Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: lIutaJFPUtOc4+4o7B+9wvNnxNvtHF8tsCDzXVAEJvA=
Subject key identifier: A8:1E:67:E4:A1:7E:E5:12:C1:E2:B4:19:8F:7F:B2:89:77:61:03:A3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3672BC43C4154523497C7B60B4F3F4D1F4F3C7A1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Fri 18 Jul 2025 07:57:58 +0000
ROA not before: Fri 18 Jul 2025 07:52:58 +0000
ROA not after: Fri 17 Jul 2026 07:57:58 +0000
asID: 21859
IP address blocks: 140.233.177.0/24 maxlen: 24
143.14.223.0/24 maxlen: 24
148.135.196.0/23 maxlen: 23
148.135.204.0/23 maxlen: 23
150.241.229.0/24 maxlen: 24
155.117.103.0/24 maxlen: 24
155.117.163.0/24 maxlen: 24
155.117.197.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
167.148.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:72:bc:43:c4:15:45:23:49:7c:7b:60:b4:f3:f4:d1:f4:f3:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 18 07:52:58 2025 GMT
Not After : Jul 17 07:57:58 2026 GMT
Subject: CN=A81E67E4A17EE512C1E2B4198F7FB289776103A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:75:1b:65:67:b0:42:31:16:09:0a:6b:01:
3d:9f:04:7c:86:a6:f0:0f:7a:aa:f1:b1:3f:c1:69:
e0:cd:76:5a:bd:e0:8a:df:f9:42:2c:49:c7:91:ff:
32:70:d2:aa:b8:73:2d:ae:f2:25:b0:b8:c8:75:09:
aa:6a:a5:d0:7e:b2:f4:9a:54:59:1e:22:09:d5:dd:
b9:81:41:45:82:73:80:75:93:29:5b:2a:a4:92:56:
7a:1a:79:90:f5:72:06:3b:15:9c:88:5f:60:2b:4d:
c7:0d:50:b3:b6:e5:4d:37:48:42:a3:bf:06:41:47:
c9:fc:8d:22:79:1a:b6:40:03:dd:b9:3c:57:51:65:
18:80:d0:7e:e8:42:2b:aa:07:6f:14:ce:b1:c7:e7:
15:bd:09:db:10:24:de:8f:c4:bd:3f:b7:c9:c2:ff:
31:5a:da:0d:8e:9b:4d:ed:51:84:d0:89:e7:49:33:
32:4f:cc:ae:f9:71:70:11:1a:aa:85:df:2c:7d:5a:
03:76:df:b9:f3:ee:c8:6b:ec:71:12:21:f5:b0:4a:
21:27:a0:e6:61:4e:a0:ef:9d:65:c4:8d:fb:e2:c2:
45:cc:1c:4f:b1:be:2c:ad:7a:c2:1c:37:2a:71:9b:
c3:f2:05:cf:24:1e:7d:29:05:44:f3:91:01:06:86:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:67:E4:A1:7E:E5:12:C1:E2:B4:19:8F:7F:B2:89:77:61:03:A3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.177.0/24
143.14.223.0/24
148.135.196.0/23
148.135.204.0/23
150.241.229.0/24
155.117.103.0/24
155.117.163.0/24
155.117.197.0/24
155.117.240.0/24
167.148.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:33:65:7b:d2:3c:bb:41:66:1c:be:24:46:24:32:c0:ec:70:
1e:db:d8:45:01:9f:22:5a:8a:59:4a:98:61:4c:bf:e6:b6:38:
36:cb:69:3f:a5:93:56:dc:b5:68:05:c4:7a:32:e2:09:6d:17:
33:50:4b:5e:ed:68:db:ac:ae:c0:09:8c:39:7d:90:41:ff:f5:
54:74:87:b2:e6:92:9d:81:c7:da:53:cb:7c:6a:d6:e5:83:40:
fa:e0:86:b9:b7:9a:96:97:92:f2:7a:16:cb:ae:30:44:1b:59:
d9:11:21:0b:23:d3:d5:89:86:11:16:fe:3b:ca:50:bf:88:80:
9b:a7:49:42:5e:69:60:de:6d:78:d2:9e:d6:f0:5b:89:ca:e8:
0d:b9:82:37:d6:fe:4b:c3:3d:63:9e:f3:ea:5e:43:bc:36:40:
69:13:02:ed:1d:ab:ea:b4:3e:2a:f2:67:f4:06:02:fb:7d:eb:
75:d3:0a:38:17:17:7c:eb:3a:8e:19:34:6c:c5:e1:28:dd:9f:
99:49:9a:17:76:68:3a:24:c6:e9:73:63:c0:c4:df:59:fb:3c:
2a:8c:e2:7c:61:ee:ed:60:32:9b:52:44:90:4c:20:61:1b:40:
96:01:2b:d7:ba:07:f5:7f:ae:3d:d4:c2:96:44:09:b1:b3:18:
18:b2:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:50 2025 by rpki-client