Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: 1tPwsaNGT4feBxuG3s4liqdCQMFT5+4CzvBgScbLoPI=
Subject key identifier: 3B:E8:3F:4E:91:20:8D:AA:F9:C2:C3:C2:CC:0C:04:74:D1:A3:D4:BA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C5A964DB24C0E9D4BCC68D2A41A578DB4DC36D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
Signing time: Wed 26 Feb 2025 08:21:09 +0000
ROA not before: Wed 26 Feb 2025 08:16:09 +0000
ROA not after: Wed 25 Feb 2026 08:21:09 +0000
asID: 11404
IP address blocks: 82.21.121.0/24 maxlen: 24
82.21.137.0/24 maxlen: 24
82.21.145.0/24 maxlen: 24
82.21.167.0/24 maxlen: 24
82.22.83.0/24 maxlen: 24
82.22.84.0/24 maxlen: 24
82.22.88.0/24 maxlen: 24
82.22.90.0/24 maxlen: 24
82.22.91.0/24 maxlen: 24
82.22.92.0/24 maxlen: 24
82.24.32.0/24 maxlen: 24
82.24.49.0/24 maxlen: 24
82.24.53.0/24 maxlen: 24
82.24.56.0/24 maxlen: 24
82.24.62.0/24 maxlen: 24
82.27.32.0/20 maxlen: 24
82.27.64.0/20 maxlen: 24
82.29.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5a:96:4d:b2:4c:0e:9d:4b:cc:68:d2:a4:1a:57:8d:b4:dc:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 26 08:16:09 2025 GMT
Not After : Feb 25 08:21:09 2026 GMT
Subject: CN=3BE83F4E91208DAAF9C2C3C2CC0C0474D1A3D4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:86:ca:c7:75:e0:5c:ed:a8:cf:02:f6:ed:
5a:7b:11:16:d0:e8:1c:4c:00:08:f9:8a:73:2a:58:
2e:98:ae:b0:f8:55:d0:cf:ba:fe:55:ca:5a:6e:17:
f7:98:cc:ae:b6:99:d4:5f:a0:5a:f4:4b:31:ba:9b:
44:1b:25:33:fd:c0:16:f4:a4:1b:f1:f2:bc:b7:e1:
7b:3f:7e:3e:97:e9:b3:cc:72:53:fe:41:3f:0a:d1:
1d:cb:3c:ae:0f:e6:a7:04:e5:3c:ac:bd:05:9c:f0:
f7:78:a2:8c:54:db:dd:f2:2f:2d:93:cf:02:aa:80:
f4:04:33:33:fc:4e:85:79:5f:aa:f1:b0:72:3e:54:
80:8c:c8:fd:41:a2:15:84:d0:ca:9a:e6:b7:d3:31:
26:df:5d:6c:47:21:da:02:56:c4:ad:49:06:e5:98:
b5:16:a5:85:1a:0b:27:09:dd:6e:a7:7a:77:14:0a:
31:53:29:9b:e1:1f:f0:ff:ea:4b:2e:f2:88:4f:73:
ad:a3:53:eb:d4:f6:c8:26:b1:82:7f:b2:88:1f:4b:
91:db:46:fe:23:ad:74:24:2c:6e:17:69:e7:db:22:
27:bd:ff:5b:b0:36:45:b3:42:6d:46:ce:6f:b3:78:
0f:1b:c2:9b:66:82:fd:57:d9:df:36:84:e6:c3:a1:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:3F:4E:91:20:8D:AA:F9:C2:C3:C2:CC:0C:04:74:D1:A3:D4:BA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.121.0/24
82.21.137.0/24
82.21.145.0/24
82.21.167.0/24
82.22.83.0-82.22.84.255
82.22.88.0/24
82.22.90.0-82.22.92.255
82.24.32.0/24
82.24.49.0/24
82.24.53.0/24
82.24.56.0/24
82.24.62.0/24
82.27.32.0/20
82.27.64.0/20
82.29.22.0/24
Signature Algorithm: sha256WithRSAEncryption
65:11:e7:9b:84:b0:98:8a:76:26:23:63:e9:82:f0:89:ff:95:
c5:60:23:70:5f:5c:49:aa:a0:fd:1e:0e:1a:0b:16:4a:2f:84:
c0:d9:cb:c5:ac:0e:9a:5e:66:ce:3e:a9:61:c4:a6:2e:8e:17:
21:63:61:ad:67:59:f9:26:13:7c:61:9a:f9:c4:3a:0c:5e:ba:
11:30:60:d3:e3:60:6a:6f:7c:87:71:be:bc:fb:93:38:0b:24:
a3:7e:1a:5d:a1:46:9a:b3:9c:9b:08:3b:de:7a:bb:37:bc:03:
a6:71:99:3d:21:77:ff:f7:88:76:86:c6:35:47:43:35:2f:1d:
4c:c7:41:1d:67:37:1f:be:ae:83:02:20:a6:38:19:42:e9:a3:
f1:56:da:cc:f6:ee:1a:cf:42:44:c0:7f:a8:b3:c2:06:65:6a:
ac:ac:3b:90:1b:dc:2f:99:db:08:6a:ad:4a:06:34:4e:0c:49:
28:f3:75:ed:42:9b:f4:c4:d6:d6:50:59:47:0c:3a:73:9f:9a:
bf:2c:a5:cd:05:ed:fc:ad:c6:a9:e2:11:39:f3:75:31:ca:cd:
a6:d3:58:c0:50:27:3a:86:a3:a4:5e:32:ea:26:a8:c9:14:2e:
c3:53:5d:a8:8d:4b:05:80:4e:de:12:01:de:a9:0c:50:03:ae:
7c:a5:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:48:47 2025 by rpki-client