Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
File: AS202364.roa (raw, json)
Hash identifier: 7Vu9gvxCOhux/bvYc4hRguLiDKlPOXC2Hi8NQvWmgGM=
Subject key identifier: 36:13:A6:E7:35:29:04:74:2D:7F:D3:97:EF:47:DF:EC:BD:94:6B:E1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 124A5FA0E6B421C9C5475401B74CEA060508BF31
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
Signing time: Thu 13 Feb 2025 00:00:08 +0000
ROA not before: Wed 12 Feb 2025 23:55:08 +0000
ROA not after: Thu 12 Feb 2026 00:00:08 +0000
asID: 202364
IP address blocks: 82.23.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4a:5f:a0:e6:b4:21:c9:c5:47:54:01:b7:4c:ea:06:05:08:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 12 23:55:08 2025 GMT
Not After : Feb 12 00:00:08 2026 GMT
Subject: CN=3613A6E7352904742D7FD397EF47DFECBD946BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:15:e4:cb:a7:aa:1f:ee:f0:e5:20:df:61:
91:7a:2c:24:e9:0e:47:fd:a2:77:5d:26:c7:ba:03:
4a:21:67:a2:87:6d:7b:f3:fc:d8:9e:5e:4b:11:ff:
b2:34:9f:bb:32:b5:56:18:d5:41:e0:85:c7:16:18:
26:9c:8d:48:82:cd:e3:3c:1f:96:fa:cc:aa:e6:73:
65:b5:7b:4c:02:cb:73:69:b8:9b:f9:d1:9e:2d:48:
e1:35:2d:fd:d4:b5:e4:c4:3c:94:bf:a7:80:5c:15:
0f:fd:1e:ff:e8:d7:a8:99:c4:f0:7b:31:87:a9:2f:
c9:24:c6:2d:92:f2:ab:d3:f9:34:97:43:93:38:bf:
96:38:fd:5e:76:98:67:43:97:25:9d:10:7c:64:14:
70:1c:69:ae:9a:aa:65:75:e6:f4:85:08:0c:a8:0f:
4d:2c:4e:2d:39:2f:78:45:d8:bf:d3:3d:96:76:bb:
6f:13:b1:51:65:25:14:7e:fd:33:9f:c1:25:be:8d:
e5:7f:1d:d0:e3:0f:46:6e:64:3d:09:62:e6:8e:2f:
e4:60:7a:eb:a8:43:31:c6:ca:93:d3:fa:d2:3a:62:
90:55:07:c9:50:17:34:7b:53:88:92:55:3d:05:5f:
fe:9c:d2:e1:8c:2b:57:8e:87:7c:51:0f:94:54:0a:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:A6:E7:35:29:04:74:2D:7F:D3:97:EF:47:DF:EC:BD:94:6B:E1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c5:73:43:3c:f6:b6:f1:43:e4:55:06:9d:83:8b:a0:f7:79:
35:f6:73:99:b4:f3:77:cb:d6:8d:8d:2f:bd:99:db:d3:93:9e:
b0:eb:18:8d:f2:d4:83:17:dc:d2:68:c6:a7:6d:21:04:c9:12:
d3:5b:cd:5f:22:34:4b:8a:1e:eb:ba:d3:61:d6:f1:71:77:e9:
6f:5a:8b:aa:cd:1d:e6:ac:19:94:4a:38:15:31:3f:9a:35:6e:
2e:eb:48:d5:ad:20:42:7c:33:80:0f:72:cd:b4:dd:74:44:22:
69:7a:48:9f:17:82:46:d4:9e:04:0f:69:c2:9e:e6:32:76:b5:
e4:c3:33:99:aa:4f:17:29:f9:5d:ed:4b:22:7f:67:3b:23:9e:
2d:96:32:44:54:91:16:60:e1:54:d3:3a:11:1b:e9:72:35:37:
b3:33:d4:92:a6:29:42:13:df:41:80:a1:72:96:86:ba:3f:ad:
9b:3f:ae:8a:61:34:ce:94:8b:21:52:26:b5:83:59:11:f9:4f:
c2:2a:8a:cb:4a:7a:06:12:b9:32:c3:52:76:03:a3:0b:2b:28:
11:24:7b:6e:3e:f2:16:da:85:6c:bd:12:49:25:78:74:cc:45:
d4:51:e9:43:c9:ac:5d:b9:06:30:09:01:e2:e9:64:c8:ee:5e:
c9:cd:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:18:42 2025 by rpki-client