Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
File: AS213896.roa (raw, json)
Hash identifier: WUfITeqBprpgHpr5jPjPR+gWEjfgC4kqX5AvV8EjGWQ=
Subject key identifier: E1:F7:4A:7B:23:5E:6D:F0:BD:9D:A5:A6:8C:DF:F0:C4:DD:74:1A:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7143424634D7E26D0A8DBA31252C95A29C9305C8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
Signing time: Fri 06 Jun 2025 18:47:38 +0000
ROA not before: Fri 06 Jun 2025 18:42:38 +0000
ROA not after: Fri 05 Jun 2026 18:47:38 +0000
asID: 213896
IP address blocks: 82.24.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:43:42:46:34:d7:e2:6d:0a:8d:ba:31:25:2c:95:a2:9c:93:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 6 18:42:38 2025 GMT
Not After : Jun 5 18:47:38 2026 GMT
Subject: CN=E1F74A7B235E6DF0BD9DA5A68CDFF0C4DD741A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:43:f8:a3:e7:d4:87:ba:02:2a:3b:6e:02:
33:05:91:1c:02:40:d4:a5:33:53:2b:44:d1:fe:25:
d3:3c:76:be:53:80:f9:09:10:9e:79:c6:99:8b:13:
f5:9f:d1:c2:25:09:16:d0:df:e1:70:f0:04:17:de:
02:91:5b:a5:b2:48:13:ac:ba:5a:a1:f9:22:ff:e7:
b9:3a:e8:71:3c:bf:cb:21:d1:f0:08:34:c2:50:04:
68:8b:a4:e3:09:ae:43:6b:d7:e8:2e:9f:a0:8b:26:
ac:f4:7d:c5:5f:a6:c7:09:fd:37:1a:30:31:30:12:
7f:78:8b:3d:57:80:d8:6d:46:47:cc:a6:a6:57:8d:
f8:ff:f3:cf:2b:07:48:66:68:3e:4b:be:67:50:de:
a6:93:cb:c5:9c:3f:5b:6a:45:25:fe:9f:77:be:e4:
41:a2:e6:29:d4:83:e7:f0:54:bc:77:2f:60:85:89:
db:45:87:e8:af:cb:da:17:de:b3:bf:8e:40:3e:e4:
0b:b4:4d:ca:74:82:2e:3d:1c:25:25:03:d5:a9:b7:
7b:48:e2:94:b7:5d:30:f3:0d:a3:9a:5c:1a:93:f3:
06:df:e4:93:1e:9f:81:90:37:fb:10:30:90:82:42:
17:37:6a:1e:ed:1c:c7:67:75:e5:e3:33:f8:63:cd:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:4A:7B:23:5E:6D:F0:BD:9D:A5:A6:8C:DF:F0:C4:DD:74:1A:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.88.0/24
Signature Algorithm: sha256WithRSAEncryption
66:08:25:76:d8:f6:5a:66:e1:76:76:74:d6:5a:60:f1:78:39:
45:1e:ab:2a:72:41:6c:f3:e3:bf:1b:b1:f2:e9:99:01:b3:da:
c0:8a:1a:76:05:b0:30:05:c7:4d:f5:1d:57:87:5a:07:64:b3:
c1:30:6b:82:d9:ed:54:3f:9d:0d:75:0b:1f:21:b7:72:46:33:
6b:2b:06:fe:6f:63:08:5d:de:56:58:90:58:46:b0:43:5f:36:
ec:d6:3f:d8:db:fe:ad:16:47:f4:26:02:fa:1b:ab:e4:8f:ca:
0e:25:fb:93:1f:0d:2a:62:ba:19:91:b6:36:91:59:01:61:10:
34:cf:26:57:4d:42:7b:46:f7:cf:7b:2b:60:17:90:6c:99:a0:
1b:0c:9f:53:ec:80:45:f8:3e:db:78:83:41:cb:1f:f9:ba:2c:
ae:d5:8d:56:3b:74:7b:fc:1a:a5:39:3a:c1:dd:a6:29:41:6c:
11:4a:df:77:23:e5:38:e1:e2:c8:f9:18:85:1e:d3:b6:eb:fa:
41:63:dc:34:a5:e0:4d:66:0f:08:4a:6d:3d:67:bd:f0:a2:df:
7e:f0:d3:a9:ff:93:7c:31:3b:f4:db:32:28:06:56:40:d2:ec:
1c:e5:13:ce:50:4b:18:60:30:0a:d8:af:0d:77:ae:88:58:b7:
4f:7a:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:51:42 2025 by rpki-client