Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214409.roa
File: AS214409.roa (raw, json)
Hash identifier: W6hAhXgjUdUqDoM3+etu7UrREoOwRl7nCWnCqmo2ano=
Subject key identifier: 5C:62:9D:2A:9A:D1:17:A1:84:54:E5:43:8E:DE:82:75:F4:50:20:12
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1CA7D14A59B1EB1669812C9A60B05888EB89E468
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214409.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 214409
IP address blocks: 2a0f:85c1:84d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a7:d1:4a:59:b1:eb:16:69:81:2c:9a:60:b0:58:88:eb:89:e4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=5C629D2A9AD117A18454E5438EDE8275F4502012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:06:27:17:48:96:90:4a:9a:ef:52:58:4f:
b0:d0:9c:86:dd:6e:6b:a5:b1:2f:be:7e:16:55:f4:
dc:08:09:68:af:30:30:23:3d:48:27:e1:8e:4c:fa:
7f:51:d3:59:dd:1a:5e:4a:7f:a7:d1:df:98:73:15:
26:38:18:19:81:b0:43:13:99:b0:73:9a:43:ce:8e:
5a:e5:fa:54:92:f5:c2:57:c1:71:7f:5e:ef:a1:a3:
a2:3d:9b:23:ec:93:be:9f:b9:a2:f6:26:88:9d:58:
fc:20:09:33:fd:22:02:ce:8d:40:b0:bb:26:85:3b:
f6:82:c8:91:32:a8:94:2f:48:49:ac:32:48:25:3d:
6a:6d:bc:1d:5e:64:14:b8:41:3a:25:7d:39:1e:da:
6a:42:b7:e5:f6:d9:34:24:26:6f:3e:74:1a:b8:bd:
5f:82:25:57:eb:50:cc:22:9c:dd:b0:0f:2e:50:74:
da:a4:44:4c:a3:92:bc:f5:bc:bd:db:15:b4:a7:b7:
a3:bc:cb:81:7a:93:b9:d1:89:2f:ec:24:cb:02:d0:
74:64:e2:11:92:1c:34:24:12:5c:ee:39:e1:6f:29:
46:20:b0:24:49:c6:67:f9:c6:97:38:ce:49:d9:b2:
6b:84:58:21:63:fd:72:19:cc:07:74:c1:a7:3f:6f:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:62:9D:2A:9A:D1:17:A1:84:54:E5:43:8E:DE:82:75:F4:50:20:12
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84d::/48
Signature Algorithm: sha256WithRSAEncryption
c9:f4:38:a8:52:4c:17:62:d6:0c:c1:d1:ed:b9:4d:a9:87:8b:
dd:ff:de:2c:ed:ed:36:69:6a:f2:a5:3b:4f:8e:9b:44:6d:36:
29:22:72:ea:a7:a3:95:27:48:f7:76:5c:57:c7:2b:0d:ac:74:
1a:0b:5b:5a:69:81:4d:3a:2a:61:31:0c:3f:1f:a5:6a:1b:42:
01:ef:fc:15:09:53:69:58:4a:64:ee:a6:ff:d6:4a:e5:11:11:
dc:3c:2d:21:8b:84:aa:75:38:a8:21:ae:18:ce:40:2e:54:89:
0d:93:68:f2:df:53:a0:4e:59:d3:97:6e:dc:65:f5:0f:e6:14:
ab:ac:5f:cb:54:2b:98:cd:7f:d3:75:67:ec:78:41:bf:4b:86:
ee:4e:07:f6:1a:31:5a:d3:bd:ae:42:bc:32:69:79:5a:92:50:
51:59:e5:2c:f1:db:30:58:26:be:3c:f0:cc:00:2d:36:51:90:
f9:e0:17:3e:c4:39:d7:09:9b:9b:65:a1:56:53:b2:45:c2:5f:
ea:ac:bb:38:50:57:7b:a9:1c:58:63:f4:ff:56:14:17:1c:14:
fe:80:d5:07:32:64:56:e6:cd:37:78:72:dd:a7:eb:b6:50:03:
3e:ee:76:a0:94:07:79:87:ba:ec:e7:5d:e8:ee:be:52:2a:4c:
ed:62:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:15 2025 by rpki-client