Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: CLeX+fZqkCZophRX2IZuyINV/vDLu9uKGKhH+tVUBfI=
Subject key identifier: F4:D3:F2:1D:D9:B6:F2:30:D4:FF:EF:51:A9:CB:F3:8C:C4:0D:6B:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3065B60724CDEC4051C8473472D1B042B732A7C2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
Signing time: Wed 02 Apr 2025 11:57:06 +0000
ROA not before: Wed 02 Apr 2025 11:52:06 +0000
ROA not after: Wed 01 Apr 2026 11:57:06 +0000
asID: 10103
IP address blocks: 82.26.116.0/24 maxlen: 24
82.26.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:65:b6:07:24:cd:ec:40:51:c8:47:34:72:d1:b0:42:b7:32:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 2 11:52:06 2025 GMT
Not After : Apr 1 11:57:06 2026 GMT
Subject: CN=F4D3F21DD9B6F230D4FFEF51A9CBF38CC40D6BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:59:47:13:57:3d:d0:99:44:2a:a0:7f:da:
ca:82:0e:b4:d4:bd:c5:67:cf:da:3d:c1:69:d8:20:
eb:f6:45:d8:a7:79:7e:4e:3e:27:40:c9:72:d0:29:
27:55:3d:b2:bb:44:91:58:5e:cf:ec:3b:4e:a2:8a:
6b:61:c2:1e:f1:5b:6a:6f:b6:b4:28:3c:f2:bf:c6:
64:ac:49:eb:6e:d2:17:fe:b3:3c:d2:da:e1:ce:31:
fe:bf:60:6f:48:41:a3:1d:a2:38:94:1c:78:f1:a1:
ac:bf:f4:e8:c3:01:d6:32:bc:be:16:db:18:fe:6a:
41:de:1a:6b:aa:bd:dd:6a:df:75:2a:78:1a:81:31:
09:ac:4b:13:2f:34:45:9a:30:aa:49:58:02:2d:d4:
5f:24:c7:5e:a9:51:2d:c0:f0:db:8f:9a:c4:0b:64:
28:0f:a1:f1:06:43:b0:f9:78:f3:3b:4d:e5:89:5f:
ac:39:28:de:e7:b2:61:8d:a1:3f:10:59:f8:1b:b8:
2d:cf:7b:a8:83:4b:9f:af:c1:59:f5:4d:3f:75:39:
55:a4:2d:ec:34:66:bb:49:ba:be:1c:8c:21:49:23:
c7:d2:18:49:d4:91:18:54:e1:00:50:b2:9f:c3:fd:
82:6d:2e:18:08:af:7a:7e:cf:d7:44:fc:de:50:69:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:F2:1D:D9:B6:F2:30:D4:FF:EF:51:A9:CB:F3:8C:C4:0D:6B:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.116.0/24
82.26.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a3:87:83:9d:ed:2a:68:8a:1b:f9:d7:9f:cd:66:50:38:2e:
a1:d2:09:2f:9a:4a:4e:64:26:9f:b7:1f:3c:fb:5f:03:83:e2:
67:e5:b0:84:b6:56:9e:29:66:9c:04:ff:85:32:60:ba:c2:24:
07:f1:63:6e:07:bf:cb:60:f6:f2:f6:b0:a5:f8:0e:ac:26:fb:
29:0d:fe:e0:e5:f5:6e:41:1d:c6:d2:92:d0:77:b3:18:e2:4a:
86:0d:c6:d0:c2:62:0a:67:38:62:36:3d:49:fb:1b:96:f5:e8:
9b:89:b8:b3:ef:1a:36:eb:3b:1d:16:87:31:bf:71:86:39:45:
13:1e:1e:34:c2:5c:70:6f:f5:b9:32:06:f8:11:04:89:5d:f8:
b6:91:d9:27:78:d4:62:b3:a1:8f:56:4d:49:50:de:fe:4a:68:
73:3b:6a:fb:98:69:7e:bf:d9:90:58:0b:b5:68:e2:27:46:25:
05:27:e1:22:4e:d9:38:35:80:a7:da:43:67:35:67:09:f0:24:
3b:91:5a:35:98:e0:81:60:71:b4:22:f3:2f:8f:de:6a:d0:4d:
70:70:5f:86:64:5b:f2:a0:7b:63:f0:eb:5c:b0:91:2d:09:2a:
9c:f2:4c:f5:a1:cb:88:b1:23:56:7b:cd:9a:6f:dc:28:f0:10:
cf:1f:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:34 2025 by rpki-client