Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
File: AS214446.roa (raw, json)
Hash identifier: l2mrGgaZYBiKPyKdsurDGbKhFMSAz1NjXtIKn6sB8Ls=
Subject key identifier: 22:69:F4:AA:42:DA:64:7B:CD:01:48:24:48:28:6B:12:A7:FF:F6:F7
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 52B804663147E5F557023F3B0F0A167E742CCF07
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
Signing time: Tue 19 Aug 2025 05:07:49 +0000
ROA not before: Tue 19 Aug 2025 05:02:49 +0000
ROA not after: Tue 18 Aug 2026 05:07:49 +0000
asID: 214446
IP address blocks: 2a0f:85c1:847::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b8:04:66:31:47:e5:f5:57:02:3f:3b:0f:0a:16:7e:74:2c:cf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 19 05:02:49 2025 GMT
Not After : Aug 18 05:07:49 2026 GMT
Subject: CN=2269F4AA42DA647BCD01482448286B12A7FFF6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:50:5d:ca:21:a1:d0:19:58:d9:48:8f:82:
28:8c:7a:11:b3:6d:25:57:d7:f9:1f:b5:9f:22:21:
80:b2:ea:18:1f:b4:42:24:65:bb:f3:b5:64:a3:97:
8a:f4:fb:ff:6f:fd:4a:a6:10:4d:cc:a3:19:a6:54:
50:0d:5b:d5:1e:a5:34:d3:e1:f5:a2:a4:25:85:4f:
30:29:c3:09:ae:5a:85:bc:b5:3e:b5:f1:0f:85:f3:
72:5d:e2:9b:20:4e:36:2d:b8:12:9b:13:b0:7e:22:
19:8c:4a:1a:9f:38:82:85:e5:ef:3e:55:0a:d4:cc:
02:d0:d7:fc:83:8c:f3:70:6e:26:5b:eb:18:ab:d0:
67:21:d1:96:53:57:54:8d:67:d3:9f:dc:57:b0:56:
c0:dd:99:b3:c2:0a:11:24:a9:eb:85:a6:14:a1:38:
28:7c:03:9e:1f:3b:d7:bf:b4:ec:2b:4f:0f:6b:c0:
a6:05:09:73:65:b9:c8:bf:b7:b0:40:81:1b:82:a2:
48:12:0d:fb:c7:88:47:6f:c3:c6:be:02:9c:d2:be:
6a:84:47:64:b5:49:bc:a5:85:13:40:01:08:e1:c3:
c0:03:bc:e3:ea:e9:ff:25:1f:c2:5a:7d:a9:8e:92:
1b:b8:1a:4f:72:f8:b4:d7:4e:1f:13:04:9c:60:93:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:F4:AA:42:DA:64:7B:CD:01:48:24:48:28:6B:12:A7:FF:F6:F7
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:847::/48
Signature Algorithm: sha256WithRSAEncryption
54:6a:fa:cc:39:2c:68:bb:65:c3:49:18:5a:86:e3:c3:18:83:
57:94:b2:ab:4d:0d:e5:3e:cb:c7:ee:83:b2:d8:4b:56:84:8a:
20:92:5e:3d:d8:a9:b2:82:99:61:71:9e:a3:4f:97:f6:3c:6d:
76:55:ee:22:0d:d4:7e:4e:8c:ce:5d:19:fd:49:3b:8c:63:5c:
ec:f5:f6:cf:3e:dc:e9:7e:c1:70:87:5c:b8:fd:28:02:ba:53:
3e:ef:35:f0:4a:cd:d9:02:2b:ca:fe:11:b7:7f:a1:e7:23:28:
cc:2a:e8:1a:f8:f7:36:60:84:cf:de:9d:57:30:7f:2e:96:c6:
a6:50:7b:b3:29:fe:27:3d:6c:96:d1:ec:af:67:51:4e:08:ec:
af:17:1c:5d:11:78:3f:bc:5c:91:33:fe:8e:89:de:4e:77:6f:
87:96:31:55:9b:46:43:59:14:b8:d4:8d:b5:b7:54:d7:0c:a4:
40:71:47:bd:f2:d2:02:27:d9:d3:e0:a5:c0:6a:96:d3:5f:20:
df:63:f7:ac:eb:af:8e:74:90:f7:62:bf:0d:19:37:ec:4c:a9:
e7:32:e0:d5:f5:26:fb:ac:60:b4:b2:e8:77:c3:04:ed:e8:71:
5b:22:ee:e2:3e:8d:9b:3e:c8:94:d3:ee:a1:0b:52:ff:15:a7:
23:22:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:43:57 2025 by rpki-client