Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: utDAd2cRa53IUcSGSen7epuwDAt0orQEjUbPzapSYt4=
Subject key identifier: 2A:5E:9B:F3:08:00:D7:F3:83:40:24:1B:7E:27:3F:41:AA:12:F3:0E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3C0921D010BF5E38B4EA120418950F7BEC1B289B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
Signing time: Sun 29 Jun 2025 00:00:43 +0000
ROA not before: Sat 28 Jun 2025 23:55:43 +0000
ROA not after: Sun 28 Jun 2026 00:00:43 +0000
asID: 214654
IP address blocks: 46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:21:d0:10:bf:5e:38:b4:ea:12:04:18:95:0f:7b:ec:1b:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 28 23:55:43 2025 GMT
Not After : Jun 28 00:00:43 2026 GMT
Subject: CN=2A5E9BF30800D7F38340241B7E273F41AA12F30E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:81:73:20:72:08:10:55:40:57:9f:c6:a4:
0d:5e:11:b2:8f:ae:0c:fe:3b:97:35:c2:2e:9a:df:
d8:80:09:97:05:d1:2d:ec:90:a8:b0:7d:92:71:cf:
43:ec:41:18:2f:54:4c:7e:65:3d:7c:1a:f2:74:95:
fb:6a:f3:90:33:c0:2c:58:62:ed:37:4e:0b:a3:d7:
75:2c:88:59:23:11:f2:d4:ba:9a:d8:a7:93:05:34:
70:57:b3:47:7c:7d:43:8c:fc:bc:fd:85:2c:82:ac:
52:33:4c:d7:73:91:e1:9b:1e:e5:59:51:7f:2f:d1:
7a:31:29:0d:76:38:63:c3:1f:f7:f7:4b:72:ed:f4:
94:a7:2e:e1:5e:99:f9:e3:a8:ab:55:a8:d2:ee:eb:
44:ca:0a:60:e6:b0:d9:96:a4:3e:3c:77:12:47:3f:
51:d7:8f:a5:be:44:70:32:c0:7c:bd:01:17:0f:18:
2d:b1:0f:67:9f:63:04:6b:75:b5:ec:56:52:cd:06:
05:dc:bb:b3:1b:bf:15:d5:03:f9:28:c9:3a:a3:65:
b4:5b:52:2b:b4:3b:84:7c:1b:d8:29:41:29:35:eb:
4a:64:95:4d:1e:e7:8f:ad:bb:c2:da:7a:8f:d1:b4:
33:99:06:dc:dc:cf:63:b2:9e:01:67:95:cb:4a:5e:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5E:9B:F3:08:00:D7:F3:83:40:24:1B:7E:27:3F:41:AA:12:F3:0E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.98.0/24
46.203.203.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d6:c9:20:cc:ad:5b:44:af:5e:a8:06:ba:ee:e5:39:e7:84:
1b:6c:d2:54:bc:0c:86:94:bf:46:0f:d9:16:63:ee:11:82:12:
76:b1:e4:b8:60:5b:03:6a:28:0b:bb:d6:ee:3f:0d:51:f2:df:
0f:5c:8b:f0:83:3a:57:b2:1b:b9:78:f3:38:a0:d0:91:91:d1:
20:83:34:76:47:2d:d3:32:ef:22:42:83:95:47:c5:4c:1b:04:
57:81:df:1d:29:08:97:28:e3:a9:82:d2:97:2d:97:1b:ec:c1:
ed:08:5d:13:74:6b:e6:54:71:29:63:d4:5b:e3:28:62:17:05:
89:c2:4f:1f:32:69:f3:c6:87:3e:77:2b:a1:26:a8:db:fa:2b:
d0:25:1b:c1:0b:bc:26:c0:c1:15:00:93:04:7a:5c:c8:55:f3:
b2:d6:36:80:7a:3c:eb:db:36:ec:85:89:c9:de:3c:8d:39:2c:
94:6d:12:54:39:9e:91:eb:4a:4f:14:5a:2e:ea:67:52:db:a3:
f8:3d:35:3f:eb:eb:dc:c7:d0:c3:1e:d8:0e:c1:59:bb:f9:c6:
40:7f:63:65:76:4b:dd:24:68:e4:bc:01:c5:8a:39:4a:3a:1f:
a7:af:04:c2:13:d1:34:fd:72:7a:4d:7d:e4:6c:7d:91:42:96:
a4:2a:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:04:39 2025 by rpki-client