Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
File: AS142036.roa (raw, json)
Hash identifier: pyKfcgKqFUhiY90fcpd9MOcDsTQnCMIzJ/SymOzdIWw=
Subject key identifier: E8:51:A9:5A:6F:8F:47:58:46:55:C1:41:19:C9:6D:7B:5E:B1:18:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72E49D2E6FF9B54FCDFA7998994EA27BC9D78C0A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
Signing time: Fri 17 Jan 2025 12:01:56 +0000
ROA not before: Fri 17 Jan 2025 11:56:56 +0000
ROA not after: Fri 16 Jan 2026 12:01:56 +0000
asID: 142036
IP address blocks: 82.29.53.0/24 maxlen: 24
82.29.54.0/24 maxlen: 24
82.29.67.0/24 maxlen: 24
82.29.71.0/24 maxlen: 24
82.29.72.0/24 maxlen: 24
82.29.128.0/24 maxlen: 24
82.29.129.0/24 maxlen: 24
82.29.130.0/24 maxlen: 24
82.29.131.0/24 maxlen: 24
82.29.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e4:9d:2e:6f:f9:b5:4f:cd:fa:79:98:99:4e:a2:7b:c9:d7:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 17 11:56:56 2025 GMT
Not After : Jan 16 12:01:56 2026 GMT
Subject: CN=E851A95A6F8F47584655C14119C96D7B5EB11836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:33:19:fc:db:81:90:5c:6f:9a:11:6d:2e:
3e:5a:5f:16:96:f2:d7:7a:c6:50:29:5f:e9:18:b7:
6e:e7:dd:cb:f5:d3:c6:b3:33:2d:e3:12:78:23:f1:
eb:72:86:9b:c0:16:f5:1a:ec:8d:a7:8b:75:38:0c:
f4:00:94:4a:de:ff:a5:02:ef:49:4b:56:f8:db:1a:
32:ea:57:6c:79:00:de:43:35:56:d2:53:e9:74:2a:
73:d5:45:7e:6c:48:a1:c9:b1:99:f6:c9:55:fe:e1:
77:6c:4f:dc:cd:48:76:2f:63:d0:63:eb:b3:11:8b:
8a:3f:eb:d9:79:9e:cc:bf:32:a7:0d:e7:5a:cb:71:
05:a3:4b:be:93:f8:33:98:01:ec:46:46:37:fd:4a:
89:5e:32:5d:0d:64:c5:84:1b:3a:cd:68:cb:d7:da:
85:40:9b:00:c0:24:87:77:f2:b5:cc:94:b5:db:12:
0d:50:1b:2f:91:d8:ff:6b:b7:b2:4f:7f:52:1b:5d:
8a:0b:35:17:d8:37:e5:e1:14:13:67:84:4c:17:f2:
70:fa:28:33:6d:ea:33:70:6e:93:70:4b:42:0c:8d:
91:ca:73:04:92:fc:14:a6:ea:d6:d9:c4:23:6e:ab:
74:ad:23:81:7d:65:7e:ca:aa:00:d6:28:e4:3c:97:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:A9:5A:6F:8F:47:58:46:55:C1:41:19:C9:6D:7B:5E:B1:18:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.53.0-82.29.54.255
82.29.67.0/24
82.29.71.0-82.29.72.255
82.29.128.0-82.29.132.255
Signature Algorithm: sha256WithRSAEncryption
7f:85:14:02:5f:c5:ec:82:b7:df:31:e2:64:f3:16:72:7d:dc:
1d:ef:7a:81:39:62:3e:f3:0a:84:2b:b1:89:bc:c1:1e:8a:a4:
b7:db:d4:5e:23:1d:24:b6:c2:d3:13:ee:27:53:d1:c2:11:40:
d0:bd:05:b1:6a:5a:49:55:94:c2:cd:29:bd:cc:38:28:56:02:
1e:2c:78:44:3b:6d:91:a5:3c:a4:b2:a5:9d:de:d2:21:6e:14:
87:9c:e9:0c:d7:54:d0:c5:f2:80:dc:81:db:5d:0b:01:d3:dd:
32:96:8a:f8:6d:4f:1b:06:39:bb:bb:69:d0:c8:1e:9d:13:f3:
c5:f3:b2:f0:f6:d7:27:24:35:b1:c1:09:71:65:8c:01:50:51:
dd:d0:88:07:3f:a7:1e:53:63:56:cc:8a:82:c5:e7:e7:5f:18:
fa:7e:15:c6:77:65:0b:75:06:d6:8f:c8:e0:85:80:f5:35:0a:
82:47:1e:61:8c:7a:4f:81:59:27:c7:9b:04:ca:29:33:4a:ac:
76:ab:83:a0:5c:76:6b:9a:fc:bf:1a:30:3c:35:40:d9:82:9a:
33:e3:b9:a2:32:33:19:d8:8f:dc:15:e1:50:58:1a:cf:af:57:
53:f3:5b:cc:1a:39:49:31:7b:d3:84:6b:03:79:dc:ca:cf:39:
25:50:38:be
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcuSdLm/5tU/N+nmYmU6ie8nXjAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMTcxMTU2NTZaFw0yNjAxMTYxMjAxNTZaMDMxMTAvBgNV
BAMTKEU4NTFBOTVBNkY4RjQ3NTg0NjU1QzE0MTE5Qzk2RDdCNUVCMTE4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xDMZ/NuBkFxvmhFtLj5aXxaW
8td6xlApX+kYt27n3cv108azMy3jEngj8etyhpvAFvUa7I2ni3U4DPQAlEre/6UC
70lLVvjbGjLqV2x5AN5DNVbSU+l0KnPVRX5sSKHJsZn2yVX+4XdsT9zNSHYvY9Bj
67MRi4o/69l5nsy/MqcN51rLcQWjS76T+DOYAexGRjf9SoleMl0NZMWEGzrNaMvX
2oVAmwDAJId38rXMlLXbEg1QGy+R2P9rt7JPf1IbXYoLNRfYN+XhFBNnhEwX8nD6
KDNt6jNwbpNwS0IMjZHKcwSS/BSm6tbZxCNuq3StI4F9ZX7KqgDWKOQ8lzyZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6FGpWm+PR1hGVcFBGclte16xGDYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQyMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBABS
HTUDBABSHTYDBABSHUMwDAMEAFIdRwMEAFIdSDAMAwQHUh2AAwQAUh2EMA0GCSqG
SIb3DQEBCwUAA4IBAQB/hRQCX8XsgrffMeJk8xZyfdwd73qBOWI+8wqEK7GJvMEe
iqS329ReIx0ktsLTE+4nU9HCEUDQvQWxalpJVZTCzSm9zDgoVgIeLHhEO22RpTyk
sqWd3tIhbhSHnOkM11TQxfKA3IHbXQsB090ylor4bU8bBjm7u2nQyB6dE/PF87Lw
9tcnJDWxwQlxZYwBUFHd0IgHP6ceU2NWzIqCxefnXxj6fhXGd2ULdQbWj8jghYD1
NQqCRx5hjHpPgVknx5sEyikzSqx2q4OgXHZrmvy/GjA8NUDZgpoz47miMjMZ2I/c
FeFQWBrPr1dT81vMGjlJMXvThGsDedzKzzklUDi+
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:43 2025 by rpki-client