Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: VPThuXLyfsWBisZ+eizhfp7HCKAZEQjtH3ZpEedaQG4=
Subject key identifier: 11:5B:C1:BA:A9:B1:07:96:03:28:5C:9B:5C:81:FE:6E:7D:5F:3F:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7A235FFA004248D72FAD76A953CF53237B6147C0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
Signing time: Thu 16 Jan 2025 06:59:05 +0000
ROA not before: Thu 16 Jan 2025 06:54:05 +0000
ROA not after: Thu 15 Jan 2026 06:59:05 +0000
asID: 152179
IP address blocks: 82.21.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:23:5f:fa:00:42:48:d7:2f:ad:76:a9:53:cf:53:23:7b:61:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 16 06:54:05 2025 GMT
Not After : Jan 15 06:59:05 2026 GMT
Subject: CN=115BC1BAA9B1079603285C9B5C81FE6E7D5F3FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:a1:fa:7e:00:29:5c:83:08:4d:cd:d5:5c:
a9:90:e9:c6:51:d4:cd:3a:db:76:40:12:ef:24:86:
a7:80:a1:ee:23:50:51:32:1e:ba:d4:24:c0:91:c8:
70:5b:cd:63:fc:d4:d4:e8:3a:9e:68:bf:e7:c1:9d:
ea:e6:cd:1b:19:de:32:ec:d5:c0:62:8b:41:ca:ac:
3d:6c:6c:5f:d0:fb:15:84:3e:5a:a1:ad:13:f9:33:
e4:8d:ce:b6:1d:64:e0:3e:a7:e9:31:8d:c1:9a:30:
9b:0e:70:69:a0:08:d0:38:dd:b5:4c:b2:2d:71:ed:
a6:71:67:6d:33:2f:f4:c4:83:ce:97:6f:97:fe:03:
c1:93:f8:da:05:fc:a8:0d:30:56:94:79:d5:cd:52:
5b:99:5d:04:e2:d1:62:41:d7:de:dd:f2:ac:d7:c5:
cb:22:49:69:bc:90:23:a6:16:52:eb:4f:ec:e2:a5:
2e:b6:8f:0b:bc:bf:9e:b8:14:28:26:5e:01:94:32:
3c:99:7f:ba:d6:b9:c2:eb:11:ea:f2:7a:16:a5:93:
ff:02:ef:11:7e:18:c9:7c:01:84:1b:82:97:f2:80:
94:74:3e:90:50:96:f0:d6:2f:7f:fb:b2:71:e4:98:
ae:23:f9:97:67:2f:e8:41:8d:bf:04:42:ac:18:93:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:C1:BA:A9:B1:07:96:03:28:5C:9B:5C:81:FE:6E:7D:5F:3F:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.80.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c6:0e:01:c2:b9:c6:94:e9:91:e9:f0:e4:37:03:52:2e:56:
27:b8:86:7e:41:ed:14:e6:c0:6b:8e:00:2a:13:cd:19:d6:7f:
da:c7:d4:90:09:fc:d5:ee:7e:ed:b7:8e:72:ff:27:89:79:5a:
71:97:15:8e:2a:51:f6:c2:58:61:0b:ec:d3:4b:8e:03:17:7b:
57:02:6a:05:46:1e:16:52:7c:20:46:54:d8:26:40:6f:aa:79:
9b:17:13:08:fb:ca:1d:ad:04:02:ea:10:0d:72:75:4d:b3:5e:
a8:db:b5:ed:9e:29:b6:92:94:0e:3c:81:c2:7b:3e:03:53:bb:
c8:ec:69:d1:e2:60:66:fe:d1:86:71:b7:24:34:ec:ba:8c:4b:
6d:0e:80:50:5c:5e:db:8b:f3:23:64:87:3b:69:ea:3b:ca:a4:
58:82:fe:58:63:25:4a:7f:d0:23:96:de:f5:61:bf:2f:fa:87:
f6:2a:c0:de:dd:54:f2:99:96:53:53:4b:e9:d6:24:e5:ac:f6:
0d:e6:e8:ca:77:ea:9f:fa:bb:c9:c5:74:d7:f1:e1:1f:6f:c1:
42:a2:48:71:fc:cd:d1:9f:74:18:ea:da:02:1f:30:b2:69:19:
5f:09:4e:25:75:78:91:84:08:80:03:59:87:79:43:2d:2c:3b:
f0:09:74:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeiNf+gBCSNcvrXapU89TI3thR8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMTYwNjU0MDVaFw0yNjAxMTUwNjU5MDVaMDMxMTAvBgNV
BAMTKDExNUJDMUJBQTlCMTA3OTYwMzI4NUM5QjVDODFGRTZFN0Q1RjNGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT86H6fgApXIMITc3VXKmQ6cZR
1M0623ZAEu8khqeAoe4jUFEyHrrUJMCRyHBbzWP81NToOp5ov+fBnermzRsZ3jLs
1cBii0HKrD1sbF/Q+xWEPlqhrRP5M+SNzrYdZOA+p+kxjcGaMJsOcGmgCNA43bVM
si1x7aZxZ20zL/TEg86Xb5f+A8GT+NoF/KgNMFaUedXNUluZXQTi0WJB197d8qzX
xcsiSWm8kCOmFlLrT+zipS62jwu8v564FCgmXgGUMjyZf7rWucLrEeryehalk/8C
7xF+GMl8AYQbgpfygJR0PpBQlvDWL3/7snHkmK4j+ZdnL+hBjb8EQqwYk+i7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUEVvBuqmxB5YDKFybXIH+bn1fP7MwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUhVQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCUxg4BwrnGlOmR6fDkNwNSLlYnuIZ+Qe0U5sBr
jgAqE80Z1n/ax9SQCfzV7n7tt45y/yeJeVpxlxWOKlH2wlhhC+zTS44DF3tXAmoF
Rh4WUnwgRlTYJkBvqnmbFxMI+8odrQQC6hANcnVNs16o27Xtnim2kpQOPIHCez4D
U7vI7GnR4mBm/tGGcbckNOy6jEttDoBQXF7bi/MjZIc7aeo7yqRYgv5YYyVKf9Aj
lt71Yb8v+of2KsDe3VTymZZTU0vp1iTlrPYN5ujKd+qf+rvJxXTX8eEfb8FCokhx
/M3Rn3QY6toCHzCyaRlfCU4ldXiRhAiAA1mHeUMtLDvwCXQX
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:06 2025 by rpki-client