Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
File: AS214199.roa (raw, json)
Hash identifier: yzW5qRogtHkW0syFU5SzYtCbteo2fgQuEJ1mUWmYLw8=
Subject key identifier: 35:18:CD:C3:41:10:48:A8:B9:E6:B1:59:2B:FF:2F:6C:56:97:9D:A8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 76DB84722372DE57C8A4B6205541020B015773D7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 214199
IP address blocks: 2a0f:85c1:897::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:db:84:72:23:72:de:57:c8:a4:b6:20:55:41:02:0b:01:57:73:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=3518CDC3411048A8B9E6B1592BFF2F6C56979DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:59:c2:1d:8f:42:16:14:52:f1:f2:0d:31:
ed:19:a1:d1:0e:53:65:a4:99:fb:12:b8:c9:5b:f4:
c2:63:85:ed:54:28:b9:61:32:70:a9:61:cc:dd:7a:
1a:39:da:29:a5:06:cd:34:87:91:e1:1d:b3:9c:f8:
2f:f8:04:c4:30:5e:85:5c:70:1a:d4:08:c1:dc:bb:
3e:0f:40:e8:be:7d:8c:18:32:b5:7c:fb:b0:1e:7b:
b4:3f:e1:33:02:f6:ac:ed:df:7a:7c:6c:b2:45:5e:
11:9d:03:33:9f:d1:1a:43:43:29:d3:bf:b7:36:a2:
48:84:dc:ed:3c:89:e8:ac:2e:e1:e4:bc:fd:4c:b5:
a8:c5:bf:f5:4b:96:0d:fb:d3:b3:ce:17:bc:99:cd:
e8:67:8f:21:fa:52:b0:9f:2f:df:e2:d3:70:35:a4:
19:0d:10:9a:c5:30:c1:38:59:2a:36:a0:ce:ca:35:
72:e6:1a:f5:9b:b5:4a:4f:8a:19:30:f2:c6:59:58:
82:c4:03:d9:f3:5c:8e:51:b8:67:d0:6d:73:c6:c6:
36:60:b6:c3:e0:70:34:d3:e9:81:5c:3c:ba:7c:cd:
e7:b7:b2:fc:77:1c:55:61:36:52:70:e3:2f:fe:3c:
dc:ce:f7:e2:58:7e:d1:a6:36:e8:14:8a:75:4a:8e:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:CD:C3:41:10:48:A8:B9:E6:B1:59:2B:FF:2F:6C:56:97:9D:A8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:897::/48
Signature Algorithm: sha256WithRSAEncryption
b3:41:cb:f9:a7:f6:be:22:a1:3a:a1:27:a3:b3:bd:4f:fe:83:
ed:bb:ed:46:57:b9:da:ef:10:ce:eb:0e:a5:5d:d9:25:31:64:
e6:3c:e1:26:1b:3d:4b:58:de:69:f3:90:0b:67:f3:db:7a:a5:
78:5d:03:1a:b1:f3:86:d7:ec:33:9f:25:a5:4c:52:a1:f8:07:
9d:20:a7:71:44:92:91:ce:34:2c:f7:d8:72:1b:48:50:e6:09:
6f:cc:9d:a6:2c:4c:26:0c:e1:12:11:4f:7a:97:09:ac:27:e6:
a8:93:04:b9:09:0a:88:d1:3a:13:03:30:13:2d:fc:bd:79:04:
88:ed:04:69:32:78:c9:1f:d9:e7:e9:64:ff:57:ea:80:e7:92:
7f:c9:8e:2f:46:10:5c:37:31:fd:26:a4:a2:9c:d2:9d:23:a1:
af:2c:dc:1c:60:a7:ea:c5:d0:c4:08:e0:9d:7c:91:fc:ef:d7:
5f:ca:c4:88:4c:2b:57:e1:34:bc:30:17:81:21:d8:67:2e:0e:
52:78:59:4d:7f:82:12:5a:1d:f8:87:cc:ae:f6:45:69:d5:91:
42:9b:bf:21:01:e1:64:da:68:38:00:29:ea:e4:10:d6:d5:ff:
b2:e8:20:b5:9d:44:f5:69:bf:62:a1:0a:7e:64:4d:ed:70:2a:
eb:49:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:49 2025 by rpki-client