Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
File: AS213605.roa (raw, json)
Hash identifier: jtdHeX6J47pMDdUHadg/re0rD+M4xFQGDLF0Om3/gDk=
Subject key identifier: 18:AA:E1:FC:B2:6E:4E:54:EA:AD:1E:70:DC:40:C4:F0:AC:AE:8C:42
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 339CCE6E91B2F28E4BC8881F98DCCA3DF725CE0C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
Signing time: Tue 17 Jun 2025 03:04:06 +0000
ROA not before: Tue 17 Jun 2025 02:59:06 +0000
ROA not after: Tue 16 Jun 2026 03:04:06 +0000
asID: 213605
IP address blocks: 2a14:7581:3100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:9c:ce:6e:91:b2:f2:8e:4b:c8:88:1f:98:dc:ca:3d:f7:25:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 17 02:59:06 2025 GMT
Not After : Jun 16 03:04:06 2026 GMT
Subject: CN=18AAE1FCB26E4E54EAAD1E70DC40C4F0ACAE8C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:28:47:b1:7c:41:c1:95:67:66:e0:44:26:
5f:29:66:d9:a3:b4:8d:50:59:68:13:5c:c1:82:03:
d9:d0:4f:20:86:fe:1a:0a:52:a9:39:14:74:10:ae:
3e:dc:f6:c6:76:80:a0:6d:16:fa:a7:e6:5e:52:3f:
02:24:26:ea:00:f6:59:4d:10:3a:08:58:1c:3a:39:
26:4d:70:5a:2a:5c:a5:4a:6c:f6:39:3f:bf:df:94:
f6:e4:8b:f4:74:28:34:81:55:d2:5e:83:4b:88:a2:
fe:3d:06:e1:3c:2e:78:87:4b:27:39:a3:a2:f2:c5:
79:1f:90:49:d4:64:b0:1c:b6:2e:c1:ad:84:40:b6:
bc:89:9e:66:b8:65:d8:bc:cd:1a:aa:ec:69:43:9c:
0f:6d:7e:4d:ea:24:3a:2d:64:25:00:cb:4e:af:37:
a5:37:6b:05:a0:1c:6a:c1:08:f3:ec:ea:25:ec:da:
ed:65:44:65:16:53:bd:be:77:94:02:b5:d7:a4:76:
27:23:be:b0:de:b2:f3:95:38:b0:52:98:76:a9:8c:
53:3e:8e:9c:17:99:9a:f7:d4:ae:e5:84:90:e2:08:
b5:d6:1b:15:38:08:00:5e:8d:16:3c:89:04:04:f9:
29:61:b5:50:e0:33:6d:8c:92:39:d9:82:d3:14:f6:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:E1:FC:B2:6E:4E:54:EA:AD:1E:70:DC:40:C4:F0:AC:AE:8C:42
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS213605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3100::/40
Signature Algorithm: sha256WithRSAEncryption
0c:85:89:8f:f5:d8:4a:96:07:07:97:3f:4f:0a:07:ef:9f:1d:
1f:ec:df:cf:3a:44:62:9c:7c:6a:67:b8:08:82:d3:9a:4f:96:
1e:74:3c:f1:62:47:b8:33:df:3d:94:0c:6a:10:78:f8:8c:dc:
17:e0:a3:2a:17:39:cd:60:30:79:2b:09:0e:69:f7:f7:83:7b:
28:d9:ec:b0:b9:c4:d7:00:2e:0c:f4:fa:fc:0a:92:d5:6f:fe:
a7:4b:fb:33:74:2f:e4:d8:bf:b9:cd:9f:2f:80:3f:1b:16:e8:
a5:48:77:0f:fd:10:8a:02:26:b0:73:ff:e2:67:99:0d:6c:bb:
8b:bd:40:79:0a:9f:ce:e7:23:70:a9:21:54:6f:76:98:1f:c2:
34:1a:e9:01:46:c1:ac:0f:a6:5e:91:78:e7:65:d9:63:68:f7:
2c:d4:4d:fb:8f:ef:e4:51:fd:63:1e:37:f3:f2:1c:77:cb:3e:
c7:9d:d4:f2:92:22:e0:a3:46:d2:8e:93:fc:10:4c:3a:90:be:
3d:7d:7f:b7:8e:b0:d6:5a:0a:e0:6a:06:56:44:af:ff:ab:64:
77:d2:fc:3d:4a:a9:90:54:8c:cf:9e:ad:89:3b:c1:22:4b:30:
2c:36:71:0b:43:5f:44:90:70:09:99:e4:2f:d6:fc:3f:0f:8a:
85:73:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:04:09 2025 by rpki-client