Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa
File: AS199414.roa (raw, json)
Hash identifier: nQJaw3FGGR9uEj005EimyOvlMkalQMeGeIsqTLyQ1AM=
Subject key identifier: 2F:F3:13:F1:43:62:28:85:53:54:18:D1:35:E0:55:BC:80:9E:F8:93
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 21ED2B3247953079ABBCD08F96A5E370DAA7EB02
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa
Signing time: Mon 12 May 2025 02:15:05 +0000
ROA not before: Mon 12 May 2025 02:10:05 +0000
ROA not after: Mon 11 May 2026 02:15:05 +0000
asID: 199414
IP address blocks: 82.21.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ed:2b:32:47:95:30:79:ab:bc:d0:8f:96:a5:e3:70:da:a7:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 02:10:05 2025 GMT
Not After : May 11 02:15:05 2026 GMT
Subject: CN=2FF313F143622885535418D135E055BC809EF893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:f9:1e:7a:77:04:15:96:2e:cf:42:c6:d1:
b7:35:88:02:46:3b:c8:e5:63:7e:16:24:4d:f5:f8:
10:1f:3f:ec:0a:ca:03:84:2f:4e:df:ae:de:6e:5b:
87:be:df:53:61:84:96:17:07:d7:42:d3:b4:72:c3:
36:d4:40:a2:ce:89:74:c0:e4:f6:49:67:f5:4e:a7:
2e:1f:80:77:85:d9:84:18:b0:e1:ee:af:3e:3e:05:
8f:38:dc:50:78:cc:8d:3c:18:7f:31:b3:5a:b4:d7:
25:2b:df:11:e9:47:4d:cb:aa:0c:e1:0a:b9:fd:99:
d4:ad:7c:6e:e1:c8:27:1a:62:5a:e9:26:42:ac:5d:
b4:2a:29:52:44:75:9a:f4:02:d0:7a:b1:a4:ff:29:
ea:c9:4a:4f:2f:ca:71:9e:c6:0b:ea:96:2b:ee:09:
d1:d4:0f:f6:cc:00:bc:a9:0e:84:5f:7f:f8:c3:74:
8c:55:c2:81:d6:eb:25:d7:3f:17:66:8f:94:f7:b9:
68:4a:e8:ef:96:85:2c:63:6e:64:c6:31:01:1a:13:
bb:c7:ab:ee:50:b4:53:2a:8e:fd:5b:31:01:5e:c5:
07:54:42:48:68:8d:11:3f:21:20:b9:62:c2:f1:68:
23:16:72:b0:26:d1:8f:84:b8:89:3e:69:78:4f:9d:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:13:F1:43:62:28:85:53:54:18:D1:35:E0:55:BC:80:9E:F8:93
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.2.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:39:b9:df:17:9a:f3:73:ee:69:a7:21:76:d6:fa:1b:4d:
90:ee:9c:25:e1:22:0f:0c:83:b3:e8:99:d6:0d:eb:ef:35:0c:
63:79:48:55:4a:d3:59:81:c2:04:ff:08:98:9b:c2:aa:c1:2b:
7d:5b:01:b5:55:f4:f6:ff:df:1c:f1:ca:46:bc:bc:0e:47:38:
93:0b:84:22:9e:f7:a5:53:f1:83:b3:f7:da:36:e3:12:f5:3c:
52:15:84:da:27:24:76:95:b3:05:02:56:8c:18:a0:b2:0f:11:
fd:6c:be:6b:2c:bf:73:0b:1a:24:40:73:63:2c:77:f7:f0:35:
4f:a0:81:09:74:15:17:2b:fb:33:97:3b:12:4a:1c:18:fd:5a:
26:fa:b3:91:ae:11:cf:0a:cb:83:25:13:21:e5:1e:2c:a2:5b:
e1:45:e3:cb:a9:ce:cf:1e:77:b5:e3:a0:49:f8:9e:f0:34:c1:
70:55:54:8a:7c:31:4a:04:f8:bc:16:02:87:c1:5b:3c:c9:c0:
01:2a:48:76:40:2b:4c:2f:ee:d3:70:c0:e0:b7:0b:27:76:6e:
1e:3e:4b:6c:d3:25:94:39:3b:53:01:ff:f6:df:2e:cf:22:07:
29:ed:37:7e:40:6b:8f:a2:fc:88:78:bd:40:a1:c0:f2:99:f2:
2f:5c:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:52:29 2025 by rpki-client