Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa
File: AS212427.roa (raw, json)
Hash identifier: rr3keI1lrKWtXmeUrbBaeRxQ0/Omzx+PvqAmp1I3egA=
Subject key identifier: F0:C9:20:79:D0:AD:F9:EA:43:AE:F5:94:F9:1E:98:B3:99:FE:2B:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 51565E82A7BAF3DF854C9AEA2D7D407F3B1A776F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa
Signing time: Sat 01 Mar 2025 16:09:11 +0000
ROA not before: Sat 01 Mar 2025 16:04:11 +0000
ROA not after: Sat 28 Feb 2026 16:09:11 +0000
asID: 212427
IP address blocks: 82.26.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:56:5e:82:a7:ba:f3:df:85:4c:9a:ea:2d:7d:40:7f:3b:1a:77:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 1 16:04:11 2025 GMT
Not After : Feb 28 16:09:11 2026 GMT
Subject: CN=F0C92079D0ADF9EA43AEF594F91E98B399FE2B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:2c:91:11:be:12:51:72:f2:d9:32:10:1f:
0b:69:25:51:0e:f7:9d:36:11:2d:22:78:8c:a7:b1:
05:85:fc:16:58:1f:85:a0:0f:ab:f4:95:33:0b:6f:
0b:89:9a:09:49:3c:0b:86:3b:98:89:58:bf:e7:81:
26:a0:dc:b5:85:9c:be:23:fb:f7:64:94:7c:92:a5:
9b:cc:fa:de:36:55:a5:f4:d9:30:93:51:ff:88:a6:
f4:b9:0d:63:78:c5:a9:c5:a7:99:bf:61:8d:83:3f:
68:06:00:62:a9:ea:46:ea:50:c5:11:8f:17:d0:79:
e0:2e:59:15:01:c3:e6:d0:e4:89:59:37:87:b7:bc:
12:f4:40:82:d9:12:e1:5b:be:73:31:bb:3d:57:49:
5e:64:2d:a6:1f:7e:25:52:54:93:20:fe:8d:b7:79:
4c:dd:44:fb:46:ad:f3:9d:65:fe:63:56:a5:19:1b:
ae:67:23:c3:b2:e4:7b:ea:59:5d:af:00:12:8a:92:
42:2b:b9:3b:41:3c:0b:26:21:07:fd:41:62:4c:bd:
cf:41:ae:25:59:16:9f:a7:b7:b4:6e:14:a8:d6:67:
46:00:d5:96:ee:c4:65:f2:95:83:68:3a:50:34:70:
a2:ea:ed:e8:d3:ca:a8:6b:1e:f0:a3:27:ea:4c:6b:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:20:79:D0:AD:F9:EA:43:AE:F5:94:F9:1E:98:B3:99:FE:2B:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.81.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e7:c3:05:80:53:5c:48:ae:1b:8a:7a:8b:72:d5:c5:12:47:
e7:7d:01:0a:20:5a:05:6c:d1:dd:f9:4e:45:e6:6d:dd:2e:dc:
99:1a:85:e6:f7:2b:83:bf:a9:0f:87:d5:d0:38:3c:0c:6d:d2:
5d:54:ad:3d:b3:3d:61:94:a7:c1:25:c1:5a:a4:e4:d3:6c:7a:
2c:32:6d:7a:63:be:0b:8c:91:f8:67:26:b3:cc:d0:9d:14:a5:
19:d2:c2:e1:6b:b1:9e:b0:b4:cb:a3:fa:f0:3b:5b:f9:38:04:
45:39:c6:8b:8e:d3:b6:e6:ae:a8:87:18:0d:38:e5:d7:08:17:
3c:1e:c8:55:48:6d:4e:73:72:92:b6:29:89:16:ec:cf:82:bd:
45:f4:67:12:9b:ab:d9:6c:b1:83:57:e3:7b:40:a5:11:e2:9e:
36:c0:5f:6d:71:1e:db:d4:7d:d8:97:b2:fa:fb:df:a1:2f:8d:
11:5a:7b:72:23:79:8c:25:34:29:43:08:cd:df:de:71:c3:1c:
8c:36:e1:ab:8f:10:a5:b6:fb:a5:f6:31:87:9d:4f:75:bd:87:
da:30:77:56:28:a5:94:72:a5:f7:bc:b1:eb:44:1a:79:9a:1f:
21:0b:b4:fe:25:9a:e4:01:6f:22:45:1c:56:d3:d5:33:6c:f3:
11:98:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:18:38 2025 by rpki-client