Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: //ok6uugXJKC/IpmLNqeXaSoTmcy5LQbZcb9iEXqGmU=
Subject key identifier: D6:90:A2:C5:6F:DF:92:4F:7A:E1:FA:26:BE:AC:BE:16:26:BF:E0:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 411FE2E03243D54E7E8D0FBD4156D728A71F9E18
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63150.roa
Signing time: Mon 03 Mar 2025 15:35:54 +0000
ROA not before: Mon 03 Mar 2025 15:30:54 +0000
ROA not after: Mon 02 Mar 2026 15:35:54 +0000
asID: 63150
IP address blocks: 82.26.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 18:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1f:e2:e0:32:43:d5:4e:7e:8d:0f:bd:41:56:d7:28:a7:1f:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 3 15:30:54 2025 GMT
Not After : Mar 2 15:35:54 2026 GMT
Subject: CN=D690A2C56FDF924F7AE1FA26BEACBE1626BFE063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:5d:9b:00:97:7f:01:4e:f8:61:70:6c:4a:
df:67:a8:63:2f:b2:19:de:63:0e:9c:54:91:54:4b:
3a:19:2e:de:e3:76:d9:80:a8:e4:00:d5:2b:8a:5e:
78:21:1f:36:d6:f8:10:0c:90:10:22:4a:35:be:d6:
da:c0:a1:7e:07:73:63:7a:81:0e:d5:a1:93:5c:0a:
0c:db:d9:4a:d6:b9:ad:58:22:20:45:c5:5f:c7:0d:
7a:07:68:9f:9e:de:84:87:ab:9c:3c:88:1a:9b:85:
ff:e1:d1:c5:cc:ac:be:07:90:35:c4:c2:64:48:d9:
15:2f:f1:83:52:d3:e8:38:62:8c:4c:2f:8d:b0:c5:
05:fb:32:f4:81:b9:0a:40:a3:47:eb:41:16:7a:b2:
18:0e:bd:20:82:07:19:78:00:91:ad:be:ca:92:57:
c7:71:33:87:c3:f9:60:f2:55:4d:96:c4:6b:63:bd:
f7:df:5d:2a:d7:b7:f8:14:83:16:7e:31:a5:6e:01:
2f:72:d7:29:78:4f:62:4f:3f:57:3a:50:44:7c:7a:
e1:65:b8:83:21:dd:7e:2d:a9:27:5c:5e:46:3b:15:
99:a0:eb:c0:44:53:ee:41:da:5f:95:3f:7f:17:dd:
b7:19:15:48:9d:e0:63:22:ff:33:5d:a1:ab:2e:31:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:A2:C5:6F:DF:92:4F:7A:E1:FA:26:BE:AC:BE:16:26:BF:E0:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:4d:43:9c:c1:e5:56:cf:88:26:73:f4:6f:08:f1:19:f0:98:
2b:fb:7d:9e:cd:72:f5:2c:11:11:ef:ef:f1:d6:eb:d5:45:9d:
6c:a4:da:c7:08:f0:c0:e2:ff:2b:e4:b1:83:a3:56:e1:d7:88:
57:2c:47:47:e3:f6:15:6f:f6:85:7f:71:89:29:77:d4:45:ab:
d3:72:4a:b4:65:1d:64:bd:1a:e0:01:18:da:55:ea:16:ea:f3:
f0:8c:ed:b5:4b:08:46:2c:80:ca:8c:35:0b:e9:07:98:8f:c4:
c1:43:87:a4:af:aa:0e:0a:9a:b2:4b:ef:68:34:00:e8:2e:ed:
55:a1:00:c8:3a:f7:e8:08:43:ee:1b:d4:85:97:25:b9:77:25:
60:4a:cd:6c:3c:17:5c:92:13:1e:32:53:81:bd:ce:6c:c7:64:
1f:b1:e3:2f:08:96:35:de:27:22:ee:7e:16:4a:9c:27:b5:a8:
3b:45:57:51:a4:9a:ac:ce:6c:53:e6:f2:4c:2b:e0:4d:70:f2:
00:19:bf:7f:33:ba:48:82:67:a3:0c:cd:90:1c:b0:3a:54:82:
06:25:01:f2:e0:52:6a:ce:60:f7:2f:7c:b5:ca:5c:b7:f5:e8:
bf:10:0c:ae:6f:3e:45:aa:9a:ae:03:e9:a5:de:b9:29:75:0d:
17:e9:4f:51
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUQR/i4DJD1U5+jQ+9QVbXKKcfnhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAzMDMxNTMwNTRaFw0yNjAzMDIxNTM1NTRaMDMxMTAvBgNV
BAMTKEQ2OTBBMkM1NkZERjkyNEY3QUUxRkEyNkJFQUNCRTE2MjZCRkUwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCl2bAJd/AU74YXBsSt9nqGMv
shneYw6cVJFUSzoZLt7jdtmAqOQA1SuKXnghHzbW+BAMkBAiSjW+1trAoX4Hc2N6
gQ7VoZNcCgzb2UrWua1YIiBFxV/HDXoHaJ+e3oSHq5w8iBqbhf/h0cXMrL4HkDXE
wmRI2RUv8YNS0+g4YoxML42wxQX7MvSBuQpAo0frQRZ6shgOvSCCBxl4AJGtvsqS
V8dxM4fD+WDyVU2WxGtjvfffXSrXt/gUgxZ+MaVuAS9y1yl4T2JPP1c6UER8euFl
uIMh3X4tqSdcXkY7FZmg68BEU+5B2l+VP38X3bcZFUid4GMi/zNdoasuMRyXAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU1pCixW/fkk964fomvqy+Fia/4GMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjMxNTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGlIw
DQYJKoZIhvcNAQELBQADggEBAKJNQ5zB5VbPiCZz9G8I8RnwmCv7fZ7NcvUsERHv
7/HW69VFnWyk2scI8MDi/yvksYOjVuHXiFcsR0fj9hVv9oV/cYkpd9RFq9NySrRl
HWS9GuABGNpV6hbq8/CM7bVLCEYsgMqMNQvpB5iPxMFDh6Svqg4KmrJL72g0AOgu
7VWhAMg69+gIQ+4b1IWXJbl3JWBKzWw8F1ySEx4yU4G9zmzHZB+x4y8IljXeJyLu
fhZKnCe1qDtFV1GkmqzObFPm8kwr4E1w8gAZv38zukiCZ6MMzZAcsDpUggYlAfLg
UmrOYPcvfLXKXLf16L8QDK5vPkWqmq4D6aXeuSl1DRfpT1E=
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:24:59 2025 by rpki-client