Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198968.roa
File: AS198968.roa (raw, json)
Hash identifier: 0xXj5qrtl/L5lqG6eCNEkhi7gEXFEpE0/UpQH3ORgiA=
Subject key identifier: C2:43:26:8F:17:25:B6:0E:3A:C1:D0:53:C4:98:BB:C0:8A:BE:09:9A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6A79C39E660155B68A491F50612CAA7BB8444626
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198968.roa
Signing time: Fri 21 Feb 2025 10:00:01 +0000
ROA not before: Fri 21 Feb 2025 09:55:01 +0000
ROA not after: Fri 20 Feb 2026 10:00:01 +0000
asID: 198968
IP address blocks: 82.21.214.0/24 maxlen: 24
82.22.215.0/24 maxlen: 24
82.23.207.0/24 maxlen: 24
82.25.218.0/24 maxlen: 24
82.26.211.0/24 maxlen: 24
82.27.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:79:c3:9e:66:01:55:b6:8a:49:1f:50:61:2c:aa:7b:b8:44:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 21 09:55:01 2025 GMT
Not After : Feb 20 10:00:01 2026 GMT
Subject: CN=C243268F1725B60E3AC1D053C498BBC08ABE099A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:48:0c:08:c6:76:ee:a9:31:09:50:af:db:
12:20:18:2b:a9:0a:e6:a4:17:2f:26:9d:98:ad:42:
2e:83:58:89:7b:97:9d:33:17:2b:f4:44:be:f2:a4:
25:ab:0d:6d:bb:5f:8d:e1:73:e9:b3:0c:36:82:d2:
45:da:3b:3a:15:2f:15:e9:27:75:e1:54:52:17:af:
8b:ee:c4:50:78:86:d2:a5:f4:83:a9:f5:e2:f9:eb:
89:99:bb:e0:2d:88:be:4f:e7:0b:3b:5a:cf:21:b2:
b0:d1:32:b9:1a:0e:d4:6b:46:f6:68:67:08:8d:5d:
3e:c1:fc:26:79:5b:fc:26:7e:32:c8:9e:be:06:e0:
64:06:d7:22:c3:a9:22:13:d2:a4:25:18:4b:d4:7a:
ac:8b:ad:63:c0:8c:2c:be:89:6a:5b:66:9a:f0:ff:
c5:f9:8d:c5:18:7e:d6:20:a3:3d:46:33:7d:f0:bd:
ac:63:60:c0:d9:0d:2e:5f:65:ea:e7:bf:2c:54:e0:
6b:85:88:da:57:8f:75:cf:42:39:1f:41:1a:39:cf:
9e:92:64:77:b3:a3:a4:f2:7f:27:e1:b2:09:9a:f4:
07:34:8b:be:82:11:7b:6d:5b:0e:02:a4:21:77:b6:
2f:20:57:06:be:25:35:bd:70:c3:bf:45:b4:af:bf:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:26:8F:17:25:B6:0E:3A:C1:D0:53:C4:98:BB:C0:8A:BE:09:9A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.214.0/24
82.22.215.0/24
82.23.207.0/24
82.25.218.0/24
82.26.211.0/24
82.27.216.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e6:f7:b3:bd:1d:16:77:f6:e9:99:10:18:8a:19:f1:93:e4:
1f:52:b2:cb:1e:9f:f6:5e:ee:a7:f0:9c:31:2c:98:fe:49:73:
b9:f9:f8:83:81:6a:19:7d:e7:b8:d7:f4:cf:98:e0:01:48:b4:
ae:f8:9c:0c:32:11:a6:ff:9e:6f:cd:96:d0:38:11:5a:a7:4d:
d4:ec:07:ed:45:fb:07:0e:e6:86:65:12:90:c9:e1:69:b6:ac:
88:6b:5d:12:d4:03:3e:ba:f8:79:1c:65:ae:a7:aa:55:99:35:
f4:ad:9d:13:64:f2:d2:58:84:48:4a:d6:18:77:dc:00:01:aa:
04:16:e5:88:bc:42:a3:a2:66:7e:9a:0d:c1:25:e5:99:f0:e6:
26:8a:b9:bc:63:32:49:31:78:11:26:5a:bc:7e:de:77:cc:34:
02:50:9f:25:ef:df:56:ff:2b:ae:21:6c:3f:e1:d6:7d:c8:9f:
fd:68:34:14:59:aa:f0:79:19:73:c6:09:f0:fe:c1:6e:4d:f5:
3c:22:8b:0a:c8:da:bd:35:0c:c7:33:a1:63:a6:7a:28:72:92:
46:13:ac:d7:03:99:b6:b2:34:9e:d4:47:ed:9f:ec:b1:02:d0:
ce:5a:bd:c4:f0:92:0d:58:b3:11:6a:68:55:31:bb:16:73:ec:
d5:58:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:26:17 2025 by rpki-client