Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139057.roa
File: AS139057.roa (raw, json)
Hash identifier: nTkqpB223/RAVUwK0aW8sGHqMqvM+FI8J/BxSeOR93M=
Subject key identifier: 94:B8:1A:E4:2D:AF:E6:AF:78:A4:24:F4:6A:0E:E5:46:36:A3:B0:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5CA3168C2F550BFA0E6F3F3E650D7FBB03AAE8A1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139057.roa
Signing time: Fri 14 Feb 2025 07:51:16 +0000
ROA not before: Fri 14 Feb 2025 07:46:16 +0000
ROA not after: Fri 13 Feb 2026 07:51:16 +0000
asID: 139057
IP address blocks: 82.27.176.0/24 maxlen: 24
82.27.177.0/24 maxlen: 24
82.27.178.0/24 maxlen: 24
82.27.179.0/24 maxlen: 24
82.27.180.0/24 maxlen: 24
82.27.181.0/24 maxlen: 24
82.27.182.0/24 maxlen: 24
82.27.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a3:16:8c:2f:55:0b:fa:0e:6f:3f:3e:65:0d:7f:bb:03:aa:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 14 07:46:16 2025 GMT
Not After : Feb 13 07:51:16 2026 GMT
Subject: CN=94B81AE42DAFE6AF78A424F46A0EE54636A3B08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:3a:c5:3a:ae:bd:aa:50:d5:d5:c8:99:79:
11:a2:50:a2:92:8d:b5:fc:72:ba:1e:2c:b4:10:db:
5a:32:91:b9:07:76:15:de:bf:3e:24:0e:29:70:d9:
28:9f:b9:80:a0:79:ca:be:e4:08:1d:4d:2c:fb:40:
97:e6:21:35:88:9f:6f:21:81:d0:38:0d:9f:93:4e:
e8:cf:29:df:e5:c7:76:d5:3c:3c:2d:48:16:fe:b0:
2e:64:27:7f:22:19:94:cb:ba:80:db:3e:70:93:77:
b3:88:a0:23:3b:38:4e:0e:6c:fb:b3:6b:da:dd:36:
02:4b:c7:72:48:88:2d:b0:10:ba:bf:85:cf:8b:d2:
fe:78:34:9a:45:b4:b3:4e:97:c6:cd:fe:9b:b4:5f:
3d:86:e3:cf:88:71:b2:36:bc:1c:ae:35:f5:58:93:
6a:91:eb:fe:33:2a:61:ce:de:a9:9b:89:35:a1:92:
e8:6a:81:e1:8f:27:cf:0a:db:d8:c2:19:a5:a6:e4:
ce:4b:51:0d:75:e9:3f:1e:68:1c:0c:16:cb:6d:b9:
2e:92:ec:0c:19:75:bb:78:6c:c9:53:5e:71:d4:5d:
ef:99:64:d7:0c:b2:55:17:fb:ad:f9:40:5f:2d:bf:
2b:57:a7:56:d2:e0:16:fd:dc:c7:98:38:7c:5d:5b:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:1A:E4:2D:AF:E6:AF:78:A4:24:F4:6A:0E:E5:46:36:A3:B0:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.176.0/21
Signature Algorithm: sha256WithRSAEncryption
80:31:e7:0c:48:36:c0:9e:9e:11:80:90:52:55:5d:b6:60:8c:
f6:a4:5c:0f:6b:2a:6e:33:4a:e9:93:97:11:9b:d2:e4:67:5b:
d9:dc:21:40:8f:b2:d5:ba:3d:09:43:29:26:50:60:f6:55:f7:
30:d2:54:de:9d:bf:30:2c:60:71:74:a2:29:04:7a:f5:aa:8c:
85:91:ca:02:df:84:1b:34:a2:c9:14:37:90:51:fe:df:03:df:
89:a1:a7:96:bb:a9:02:c9:84:98:0e:f2:f5:b4:71:e6:43:50:
2b:b0:31:ba:8d:c4:b1:0b:2f:4d:6e:cb:1e:57:4e:18:bb:97:
8d:16:d4:59:93:69:1f:71:3a:0a:b1:7b:b3:29:06:33:4a:8d:
10:ec:ce:8d:ad:03:2e:9c:40:be:ec:e5:bf:18:df:14:da:5a:
6b:49:b8:97:02:9e:b0:2a:3c:35:74:dd:45:06:62:e0:46:f0:
7a:9d:59:40:54:e1:fc:a0:11:78:01:f4:d0:02:73:12:95:04:
63:66:27:81:28:f2:c4:52:84:21:02:b6:ce:c7:45:d2:9c:31:
be:2f:53:c2:0d:10:33:c4:ca:12:c8:e9:9b:0b:02:89:78:13:
2a:11:72:e7:aa:9c:2b:a5:85:9c:38:20:cb:86:d7:6d:1d:8a:
2b:55:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:57 2025 by rpki-client