Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
File: AS214312.roa (raw, json)
Hash identifier: P3en7u8l3y0tgOGO4bghyhhzo/HV++4fKdS/K6ZXnKU=
Subject key identifier: 12:2F:D5:2C:8B:F2:48:F2:46:4A:44:67:43:F5:91:DC:FA:CE:60:1A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5EDE5B7837933581B6EA03C204F726213E154F64
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 214312
IP address blocks: 2a0f:85c1:892::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:de:5b:78:37:93:35:81:b6:ea:03:c2:04:f7:26:21:3e:15:4f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=122FD52C8BF248F2464A446743F591DCFACE601A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:87:83:3a:24:59:22:c9:29:8c:5a:5b:89:
77:48:df:74:7a:f6:ac:a2:2e:1e:5a:1e:de:b7:01:
e0:a7:ea:7e:4f:6e:b3:0e:b3:ae:a3:3c:6c:62:d0:
d3:d4:ae:99:dc:a2:e4:19:57:d4:0b:da:32:96:ea:
12:83:84:dc:e8:c0:cc:40:f8:89:fb:82:5e:67:d4:
6a:b6:03:9d:d0:40:18:a4:d5:d9:0f:39:de:21:55:
1c:ef:16:77:53:94:7b:69:cf:7d:a1:e0:37:46:fa:
cf:96:44:2b:d0:11:57:b9:b8:23:38:26:e3:21:50:
82:b3:42:bc:99:95:0d:4b:9c:fe:3a:fe:db:23:3d:
36:10:34:2b:ab:ab:32:7a:16:d5:5d:a4:cb:86:33:
e6:10:57:12:a9:14:1a:8f:a3:44:78:de:d0:e8:84:
c5:d8:d9:9a:f1:97:aa:a2:c5:0a:c9:97:d9:cd:c3:
89:31:cf:26:43:20:16:66:81:53:12:99:e4:f6:7d:
2d:59:77:b0:9a:09:e2:25:f2:f5:d7:9e:7d:92:61:
28:6b:a8:70:9b:c3:e8:b5:6f:4e:4b:13:69:e8:bd:
84:6f:83:14:35:85:67:a4:01:3b:ab:a7:5f:dd:76:
39:22:2d:8e:d7:ed:d0:a4:d4:3d:b4:18:51:f7:0b:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:D5:2C:8B:F2:48:F2:46:4A:44:67:43:F5:91:DC:FA:CE:60:1A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:892::/48
Signature Algorithm: sha256WithRSAEncryption
a2:cb:d7:c6:97:3c:d6:ab:f6:42:7b:fd:28:0d:f9:a3:05:33:
26:65:31:cc:23:5d:02:ab:46:63:6f:7d:df:e2:3b:14:eb:8a:
d4:4d:d6:ee:8d:72:49:bd:28:77:9b:17:04:29:de:33:81:bc:
f3:f9:ee:5a:d7:c4:54:f1:76:43:5b:52:11:14:7d:16:0f:2b:
c0:e3:44:38:d8:23:f3:f6:de:06:28:5d:50:69:af:86:17:2f:
c1:99:18:44:16:ef:55:82:d9:65:46:ef:a0:d2:37:d9:12:d4:
fe:c1:97:aa:ab:fb:14:ff:2b:fd:47:58:d3:d7:09:9d:f7:2e:
33:95:ba:af:3d:61:9a:e8:82:54:7e:e7:18:bf:bc:3c:86:24:
38:e7:74:f4:37:88:87:d9:53:13:c7:32:b4:be:20:f3:36:9b:
7f:f7:c9:b6:0e:23:ea:39:f6:63:c9:09:14:c0:2c:4c:d9:0b:
0c:e0:cf:dd:b3:09:c2:53:b7:24:a7:c3:5f:5f:71:af:4f:c4:
4b:f4:fe:05:5b:c6:50:35:ed:78:7a:bf:ca:8d:24:0a:9a:f2:
25:91:13:5f:75:6a:00:93:64:9a:9d:44:13:8f:65:b0:15:3d:
49:6d:5a:7f:c3:7f:15:8a:47:96:f8:d9:40:9c:0e:fb:59:29:
81:66:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:42 2025 by rpki-client