Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
File: AS214913.roa (raw, json)
Hash identifier: BSQNfilIwDSy3aDGtgh5EBNYU9MQFPPUNbJbPPk2WLI=
Subject key identifier: 39:6D:67:A7:12:6F:61:ED:E7:D9:0A:C1:19:94:D3:6C:B7:7E:E6:00
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 04AF7C430D885AF4962277CB0A85143D45D9DE1A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
Signing time: Sat 23 Aug 2025 17:55:29 +0000
ROA not before: Sat 23 Aug 2025 17:50:29 +0000
ROA not after: Sat 22 Aug 2026 17:55:29 +0000
asID: 214913
IP address blocks: 143.20.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Aug 2025 01:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:af:7c:43:0d:88:5a:f4:96:22:77:cb:0a:85:14:3d:45:d9:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 23 17:50:29 2025 GMT
Not After : Aug 22 17:55:29 2026 GMT
Subject: CN=396D67A7126F61EDE7D90AC11994D36CB77EE600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:a7:93:f2:17:df:af:a2:e9:79:b2:94:e1:
dc:87:2b:69:45:94:ff:0a:75:b8:8c:23:ce:64:bb:
1d:e4:eb:0e:4a:57:5f:c7:6a:67:53:51:b3:a3:70:
d3:e4:99:61:78:9f:74:69:cc:49:8b:7d:29:7a:00:
db:61:8b:83:75:68:ba:5f:d3:32:69:cc:25:fd:13:
46:a9:b9:af:30:7b:02:d6:48:d7:a1:95:7b:01:ea:
98:84:a0:d0:4a:cb:71:77:99:1c:aa:dd:73:97:cf:
16:ea:b9:6e:78:c6:6d:79:d8:3e:3c:92:68:4e:8c:
3a:11:b4:13:91:45:a7:dc:9b:c4:a1:86:bd:77:1d:
52:a0:b3:8f:69:b7:13:81:5e:7d:b6:a1:00:37:d0:
9a:e0:70:65:9f:2f:cf:6c:66:bb:8e:64:f6:fa:b7:
8c:4f:6c:77:53:e7:c3:40:2a:ca:c6:6e:02:2d:ee:
ee:d3:3b:24:1f:d0:5a:f6:0d:e7:d7:24:d8:3f:9e:
62:0b:8f:cd:f8:03:ce:14:54:ba:d6:0d:ef:7f:e2:
18:d3:80:fd:d0:44:f0:c6:c4:c8:db:8c:78:9a:17:
b6:6b:92:60:66:c2:72:a0:ce:b6:0c:01:33:f7:23:
44:f1:17:ee:c6:d8:a8:c8:8a:7c:cf:4f:e9:c7:ca:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:67:A7:12:6F:61:ED:E7:D9:0A:C1:19:94:D3:6C:B7:7E:E6:00
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.12.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a8:16:d1:ab:3e:4f:6f:bb:a5:cd:df:51:94:a3:32:5c:8d:
c0:10:69:54:05:98:71:76:ad:15:44:00:e7:f6:44:41:49:22:
91:f1:f7:7a:7e:25:92:93:e7:ef:4f:ea:60:6d:fe:b3:bf:c3:
2f:ba:f8:5b:52:d3:cd:6a:e6:3c:24:55:d9:4f:3f:47:dc:01:
ca:d1:87:36:74:b7:95:a9:62:f8:26:e1:4f:39:4c:a7:0e:03:
56:a5:da:9a:0f:7e:bf:e3:47:55:2b:da:e6:a4:08:ab:3f:0a:
1c:1a:8b:d1:a9:fc:36:55:1a:66:8f:83:a2:a4:48:0e:ba:c3:
80:dd:e2:e6:a7:c1:47:92:ca:de:f0:cd:97:2e:b8:ff:c4:bb:
00:fb:55:85:66:58:6a:c4:e5:06:4d:d7:af:96:ad:47:1d:05:
f8:2c:ed:98:52:4a:da:36:71:10:16:60:b7:73:44:0b:8b:2d:
de:45:a4:ac:48:3c:35:b8:2a:15:8a:43:44:cd:29:a7:e7:3e:
19:d6:a3:30:a1:f2:49:a1:59:6c:31:77:68:ba:ae:98:d0:e7:
2e:bb:6e:e5:cf:a6:4c:8c:44:1a:74:18:95:29:d8:ce:2f:10:
b3:fe:4d:f3:76:45:d3:35:97:0d:63:80:c8:82:6f:5b:2d:8c:
82:08:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:33:40 2025 by rpki-client