Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
File: AS210805.roa (raw, json)
Hash identifier: qbVPimZaNt2/z8Lkf1/FBpYall8/ZB0YPNqK5MUj/CE=
Subject key identifier: 2F:FC:30:11:53:54:09:13:55:BE:5D:BD:89:57:13:AC:FC:46:9C:86
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 27F2751CEE7A5FEEBE9D45FA6E3F4E78088A1399
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
Signing time: Wed 12 Feb 2025 13:36:19 +0000
ROA not before: Wed 12 Feb 2025 13:31:19 +0000
ROA not after: Wed 11 Feb 2026 13:36:19 +0000
asID: 210805
IP address blocks: 82.22.116.0/24 maxlen: 24
82.22.117.0/24 maxlen: 24
82.22.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f2:75:1c:ee:7a:5f:ee:be:9d:45:fa:6e:3f:4e:78:08:8a:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 12 13:31:19 2025 GMT
Not After : Feb 11 13:36:19 2026 GMT
Subject: CN=2FFC30115354091355BE5DBD895713ACFC469C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:7e:d6:09:83:08:ca:c2:3a:8c:4d:51:64:
60:55:1d:ab:54:a7:81:49:fd:48:49:48:fd:a2:96:
d7:97:5a:13:0f:a4:f4:f6:f5:97:7c:32:8a:47:c8:
ba:73:67:e2:1b:71:e8:9c:9f:4a:1d:36:77:d1:fe:
b7:da:b5:66:64:7e:58:ef:00:c6:4f:b1:58:ce:f3:
3d:ec:d8:1b:d6:6e:02:32:c9:c1:43:0d:b6:6c:1c:
4a:3f:ad:68:3e:e4:88:b5:88:98:ca:83:7e:0f:9c:
69:6b:d1:e9:ba:4c:3d:3d:c9:b5:6d:41:9c:34:0f:
34:ba:7e:5d:aa:28:c6:55:b5:7a:ae:83:c4:07:b5:
0d:71:95:09:3d:cd:6b:cf:1e:e4:1d:69:13:eb:ac:
eb:41:8c:2c:cb:06:2b:44:a1:10:a7:da:a9:02:08:
8e:5f:51:e0:2d:3d:0c:4f:ec:5a:7d:03:6b:22:d8:
f0:a9:42:5c:52:d4:e9:20:72:57:53:be:63:c3:9f:
66:6c:88:45:69:8b:83:28:d9:51:c9:d0:fa:6f:5a:
ec:5d:de:3e:0d:c6:58:17:da:74:8b:c0:3c:59:09:
9d:dd:97:8f:d2:e5:68:30:26:e3:cc:7f:0b:bd:41:
e5:f5:5f:b4:22:60:80:43:af:a9:90:c7:e7:35:0f:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:30:11:53:54:09:13:55:BE:5D:BD:89:57:13:AC:FC:46:9C:86
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210805.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.116.0/23
82.22.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:dc:6d:f3:f8:5a:3f:27:91:92:6e:6e:8b:41:80:d6:5a:6e:
22:9e:6e:c3:a2:2a:76:aa:00:79:4d:33:4c:a0:97:17:3f:9f:
03:de:d0:6e:bd:1e:7c:73:08:a0:dc:e0:16:4d:da:ad:7b:54:
52:4e:71:b9:fc:3d:7d:b4:62:87:53:98:62:92:66:4c:9e:d7:
69:c1:f3:81:b0:15:ac:58:82:a8:84:79:54:23:03:8b:20:22:
5d:e2:56:e0:4b:a8:66:7a:f1:a4:a4:33:0b:df:0a:a2:cf:7c:
80:aa:17:ae:22:51:ac:e7:18:f6:bc:75:02:94:c7:4b:d4:86:
8e:97:ff:c8:6d:61:c5:75:16:73:fc:23:72:17:f7:de:18:b7:
d3:19:50:9e:b7:71:9e:26:e2:04:07:ea:69:ab:fa:fa:5e:c5:
01:0b:ff:a9:1f:f9:b0:c3:fa:4e:46:b4:9b:95:26:5d:b2:54:
c2:bc:a5:a9:1f:0c:05:03:ff:b9:2d:2d:dd:27:f6:46:7a:2e:
bb:8c:b0:1d:7c:ab:55:ca:6a:76:32:79:42:e8:91:81:47:5d:
dc:61:41:62:f8:e0:f6:83:33:2a:ad:a0:3c:fe:db:05:80:6f:
d5:ba:78:39:90:e7:26:ba:0f:39:1f:39:ed:b4:35:4e:80:ed:
32:4e:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:41:55 2025 by rpki-client