Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
File: AS202364.roa (raw, json)
Hash identifier: 8F1/gGTjlS2viebc41U/6aEo7giALexuTUPXVJKAo9Y=
Subject key identifier: 6C:59:4F:B4:61:1F:08:74:B3:B7:22:F6:26:12:9B:AC:E4:1E:D6:B3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5895D970447EB8A42EDC7916369A814EA11EEDB6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
Signing time: Tue 21 Jan 2025 13:49:11 +0000
ROA not before: Tue 21 Jan 2025 13:44:11 +0000
ROA not after: Tue 20 Jan 2026 13:49:11 +0000
asID: 202364
IP address blocks: 82.23.138.0/24 maxlen: 24
82.29.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:95:d9:70:44:7e:b8:a4:2e:dc:79:16:36:9a:81:4e:a1:1e:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 21 13:44:11 2025 GMT
Not After : Jan 20 13:49:11 2026 GMT
Subject: CN=6C594FB4611F0874B3B722F626129BACE41ED6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:a4:b6:40:40:42:47:79:8c:62:0f:87:47:
3c:9b:d2:f5:e9:e9:d6:62:d1:62:67:43:d6:ec:8c:
a8:24:a1:26:39:da:da:2c:92:2b:15:ee:2b:16:c1:
72:a7:bc:88:ce:56:1e:3d:57:47:7d:2c:7d:79:15:
af:9a:8e:d3:9a:b3:e6:64:75:58:e6:5f:b0:a9:5e:
fd:40:39:ea:28:5d:35:b2:ad:96:0a:74:7d:ad:c7:
f6:eb:83:ed:90:b2:e4:15:38:ab:b2:89:7f:42:1d:
67:5b:a3:d8:13:13:ca:22:a6:b4:a2:ab:2b:c1:34:
b7:45:72:1f:f8:00:01:23:cf:1e:87:19:28:9d:05:
44:1c:bf:81:9e:31:12:c6:05:69:72:f0:93:62:d1:
da:5e:47:12:5b:99:99:a8:ea:c2:e2:34:73:6b:d5:
71:96:a8:83:9f:4f:78:f9:cb:7a:47:70:4c:26:d7:
db:54:13:9c:69:99:ae:62:6e:a5:0f:d1:7f:da:ef:
65:6f:ee:be:2d:9c:38:f6:e0:04:a5:90:1c:82:0e:
f7:98:60:80:88:19:01:7a:70:03:a2:78:8b:8f:b1:
0b:61:c4:1b:34:6d:8b:64:d5:20:50:2f:96:13:6c:
ed:08:6e:62:02:6a:63:a4:8b:3f:65:bd:41:39:c8:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:4F:B4:61:1F:08:74:B3:B7:22:F6:26:12:9B:AC:E4:1E:D6:B3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.138.0/24
82.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
38:82:f9:57:70:4e:bc:d0:54:2e:12:57:d5:3d:6a:39:28:20:
37:91:20:d7:66:39:1f:5a:72:6e:84:8b:e4:66:c7:34:e5:7c:
c7:e5:fb:73:a8:4e:69:ca:93:91:b2:cc:5c:ff:fd:2f:63:63:
47:a6:bf:d5:95:dc:59:50:59:e2:75:d2:0e:87:be:2e:f2:30:
85:4c:0e:cf:25:d9:fb:bd:b6:d0:57:f4:bc:d7:c2:04:8c:60:
7d:87:2d:a4:f2:4a:43:b6:07:2c:80:ae:70:ef:89:e7:94:9d:
7f:7c:87:b6:a6:9a:1f:cf:fb:0b:5c:4f:f1:34:fe:7d:10:d4:
eb:84:e5:3d:14:26:41:f7:bb:ef:fa:e8:ab:25:93:a0:1e:5f:
43:a5:e5:87:8d:7c:63:76:8a:ca:a7:b9:af:a7:06:53:fb:52:
7b:e0:b7:8d:f4:42:e2:e7:79:92:fe:3a:9b:0c:da:71:90:9e:
02:24:d2:f5:d1:33:36:b2:a4:f4:9d:43:c0:81:15:6e:a5:19:
63:c0:11:e8:96:4e:80:06:f9:e3:5e:b9:35:70:a0:21:1e:95:
fc:75:a4:bc:5a:ec:1b:c3:05:49:35:24:2a:49:0f:9a:fd:3a:
9c:e9:ef:44:30:8e:3b:d8:e3:9e:74:e7:55:cb:ea:02:05:8e:
69:bf:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:00 2025 by rpki-client