Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: dlKQjyAZP2VEAPATWbOAVw/Vq1lwLx0iX3+rtbbh0A0=
Subject key identifier: A1:24:2E:52:5A:C4:CD:8A:FF:31:A0:C8:5C:71:3C:B6:68:96:B1:89
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 14DEB92658B5C3B9947B74FAAC04745F74AB29D6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
Signing time: Mon 21 Jul 2025 13:11:34 +0000
ROA not before: Mon 21 Jul 2025 13:06:34 +0000
ROA not after: Mon 20 Jul 2026 13:11:34 +0000
asID: 21859
IP address blocks: 82.24.81.0/24 maxlen: 24
82.25.35.0/24 maxlen: 24
82.26.140.0/24 maxlen: 24
2a13:9500:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:de:b9:26:58:b5:c3:b9:94:7b:74:fa:ac:04:74:5f:74:ab:29:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 13:06:34 2025 GMT
Not After : Jul 20 13:11:34 2026 GMT
Subject: CN=A1242E525AC4CD8AFF31A0C85C713CB66896B189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:52:5a:d0:10:a5:4c:dd:66:38:ff:c4:37:
8f:ba:06:b3:6b:e6:93:fd:de:c9:22:11:9c:ab:09:
3f:a4:0e:3d:b7:93:5d:75:53:48:82:d3:97:be:1e:
06:57:4d:e3:8b:f4:db:7a:00:a1:e5:82:18:a6:88:
b8:f7:a4:a3:cd:f6:19:90:a9:67:03:23:ed:0d:04:
62:5e:c9:80:15:ee:9a:be:1e:08:b1:c2:ea:d8:ba:
9a:18:c0:95:79:6c:06:90:9e:24:65:e2:86:88:21:
33:3d:8f:35:6a:24:68:3a:7f:d6:de:55:83:e0:9b:
65:b2:68:67:0d:7d:ae:7c:37:6c:88:91:29:5a:62:
23:24:97:ac:ad:5d:38:d3:f9:9b:58:c8:3e:57:50:
50:35:fe:12:e6:79:6f:c5:bc:ee:af:7f:72:c2:29:
93:a3:36:3f:2f:e1:6e:c5:de:e9:cc:43:33:ae:b9:
8d:25:68:52:48:da:d7:bf:61:f5:ff:e3:ab:19:2b:
a7:a4:53:66:bb:7a:70:a2:18:f6:ec:c6:c0:13:c0:
7a:d6:82:cf:31:cf:ca:b7:2e:1b:54:44:3a:5e:b1:
6b:a5:1f:36:28:25:36:e6:d1:45:19:c0:5c:11:68:
5a:d1:37:dd:1b:40:e1:7c:9e:ac:5f:4e:14:cb:f6:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:2E:52:5A:C4:CD:8A:FF:31:A0:C8:5C:71:3C:B6:68:96:B1:89
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.81.0/24
82.25.35.0/24
82.26.140.0/24
IPv6:
2a13:9500:aa::/48
Signature Algorithm: sha256WithRSAEncryption
9b:62:8e:d7:33:f3:73:9c:96:2b:25:02:2f:e6:77:29:88:b4:
82:b2:11:ad:35:4a:0e:29:9f:13:f8:36:30:97:08:6a:82:11:
87:3c:c2:d5:6b:24:ca:04:38:66:ea:c9:d7:09:31:48:31:e2:
05:aa:e2:2f:01:a1:67:f2:0e:53:d5:89:4a:99:5c:fa:4d:e4:
68:0f:12:30:1a:04:21:ec:db:78:e4:f0:f9:1e:94:d8:cf:9c:
af:38:46:fc:eb:2e:5c:4d:c7:e3:0c:e6:aa:a3:23:31:27:33:
ab:0d:38:ec:11:08:92:b9:55:51:75:f3:ab:68:12:cd:38:6b:
44:e8:4d:06:fe:61:e7:ab:04:c5:e7:9e:a7:87:97:59:e3:43:
c0:cd:59:00:0d:7e:76:b6:df:36:f4:52:6c:a6:b0:f4:f9:40:
1d:bb:0e:0f:7f:0f:f2:12:f1:aa:bd:1c:4b:55:c5:e5:ee:39:
be:48:29:27:23:2d:b4:03:84:fc:37:e3:ab:65:75:b0:5c:35:
0b:24:c4:a4:5a:d2:78:39:57:90:7c:a9:c8:2c:50:89:46:4c:
d6:a4:fc:e3:46:5c:6e:57:64:a8:2f:40:f2:67:e6:55:2f:b6:
b1:4e:72:18:d9:29:5a:42:4b:70:7b:4f:5a:34:2e:ac:fe:3e:
60:12:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:29:42 2025 by rpki-client