Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: B1yXQF7nLujbfNS5UQ4It63Od1EFQAJSSCugxYWxKvE=
Subject key identifier: 1E:33:0C:4E:78:2B:DB:21:6E:9C:DA:30:08:18:D7:EB:D0:7F:70:FF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 518347F2CC11709F6364C55FC1EE3429B8942868
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
Signing time: Wed 18 Jun 2025 19:10:38 +0000
ROA not before: Wed 18 Jun 2025 19:05:38 +0000
ROA not after: Wed 17 Jun 2026 19:10:38 +0000
asID: 214025
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:83:47:f2:cc:11:70:9f:63:64:c5:5f:c1:ee:34:29:b8:94:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 18 19:05:38 2025 GMT
Not After : Jun 17 19:10:38 2026 GMT
Subject: CN=1E330C4E782BDB216E9CDA300818D7EBD07F70FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:92:01:6d:03:d0:0e:e8:a4:dc:d9:3d:da:
1a:7c:a0:c6:27:c1:38:27:d8:83:46:ba:0d:0f:52:
5f:11:23:3d:2a:9b:c0:93:c6:05:5d:87:ac:5c:6b:
e9:f5:22:c5:2e:38:d4:40:d2:d5:2c:b3:55:1f:ad:
07:b3:4b:5a:8f:a4:d3:9d:d9:93:bd:63:94:10:e6:
3e:06:1d:8c:96:0a:80:cb:89:6b:e2:8f:e8:d8:d1:
f3:1a:a7:4a:81:e4:f3:58:d3:15:7a:9c:85:f0:f9:
b0:f8:42:67:ba:81:1d:3a:99:3f:33:19:6e:69:e7:
03:53:e9:56:3b:36:7d:1e:67:a3:11:b4:5a:74:45:
ac:ed:86:3b:bc:96:48:51:57:cb:66:9c:32:b4:29:
f4:d0:6f:cb:82:49:d2:03:7a:31:91:3a:8d:a6:42:
76:73:1e:4b:83:6a:a3:52:b0:25:a2:da:49:08:dd:
3e:19:ea:42:40:2a:42:27:d2:5d:6a:53:a5:e1:4b:
bf:e5:56:f1:8d:1d:e9:69:02:c3:c1:b3:80:ad:d9:
58:73:b8:4f:7f:f2:c0:b2:06:8c:bc:97:fb:15:f4:
b3:4a:ca:06:55:03:3d:3f:3d:92:f6:ea:bb:28:d2:
4d:d4:ee:e8:0d:3c:00:31:25:e1:6d:88:ed:eb:35:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:0C:4E:78:2B:DB:21:6E:9C:DA:30:08:18:D7:EB:D0:7F:70:FF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3e:8d:cc:52:4f:b6:40:ad:c9:1b:d9:2b:28:57:6f:2a:2d:
18:1f:f9:8c:f7:5e:3a:9f:ee:9d:ad:66:1e:3a:ce:3e:6f:fc:
3d:5f:6d:3e:dd:c9:7e:c8:bd:f8:a9:99:16:b8:ae:2a:68:32:
76:fd:45:c5:3d:bb:0b:71:a0:c4:25:43:e0:de:5b:ac:1e:92:
d5:c6:d1:74:85:b3:42:ac:58:35:b6:5a:ef:a4:5e:d0:6e:df:
cf:99:df:85:17:21:84:05:72:52:c3:c7:8a:bf:05:05:82:95:
07:43:10:6b:0f:2b:0f:41:46:9d:20:1b:63:07:fc:47:6e:23:
0d:41:f3:52:1a:6f:67:e1:13:7b:d4:a8:e5:09:b2:c4:3a:34:
bb:91:5b:e1:5e:5d:24:34:89:c3:58:be:19:50:54:71:8c:ab:
db:2e:19:99:d5:8c:5c:6c:40:88:ed:78:bf:c6:b5:34:02:d8:
2b:17:8e:16:dc:63:cc:ed:53:ab:e3:34:bc:b8:b0:e1:60:f4:
4e:f4:9c:7a:1e:38:24:41:51:54:6a:be:4c:e1:38:ea:3a:ac:
16:d8:b9:b2:8d:99:a4:a4:fd:62:12:70:0e:e8:52:fc:77:fa:
10:3b:e4:03:7a:88:13:fb:0f:1e:d7:0b:bd:3e:98:2e:cd:e6:
a6:4c:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:39 2025 by rpki-client