Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: 6+yfZ042KoBVZwva0T/UjOcZaYLZKXU96/Irgae1l7U=
Subject key identifier: F3:41:B7:11:A7:49:C5:72:FD:42:99:F4:CB:E2:0E:7C:5E:DD:FA:EE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4E7970CCF8D9CE2A90C1CDC896DB25204D8954BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
Signing time: Mon 20 Jan 2025 21:07:26 +0000
ROA not before: Mon 20 Jan 2025 21:02:26 +0000
ROA not after: Mon 19 Jan 2026 21:07:26 +0000
asID: 214024
IP address blocks: 82.21.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:79:70:cc:f8:d9:ce:2a:90:c1:cd:c8:96:db:25:20:4d:89:54:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 20 21:02:26 2025 GMT
Not After : Jan 19 21:07:26 2026 GMT
Subject: CN=F341B711A749C572FD4299F4CBE20E7C5EDDFAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:16:d0:b8:46:1d:ef:73:65:b8:74:f9:76:
5d:9e:be:c0:5f:ce:84:04:50:b5:7e:36:47:25:da:
85:9f:03:a9:d1:d8:2c:03:a6:8c:c7:18:a7:71:a9:
63:49:31:52:c9:cb:88:d7:b2:71:6e:ea:29:09:db:
3c:b8:c6:e9:ae:c1:9c:28:c8:3e:dd:8c:64:84:61:
5c:18:ce:fd:bf:53:b4:83:12:28:42:5c:08:58:ff:
f8:a3:66:be:96:9d:94:95:e3:b2:b7:ea:81:e6:c5:
04:44:de:e5:31:53:5b:f3:79:07:37:73:cd:0d:bc:
14:de:ab:35:cc:5a:16:73:cd:32:b7:38:1b:5b:f3:
a8:3d:ef:b8:7e:e7:21:70:26:8f:69:ec:11:22:5b:
f0:95:29:eb:2b:ad:5b:db:60:bb:6b:44:23:90:54:
16:57:e0:c9:2c:93:b6:90:d5:19:05:6e:a2:ce:79:
48:e6:9d:de:f2:ea:80:b4:f4:23:4f:f0:c5:0c:4a:
91:ea:80:be:2a:3f:73:30:64:0a:de:3f:f1:09:50:
a2:fa:1f:7a:cd:c8:ba:19:06:43:67:6e:17:c3:57:
52:2c:3f:d8:76:5d:dc:8d:e6:2e:a1:bf:9e:2f:09:
1a:06:5b:ff:2c:b5:72:7c:05:67:45:48:f3:19:04:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:B7:11:A7:49:C5:72:FD:42:99:F4:CB:E2:0E:7C:5E:DD:FA:EE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.200.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6b:40:2a:6a:45:af:c5:72:5b:95:fd:c1:30:3b:8e:7e:73:
13:78:9d:e4:80:78:5b:48:24:d1:d0:8a:7c:1a:b1:d7:f2:c6:
dd:87:b4:0b:0b:1b:b0:f1:cd:88:fb:69:f5:8c:0d:ef:16:2e:
a7:6f:ba:fe:2d:54:2b:40:04:b9:4f:4f:e6:f4:12:c7:1c:ca:
fc:f8:c3:63:1e:d7:d2:9f:27:bf:3f:b2:f6:1b:4e:e2:08:4c:
c6:6c:f6:f7:77:ba:70:29:47:16:f7:ad:2a:ba:e2:75:cd:73:
35:45:c6:2e:d0:6d:6d:2a:98:52:c0:bc:23:34:d6:c6:e9:c4:
f5:2a:83:6c:43:47:ff:a3:95:f8:fa:fd:12:a7:f3:df:b0:38:
c6:3f:8c:7e:31:37:c3:67:28:f9:2d:29:9a:9b:2c:be:20:36:
34:bb:40:b6:4b:87:f9:2e:3d:1e:06:bc:c7:6f:b6:c5:e1:b8:
66:26:e0:81:7c:d0:a6:ea:d8:a9:db:37:61:e0:b2:9c:b5:ac:
c9:20:39:ed:79:5d:f4:c9:76:45:8e:5d:a4:71:e3:68:b0:01:
ca:86:ee:57:fb:c6:9a:dd:f7:5f:56:78:9e:d7:94:75:05:3a:
e2:4d:af:d4:1e:40:98:4f:08:80:dd:04:36:de:c4:5a:91:8e:
5f:8d:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:10 2025 by rpki-client