDL3ILLe/+UymDStLyWPpZkhiCCkEafrtnqpx9ty8ekSyNuJjH/kJfO8+H70r7r
ruU0BdXF/9nLzSucHFvizwOsGo9LzVE2Zi4qyJsMD67dD8qgc3DgPJgJr+bLAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUpgsqAT6OocH4EBXmXXY1YVoq/9QwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE0MDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQsx
MA0GCSqGSIb3DQEBCwUAA4IBAQAiz9CVUCHYJVYb2bPIOgzpFbIHFYEV3HnbgVUh
g99+fUL8ZSCsJzQevmBtafVweczMNtBZ0wGHViiQUtsSnW6n/qHNsmpJdkGycWFy
bGa3U1AqWUNXumAHz0PtdIrxRAnUy6xryvsHQmVaZKvnoULqVrSqurscrAMOsEk8
BQaRRenDmd0VW4D3DMO6wwo7I9v3A3Y/dKxz8ccOpFO4qNdyNMfYEP0SowEvc5xn
j0gmrLaKcAPPdh8wcQ3gcEeYVi3RSjqb89jUB5JYJMNGjwBZCMLlhlzYJ1cJPGPQ
BNk6HNASmyqd+JNmT0Y1+PPsTY9D7Hh7OHjgdcUHC5vyvLK2
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:13 2025 by rpki-client