Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214941.roa
File: AS214941.roa (raw, json)
Hash identifier: Yr/hcMw98PCmM0axs0o32hRe4tG6anNcNytAGG6ki44=
Subject key identifier: 0E:06:4B:6B:84:DC:C5:BB:66:96:E3:E7:23:7E:7B:F1:70:D2:CA:6D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 536E8902E883586F9E4F72935464F72D656A8228
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214941.roa
Signing time: Mon 22 Sep 2025 08:55:07 +0000
ROA not before: Mon 22 Sep 2025 08:50:07 +0000
ROA not after: Mon 21 Sep 2026 08:55:07 +0000
asID: 214941
IP address blocks: 141.11.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6e:89:02:e8:83:58:6f:9e:4f:72:93:54:64:f7:2d:65:6a:82:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 22 08:50:07 2025 GMT
Not After : Sep 21 08:55:07 2026 GMT
Subject: CN=0E064B6B84DCC5BB6696E3E7237E7BF170D2CA6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:ed:22:fb:ca:6c:bb:53:6b:5b:dc:85:e9:
fd:e6:ca:2c:cc:55:d3:ea:1c:00:3e:db:8b:ea:e4:
ad:65:72:ea:bf:e8:72:6e:39:f5:7f:43:45:af:28:
46:07:66:a0:24:2b:77:55:66:3d:63:23:e1:76:df:
13:42:cd:5c:58:67:71:35:4f:50:ca:61:d9:49:a8:
d6:e3:d8:ee:3c:fe:46:ca:1f:07:f9:f6:4b:11:7a:
5b:c3:06:35:d1:0e:8c:6b:75:e8:e8:97:a4:83:ab:
8e:79:1e:23:2e:97:1e:d2:89:1c:a6:a5:87:ef:a8:
09:3a:e0:ae:5c:8e:b4:eb:9a:98:1d:48:da:7e:7e:
3f:a6:95:73:a2:fb:0f:70:14:c5:c3:6a:c1:3b:9a:
09:55:c0:3e:b9:7f:bc:12:52:e9:4e:c4:0e:1e:fb:
63:20:f5:2c:a8:b2:46:16:26:79:5e:62:45:a6:f4:
cb:eb:de:a5:12:f5:d1:7b:7e:6c:64:cb:7b:68:ae:
29:b5:a5:e8:6c:45:9f:51:25:52:07:cc:c9:57:02:
91:9c:9d:96:ab:06:fb:49:84:0b:d6:a3:dd:48:a3:
23:5c:67:f9:b1:51:b3:dc:54:ef:ca:9a:16:a5:ec:
a9:40:ee:f6:a4:f8:d2:50:77:52:af:49:29:d5:8a:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:4B:6B:84:DC:C5:BB:66:96:E3:E7:23:7E:7B:F1:70:D2:CA:6D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:b4:60:bf:e8:9c:5c:71:d2:b0:66:ba:c7:bd:1f:07:bd:07:
00:d6:94:93:4b:95:3b:ca:e4:97:39:5c:5c:7d:6a:e0:3b:98:
5a:de:e8:7a:29:30:87:93:6a:ea:80:73:39:34:b0:12:78:33:
25:ea:57:ab:26:14:14:29:09:5f:45:3b:9c:10:9d:69:92:09:
14:cc:40:9c:30:c3:33:3f:48:75:5b:ad:7d:e3:c5:88:aa:b5:
12:b6:35:2c:99:9a:72:98:bb:fd:79:23:26:df:42:0b:b8:af:
d5:70:31:7c:cb:56:90:bb:50:1f:d5:9a:fa:80:15:af:69:1d:
14:e8:a0:ca:b5:85:62:4a:31:a4:fc:b9:88:5a:c7:e0:d6:4a:
22:d7:b1:56:3d:91:54:ab:ef:e4:de:a8:fd:33:d5:b4:f4:55:
c7:0c:ff:07:20:63:cd:d3:75:42:33:7e:40:4c:d8:9d:d5:21:
a9:a9:cb:18:03:1a:7d:b2:af:7d:bd:5c:18:47:a5:d2:8c:03:
b1:c0:28:67:05:41:52:88:ed:8b:9f:46:71:f0:bd:74:5e:28:
06:a4:b3:bc:ae:8a:d4:9b:be:a7:be:73:d3:f0:f3:43:b3:16:
54:40:66:3b:82:68:00:c4:94:64:0d:bb:b6:f5:06:10:c5:32:
cd:ca:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:17 2025 by rpki-client