Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
File: AS214208.roa (raw, json)
Hash identifier: GLbncqQIav6ZQAD4ozqzTLy9NtwKW7FwE7dyb3cVXR8=
Subject key identifier: E3:8F:CE:63:46:A7:3C:B3:75:91:8D:08:AE:B9:77:A6:E7:A0:DF:53
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0DE6DF25CBE701FB8DB9E22E3784FC94F397B2C5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
Signing time: Sat 28 Jun 2025 09:28:23 +0000
ROA not before: Sat 28 Jun 2025 09:23:23 +0000
ROA not after: Sat 27 Jun 2026 09:28:23 +0000
asID: 214208
IP address blocks: 141.11.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e6:df:25:cb:e7:01:fb:8d:b9:e2:2e:37:84:fc:94:f3:97:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 28 09:23:23 2025 GMT
Not After : Jun 27 09:28:23 2026 GMT
Subject: CN=E38FCE6346A73CB375918D08AEB977A6E7A0DF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:df:e8:1a:ad:21:18:36:58:c1:0a:c7:9d:
d7:5a:67:b7:a2:42:09:b2:ff:c1:39:8c:9b:54:e3:
86:f9:88:af:24:24:63:b8:66:0a:cb:8f:d2:eb:8c:
2a:be:aa:eb:bc:b5:17:0a:68:5e:4c:ed:f6:f0:2a:
d9:16:a6:ba:99:5d:2b:df:37:e0:fc:4c:b5:34:3c:
8c:1d:a2:12:90:cf:35:9c:80:6b:d5:ad:d8:a0:ac:
17:66:85:93:e0:72:66:c1:63:ed:93:c4:79:da:ca:
44:0d:7a:da:9a:2f:96:b6:9a:1d:e0:5e:6f:07:0e:
da:e8:14:14:74:88:06:51:4d:e2:35:1e:b8:da:8b:
8a:bb:08:9d:30:ee:a4:1e:d0:f4:a5:55:fa:9a:d3:
7f:4e:7e:76:ee:dd:4e:4a:c9:70:89:e3:c3:46:16:
6a:96:11:bf:31:b1:85:72:c8:c6:0e:11:29:10:27:
38:08:a9:f6:7c:c9:b0:cb:bd:ec:f6:62:52:6b:c6:
66:cb:a2:19:0c:63:c7:40:29:cf:6c:d5:72:14:6c:
f4:28:88:7f:41:dd:57:56:2d:94:4e:76:ae:38:46:
b4:2d:17:99:4e:09:5e:96:75:7a:06:d5:b2:a4:8a:
a6:c3:9e:1c:be:f9:6e:27:ce:44:1c:79:70:b7:74:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:CE:63:46:A7:3C:B3:75:91:8D:08:AE:B9:77:A6:E7:A0:DF:53
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:76:ac:48:15:f2:1e:1d:5c:0f:3f:3d:96:84:71:65:48:ef:
82:47:38:85:2d:ec:a0:10:a7:ae:c3:b9:65:df:3c:cc:93:a2:
24:c1:74:bf:87:1d:2f:f6:96:9d:ed:2a:86:70:2a:70:1d:65:
c9:35:d1:d1:e6:01:98:e1:17:6b:a3:bd:21:2a:f9:03:f0:d7:
a2:b8:a2:e5:16:9e:09:1d:de:af:9e:9c:5a:2b:3e:6e:0a:00:
f0:69:f2:1b:f8:57:1a:c6:34:6f:55:e5:28:e6:58:ce:ef:c2:
22:f9:d5:b3:f3:bd:80:05:e2:b6:1d:b5:1f:01:88:d0:5c:1f:
77:69:6f:b1:cf:16:79:ba:e2:f8:4c:1e:80:f6:66:b5:af:c7:
ce:64:2f:a8:e0:d3:78:c5:c6:88:22:7a:b9:0a:5c:5c:fc:1b:
90:57:09:3a:3b:49:13:11:42:b0:fa:34:9a:dc:fb:06:b6:46:
a5:6a:ed:38:c0:0f:4f:97:95:4c:e7:bc:85:15:b9:bf:db:1e:
b5:19:8a:49:4e:fd:a1:7a:6c:c0:c5:8c:be:f7:0e:69:02:ab:
1b:42:3c:a2:c7:48:3b:58:1d:40:c4:3c:56:0a:b9:5f:42:31:
2b:9d:6f:0b:69:46:ac:00:36:e9:95:63:08:7c:d1:56:5a:56:
8b:e0:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:56:42 2025 by rpki-client