Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa
File: AS197071.roa (raw, json)
Hash identifier: qRCkj8kWYzgF0Adl4wxSO0guFbUWOzuDY+jJrsBfsOo=
Subject key identifier: 14:5B:8D:56:57:CA:25:3C:20:D8:96:DB:9F:53:E4:CF:79:54:69:9B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7E7390AAC0D1E47219B0EA736EB9DFD587AE2F4C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa
Signing time: Fri 31 Jan 2025 13:37:08 +0000
ROA not before: Fri 31 Jan 2025 13:32:08 +0000
ROA not after: Fri 30 Jan 2026 13:37:08 +0000
asID: 197071
IP address blocks: 82.29.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:73:90:aa:c0:d1:e4:72:19:b0:ea:73:6e:b9:df:d5:87:ae:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 31 13:32:08 2025 GMT
Not After : Jan 30 13:37:08 2026 GMT
Subject: CN=145B8D5657CA253C20D896DB9F53E4CF7954699B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:a9:5e:4c:bc:61:7c:41:79:4c:88:92:e8:
38:9d:4b:11:cf:84:68:63:18:12:92:e4:88:84:11:
2a:b4:c5:6c:69:a9:66:38:f7:de:49:7e:57:a3:a2:
54:25:62:75:ac:94:be:6e:47:07:95:65:a1:1a:34:
c7:94:a1:6f:ea:0b:70:54:b5:c9:11:ad:6f:cc:a5:
b4:33:cb:89:17:bf:b0:5a:99:a7:0a:21:db:38:16:
f7:92:f6:16:59:bb:2a:37:46:92:6e:25:d9:1c:d4:
0a:cd:11:56:c9:4b:18:1b:d4:a0:8b:a1:c3:b0:9b:
ca:c6:ec:4c:63:5d:26:a5:c1:80:0c:f1:94:ca:fd:
74:a0:1a:eb:a3:a0:e0:af:b1:98:94:e9:a6:8a:87:
f1:e0:bc:5f:ef:ad:4c:3b:31:f3:17:49:49:bf:9b:
bb:de:43:25:06:49:52:9b:18:52:31:71:6a:1b:e9:
93:81:dd:58:b3:0e:8c:1a:68:bc:5d:53:a2:d0:52:
c6:08:69:aa:9c:81:5d:6f:99:57:55:a2:b2:4e:d7:
fb:6f:73:9e:00:1e:99:42:18:76:db:7e:76:83:01:
db:fc:df:1c:54:46:fd:d2:5e:ff:37:a1:9a:d5:16:
df:17:46:24:16:b0:0d:bd:91:24:2c:45:5f:df:3b:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:8D:56:57:CA:25:3C:20:D8:96:DB:9F:53:E4:CF:79:54:69:9B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.5.0/24
Signature Algorithm: sha256WithRSAEncryption
85:69:2c:28:aa:d8:78:6c:62:02:f7:fd:3a:05:ac:29:09:61:
95:86:a6:da:cf:e1:1c:e3:50:7f:de:23:64:b5:b2:30:73:55:
dd:9e:2a:44:0f:65:45:03:0c:40:77:74:26:b1:d5:05:3b:70:
b8:42:cc:73:1a:a9:f3:2a:51:28:3e:e2:17:93:54:23:d6:31:
02:dc:55:90:18:0f:4c:e7:b2:e9:93:ee:69:8c:a5:eb:93:13:
7b:d2:18:43:a6:ec:2d:79:93:40:32:62:43:12:51:27:8b:da:
8f:1d:cb:86:b0:bc:d5:c1:62:f2:56:06:5c:66:d2:8c:0c:b4:
f1:1f:e9:1a:34:0f:42:d3:1d:b0:8b:e8:7a:95:94:52:a9:8d:
f8:f4:4b:53:9d:b8:60:b5:5e:51:e1:22:22:ad:0d:7c:9d:ab:
e3:38:0f:8f:eb:55:d4:dc:20:d6:e2:13:1b:28:bb:32:17:d4:
39:c5:16:b1:21:b5:03:33:2f:94:ed:81:5c:4c:95:f8:5c:65:
cf:0c:b1:f4:89:5c:94:07:81:95:95:59:a7:6b:99:e8:c6:02:
fa:b1:13:a8:d3:eb:79:25:55:8e:a1:99:fa:6e:43:c7:09:7d:
e8:7b:05:9f:a1:a5:2e:c9:72:26:26:1c:00:a3:6a:da:e2:2e:
c9:9d:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:15 2025 by rpki-client