Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: H/5GWKV9CE9lkeuY6lGpSO72TZlQr5X8FS4Fv1Snfxo=
Subject key identifier: 61:E2:E6:73:D1:D4:CD:BD:2B:15:5D:66:81:36:31:B8:C0:3C:03:FE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3900FF265F0C15BE09628BD110A7895FE314AB58
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
Signing time: Tue 06 May 2025 13:57:47 +0000
ROA not before: Tue 06 May 2025 13:52:47 +0000
ROA not after: Tue 05 May 2026 13:57:47 +0000
asID: 2914
IP address blocks: 141.11.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:00:ff:26:5f:0c:15:be:09:62:8b:d1:10:a7:89:5f:e3:14:ab:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 6 13:52:47 2025 GMT
Not After : May 5 13:57:47 2026 GMT
Subject: CN=61E2E673D1D4CDBD2B155D66813631B8C03C03FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:63:93:89:ad:52:a4:cc:53:09:82:a8:02:
1c:2a:f7:94:9c:4f:84:b0:a0:ed:77:75:87:84:8e:
b1:b0:d9:83:2f:f2:a8:2a:1d:1b:91:73:38:04:53:
3e:a8:c9:95:57:45:44:c3:19:5b:bd:43:85:53:f4:
69:31:75:d2:50:7b:66:91:a1:6d:df:4b:60:7b:f8:
7c:6f:d7:ca:22:c4:0f:3b:31:ed:97:29:90:2a:c7:
1d:c9:f8:80:87:b3:ea:63:11:32:81:f6:c0:e1:d9:
25:bb:30:dc:38:23:68:31:35:59:b7:5b:c0:0c:a4:
66:29:01:39:74:0f:e0:e0:28:99:16:d3:8f:d3:6b:
f3:cc:6c:ec:69:f7:92:d4:d9:3c:3b:62:03:d9:c5:
58:0f:71:45:bf:69:55:6b:46:55:d0:4d:2b:a6:a6:
3d:53:ca:f6:5a:bb:bd:9a:14:3a:fa:3b:91:8c:f4:
7a:a0:c4:42:a9:49:aa:8a:22:42:1c:68:90:b4:9a:
15:e7:23:77:7d:57:1d:f5:74:cb:1d:75:01:39:02:
de:77:cc:25:12:58:c0:53:af:79:be:d7:f6:8d:45:
e9:4f:5c:51:b3:c5:66:37:30:c1:8e:01:4b:d5:37:
ae:d7:1a:12:fe:10:ce:f7:d8:91:62:80:fb:8f:cc:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:E6:73:D1:D4:CD:BD:2B:15:5D:66:81:36:31:B8:C0:3C:03:FE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.180.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c7:ee:59:69:57:a7:50:6d:3d:4d:09:8d:c9:e7:7b:1a:7c:
10:f9:f3:b3:34:a8:22:df:ac:f3:c9:83:86:4c:f1:78:9a:9b:
bb:dc:b4:bd:d1:56:69:98:74:28:e7:35:1e:a0:a0:55:5a:06:
3e:2e:66:de:db:31:9a:2d:52:b7:7f:d6:d4:38:af:c0:59:c3:
8b:ca:d5:22:e4:a8:5f:82:89:10:85:f4:a1:76:31:c1:fe:f4:
61:4f:5e:e0:e4:02:30:fa:d2:cb:7d:f9:2b:aa:61:ff:da:16:
98:e5:25:54:89:d2:1b:fb:0f:9c:fe:f8:ca:84:35:9d:37:1b:
37:f9:c8:a5:b3:86:c7:e5:b8:d3:7f:d1:a8:92:8a:db:2c:34:
81:99:8d:31:a9:6c:c9:72:42:f2:d0:5c:bd:ce:d0:9e:22:35:
b4:28:1f:cc:bb:d3:5c:98:5d:55:26:94:5d:fc:ad:2a:a4:93:
cc:dc:57:ee:be:c2:b2:1c:08:da:77:94:f5:7d:08:1d:18:6a:
f6:ec:9f:2e:56:e4:1a:f5:f0:01:0d:4a:4d:db:14:fc:04:d1:
c4:9f:03:b7:9c:fc:23:f7:d7:ab:60:6c:f1:fd:32:91:ef:71:
e2:a8:bb:44:0e:10:62:82:3d:80:e1:b1:4d:0b:a9:38:57:93:
ae:05:91:98
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUOQD/Jl8MFb4JYovREKeJX+MUq1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA1MDYxMzUyNDdaFw0yNjA1MDUxMzU3NDdaMDMxMTAvBgNV
BAMTKDYxRTJFNjczRDFENENEQkQyQjE1NUQ2NjgxMzYzMUI4QzAzQzAzRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DmOTia1SpMxTCYKoAhwq95Sc
T4SwoO13dYeEjrGw2YMv8qgqHRuRczgEUz6oyZVXRUTDGVu9Q4VT9GkxddJQe2aR
oW3fS2B7+Hxv18oixA87Me2XKZAqxx3J+ICHs+pjETKB9sDh2SW7MNw4I2gxNVm3
W8AMpGYpATl0D+DgKJkW04/Ta/PMbOxp95LU2Tw7YgPZxVgPcUW/aVVrRlXQTSum
pj1TyvZau72aFDr6O5GM9HqgxEKpSaqKIkIcaJC0mhXnI3d9Vx31dMsddQE5At53
zCUSWMBTr3m+1/aNRelPXFGzxWY3MMGOAUvVN67XGhL+EM732JFigPuPzGYhAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUYeLmc9HUzb0rFV1mgTYxuMA8A/4wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY0LtDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ8fuWWlXp1BtPU0Jjcnnexp8EPnzszSoIt+s88mD
hkzxeJqbu9y0vdFWaZh0KOc1HqCgVVoGPi5m3tsxmi1St3/W1DivwFnDi8rVIuSo
X4KJEIX0oXYxwf70YU9e4OQCMPrSy335K6ph/9oWmOUlVInSG/sPnP74yoQ1nTcb
N/nIpbOGx+W403/RqJKK2yw0gZmNMalsyXJC8tBcvc7QniI1tCgfzLvTXJhdVSaU
XfytKqSTzNxX7r7CshwI2neU9X0IHRhq9uyfLlbkGvXwAQ1KTdsU/ATRxJ8Dt5z8
I/fXq2Bs8f0yke9x4qi7RA4QYoI9gOGxTQupOFeTrgWRmA==
-----END CERTIFICATE-----
Generated at Sun May 11 02:19:08 2025 by rpki-client