Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214305.roa
File: AS214305.roa (raw, json)
Hash identifier: CvbWkEIsYUaL470JIziKel8lm0ivTRTDWkqU6ASv37E=
Subject key identifier: AA:55:70:9B:38:B0:FA:20:7D:A6:53:2C:F5:24:16:33:AE:2D:5C:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 42403893D3CF5FFCF2A368047121ECDDFD70AE86
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214305.roa
Signing time: Wed 19 Mar 2025 01:37:00 +0000
ROA not before: Wed 19 Mar 2025 01:32:00 +0000
ROA not after: Wed 18 Mar 2026 01:37:00 +0000
asID: 214305
IP address blocks: 91.124.170.0/24 maxlen: 24
91.124.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:40:38:93:d3:cf:5f:fc:f2:a3:68:04:71:21:ec:dd:fd:70:ae:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 19 01:32:00 2025 GMT
Not After : Mar 18 01:37:00 2026 GMT
Subject: CN=AA55709B38B0FA207DA6532CF5241633AE2D5CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:58:d9:96:f6:a0:47:b8:1d:14:5b:5f:8b:
2d:55:db:6b:4e:75:d0:1a:cd:b1:e2:9c:66:5f:0c:
4e:43:ec:8c:8e:03:c9:7d:fa:87:3d:d6:fc:db:49:
23:89:fe:7e:34:6a:b3:cc:3a:1a:b7:59:f9:35:c4:
b3:cf:d4:22:43:cc:2e:43:84:c9:4d:ae:8d:45:22:
b6:66:50:9e:fe:c5:af:4d:79:00:06:33:f3:20:ea:
61:1f:38:27:0f:0e:a6:4e:de:18:f2:0c:8b:e8:7d:
c5:c0:3d:c7:08:ef:9d:a2:03:16:53:d2:9f:46:89:
bf:92:8f:eb:27:92:56:fb:56:9a:d3:33:ac:7b:62:
fa:cd:8a:a2:3a:d9:a9:97:93:4b:18:ce:59:ea:44:
b7:e3:2f:7c:9a:c3:30:0f:a0:e9:d8:07:fd:da:88:
87:3f:df:b5:f8:6b:7d:56:47:7b:d0:0b:e0:d6:c3:
a9:25:32:0b:7a:9b:fd:1e:bf:ad:54:ae:2d:c2:c5:
49:ea:70:f1:b8:78:9b:3d:8d:37:33:00:ce:2a:cc:
42:63:f5:b5:90:52:6a:49:b3:a6:9d:66:eb:e3:75:
2a:7f:80:ba:7f:e1:0b:57:db:ba:01:bd:65:bd:05:
c8:0c:63:37:22:3a:56:d8:3d:b9:47:25:91:22:88:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:70:9B:38:B0:FA:20:7D:A6:53:2C:F5:24:16:33:AE:2D:5C:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.170.0/24
91.124.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:46:af:0d:2a:0e:a7:e2:86:69:25:f8:fc:a6:bf:c9:43:9c:
3f:fe:27:22:f3:98:97:72:5c:38:12:44:a8:bc:80:49:32:7a:
b0:e5:06:09:59:7d:d1:6b:6d:c7:53:32:b0:bb:2a:88:ee:23:
66:1c:a2:4a:36:7a:da:04:96:4e:6a:2c:05:6f:ca:85:f3:1b:
51:10:89:6d:71:28:13:85:24:df:db:c2:1e:fc:e1:30:70:09:
21:98:a3:a6:9f:d5:42:7e:35:c4:be:3c:40:c6:da:6f:65:8f:
2e:63:fc:36:ec:6c:10:6d:63:b3:e8:f6:bf:85:2d:fa:04:13:
df:44:2e:9d:19:75:7b:98:90:91:96:b8:fd:39:da:39:74:e1:
83:fd:68:52:3e:11:46:a8:55:d0:37:3c:e8:ea:01:fa:95:95:
37:0a:6d:ad:ed:ef:7c:96:56:b7:aa:4f:1c:51:fc:e4:27:c5:
46:db:4c:da:8d:e5:d2:bc:c9:c6:29:19:ad:38:71:9b:6c:9c:
f8:0d:83:92:61:80:de:07:fe:10:d3:b5:80:c6:2c:33:73:84:
46:27:30:14:35:8d:0b:de:4a:a3:c6:73:9c:17:d6:fa:1f:03:
49:12:fe:9a:82:55:6a:df:02:cc:98:ed:80:3f:ed:1b:a6:81:
a7:38:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:05 2025 by rpki-client