Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
File: AS198825.roa (raw, json)
Hash identifier: 17LQ4NFPnV7lCYwSu6Az1MXnmjbJylIq6Eh+GN2+EPg=
Subject key identifier: 7B:B6:D7:A8:5D:20:84:AA:B2:F8:D9:C2:CF:C9:C1:42:CB:C1:15:AF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 18B46D8300FB12F53F1E911686C9C9698A149F81
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
Signing time: Sun 23 Mar 2025 02:24:58 +0000
ROA not before: Sun 23 Mar 2025 02:19:58 +0000
ROA not after: Sun 22 Mar 2026 02:24:58 +0000
asID: 198825
IP address blocks: 82.22.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b4:6d:83:00:fb:12:f5:3f:1e:91:16:86:c9:c9:69:8a:14:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 23 02:19:58 2025 GMT
Not After : Mar 22 02:24:58 2026 GMT
Subject: CN=7BB6D7A85D2084AAB2F8D9C2CFC9C142CBC115AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:0f:3c:bf:63:38:d9:2f:41:a0:ae:05:79:
4e:1c:3e:04:0f:4b:4f:bc:b3:61:99:18:aa:5c:d0:
c2:36:f6:8e:e5:e4:b1:94:c7:98:5f:29:05:ad:3a:
eb:f1:cf:f2:42:15:5e:d3:9c:7c:7f:5b:82:22:4e:
85:09:2f:6d:e3:87:62:52:ab:03:aa:28:85:65:3f:
ea:cd:32:54:05:89:2a:01:98:ac:30:e4:59:66:d0:
42:2c:5e:c0:d0:4c:cd:d6:fd:69:70:8f:0b:e8:7c:
b1:c4:f5:0f:21:0c:dd:bd:13:76:41:15:51:23:66:
c8:52:0d:f8:20:84:52:78:51:4a:e9:2f:4f:e8:b4:
d8:44:a0:65:10:b3:dc:17:16:d6:8c:03:ae:85:5a:
b9:8b:03:21:fa:5c:44:fb:59:1c:8d:93:11:a9:0b:
12:2d:54:31:f0:2b:f8:36:a2:d0:2f:17:35:60:1d:
1d:8c:5d:2b:a9:e2:e6:e0:69:1a:28:15:fd:10:a8:
1d:10:42:88:74:be:5a:16:b0:30:2b:c6:93:d9:ed:
26:11:62:c7:02:01:c7:cf:41:39:b5:6e:8e:9d:6c:
04:54:83:72:6d:57:4b:32:82:82:f9:99:c2:4b:70:
7a:2b:cc:57:7d:9f:b8:16:6e:b3:c9:c6:e3:14:23:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:D7:A8:5D:20:84:AA:B2:F8:D9:C2:CF:C9:C1:42:CB:C1:15:AF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.77.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0d:3f:3d:8a:59:c5:10:ea:b5:f6:43:47:73:2f:d2:fa:98:
c0:fb:b8:90:76:88:9a:be:e9:e5:cf:20:0d:29:1d:6f:08:a2:
46:f7:17:7e:a9:27:ad:52:33:f8:06:86:44:c2:ca:25:45:e3:
d9:44:41:f9:73:1f:bc:0d:4c:9a:c8:52:bb:bb:2d:80:70:88:
3e:3d:42:ab:2e:8c:c4:d3:43:71:25:db:7d:5f:39:a8:bf:69:
21:aa:56:28:77:7d:f6:49:22:01:d6:a5:d1:6d:17:91:f0:e9:
c8:1b:38:9e:c3:fa:3b:97:13:ab:e8:27:01:b1:88:de:06:7b:
2b:f4:ab:0d:28:e7:d3:2e:5e:5c:a4:0e:5d:3c:79:17:f9:06:
98:ce:37:16:36:e1:3a:0a:87:fb:2b:fd:a8:7e:8e:64:0f:53:
1f:22:8d:45:21:bc:ca:7a:0e:68:7c:3f:f1:bf:e6:c5:48:11:
3c:ed:2e:c2:26:35:b4:18:ef:e8:a4:16:0a:e8:e4:94:47:19:
e7:12:3b:9e:56:ae:1a:77:30:9b:e6:45:32:ea:32:b9:a9:89:
2b:cf:f9:f5:8c:2d:4d:04:cd:6d:0c:aa:b8:55:a8:64:f8:77:
f8:ff:48:8f:e5:13:7e:ed:7f:00:ea:1c:c0:82:d1:7e:03:3d:
cd:81:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:26:17 2025 by rpki-client