Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
File: AS207449.roa (raw, json)
Hash identifier: kTEEyVyIsLOf5SelUZ2eRYvhsui9KOjS0fMYsUhaHXM=
Subject key identifier: 25:C9:15:11:B0:DE:6E:EB:7A:AC:05:90:5B:EB:40:26:F1:6B:E4:32
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 464F1F3F1B2CD258C722C0E6A82F41D146D5ABBE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
Signing time: Fri 06 Jun 2025 14:19:24 +0000
ROA not before: Fri 06 Jun 2025 14:14:24 +0000
ROA not after: Fri 05 Jun 2026 14:19:24 +0000
asID: 207449
IP address blocks: 82.24.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4f:1f:3f:1b:2c:d2:58:c7:22:c0:e6:a8:2f:41:d1:46:d5:ab:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 6 14:14:24 2025 GMT
Not After : Jun 5 14:19:24 2026 GMT
Subject: CN=25C91511B0DE6EEB7AAC05905BEB4026F16BE432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:98:f6:d5:2a:04:17:e2:7a:8b:dd:5a:38:
68:44:23:bc:2b:34:d1:45:4e:84:70:c2:e7:25:ad:
7f:f8:8e:6e:ee:3d:3b:4c:1e:5e:0d:da:63:35:ee:
e6:bf:35:47:ee:e8:6b:cd:2c:5b:38:8f:a8:a2:b0:
24:66:39:92:3c:b0:c3:f7:ef:8f:a7:d8:49:56:5f:
50:1e:40:8d:e7:3c:82:6f:aa:5e:72:16:71:a7:96:
85:83:d7:66:57:39:12:99:97:3a:e9:37:49:0f:73:
a1:a6:6f:17:6a:58:30:83:d9:1c:b9:90:d6:df:30:
f1:3a:d3:3c:35:b3:a3:ea:b2:07:51:48:f2:46:7f:
ba:d3:30:4f:a4:fe:ae:eb:1a:e1:a6:2d:a0:3b:09:
25:7f:60:41:ab:77:b4:f0:b1:d9:c2:2b:b1:74:d6:
30:fb:a5:cc:ba:5e:73:95:32:ee:81:92:b4:21:c5:
e2:b7:bd:14:24:69:2b:b8:df:fa:e2:b4:73:3a:75:
60:ca:e5:62:57:a0:71:b0:90:fd:9f:6b:a7:2c:d1:
d9:02:1f:19:f9:5d:1b:cf:55:bf:f3:63:ea:60:67:
62:74:e9:4c:9f:ad:cc:84:36:0a:20:fa:b3:7e:2e:
2a:56:64:e8:4a:07:ff:f4:67:d6:59:bb:a4:91:4c:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:15:11:B0:DE:6E:EB:7A:AC:05:90:5B:EB:40:26:F1:6B:E4:32
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:f7:e5:b7:fc:dc:f5:1f:a1:ef:13:8b:9e:e7:2f:6a:04:
95:62:59:03:6b:f4:e7:f6:f8:73:8d:2e:f4:ed:f9:9b:52:88:
2a:40:d0:8c:c8:1f:5d:42:17:4c:b2:6b:82:a5:ff:ff:aa:a6:
a4:f2:a7:6f:b1:2b:6f:e9:90:5b:d1:15:f3:0a:b9:e5:4c:e5:
2e:a7:a3:d2:e0:28:af:e6:6a:9f:8b:56:96:0c:a1:ad:33:8f:
1b:de:ef:b6:f6:c5:e2:4e:f8:fc:b1:ef:6c:da:92:29:1d:dc:
b0:0f:5d:db:39:72:35:99:7c:b7:cd:d5:3e:4d:70:ba:2d:dc:
9c:a4:77:38:3e:c2:39:bd:c2:05:7b:5e:81:b4:5a:a8:02:65:
15:5e:30:32:75:e1:dd:da:8e:c0:41:6e:2a:3c:75:d4:59:d2:
8c:00:43:b5:12:22:8e:54:4b:e5:b0:61:f5:90:93:74:53:08:
2c:b2:8c:0b:97:a1:d0:a8:fb:f1:f3:f6:f6:b4:57:ba:90:d6:
8b:63:7e:6c:be:3c:91:40:14:d3:1b:15:3d:e3:26:35:4b:59:
ea:82:a4:02:da:81:f9:11:a1:a6:7e:01:91:8d:33:cb:a2:da:
d1:87:78:ad:8e:2a:c5:d9:9e:73:b9:c7:0b:a5:60:d7:7d:72:
3d:2f:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:53 2025 by rpki-client