Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa
File: AS215523.roa (raw, json)
Hash identifier: qLlt85ZJIZKVG/EILw8YLKdJ2bKXgCf5OGSfQ4sTYhs=
Subject key identifier: 96:57:F3:98:11:FF:EA:FB:F2:93:40:DC:01:85:DE:FE:35:9F:EC:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C6CD8159E5AE163B0313935D838C7F0D7DEEF1F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa
Signing time: Mon 06 Jan 2025 16:36:47 +0000
ROA not before: Mon 06 Jan 2025 16:31:47 +0000
ROA not after: Mon 05 Jan 2026 16:36:47 +0000
asID: 215523
IP address blocks: 82.29.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:d8:15:9e:5a:e1:63:b0:31:39:35:d8:38:c7:f0:d7:de:ef:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 6 16:31:47 2025 GMT
Not After : Jan 5 16:36:47 2026 GMT
Subject: CN=9657F39811FFEAFBF29340DC0185DEFE359FECF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:3d:26:50:b8:08:01:ba:fe:97:dd:b8:db:
75:4f:be:ad:19:15:3e:84:9a:cb:b1:65:09:76:1a:
a8:f2:c6:5a:12:a3:6e:c8:32:8a:ac:86:40:e5:4f:
46:38:99:4e:ff:3f:9b:71:5d:61:10:5f:d6:88:92:
e3:7d:3b:40:2a:70:93:59:3c:ca:6a:f0:06:c3:93:
93:1c:38:e8:7a:39:c5:56:83:fd:30:27:fa:ae:08:
ea:ba:ee:56:d9:99:a4:76:c4:ba:76:0e:8c:ce:b2:
ab:34:7d:44:6e:aa:3a:2d:e5:24:4b:25:a5:13:f2:
dc:12:ee:9d:ae:8a:93:0b:6e:da:c2:f6:d4:28:bb:
86:64:f0:0c:84:08:99:a8:f5:81:7b:a1:c3:bd:4f:
4f:43:ef:f6:81:43:1a:0c:6a:35:0c:3e:17:51:13:
d5:3b:50:8d:a1:70:73:03:c0:17:8e:7c:c4:2f:f9:
e6:ba:3c:9a:04:71:55:c3:fe:70:f2:3b:6d:5c:8f:
6c:aa:42:37:d4:2b:dd:1c:98:4e:dd:8a:d0:15:d3:
9d:bf:7a:24:7f:cb:34:45:3e:59:b4:1e:d7:2a:c5:
3a:0c:0d:6a:97:14:2f:80:37:e1:f0:b3:25:72:cf:
af:2f:a1:2a:09:ce:1e:68:bd:5f:da:6e:86:af:08:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:57:F3:98:11:FF:EA:FB:F2:93:40:DC:01:85:DE:FE:35:9F:EC:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215523.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.8.0/21
Signature Algorithm: sha256WithRSAEncryption
64:a6:3e:05:38:34:6a:34:d5:0f:d6:6d:43:ff:d2:43:4e:96:
22:3e:1a:f6:62:50:9d:f6:76:e0:16:85:d5:ff:e6:f8:66:2b:
64:31:6b:68:55:40:51:7d:1e:66:e3:e5:18:c1:59:38:ea:8b:
d6:79:aa:85:04:7f:ef:c7:ac:f0:69:c2:2f:ec:ce:fb:f8:2a:
19:48:d2:7b:c5:4b:9e:75:45:79:12:d5:88:23:68:63:15:0d:
16:92:24:bf:95:b3:e6:1c:98:c1:86:01:1b:47:14:b6:9c:b9:
2b:40:b7:94:75:14:3a:41:19:c1:10:4a:22:a1:31:88:d6:56:
00:ab:07:70:f6:23:9c:61:ba:a4:da:a4:19:9d:b9:81:4c:b6:
4c:e3:eb:8f:df:c8:d5:a0:79:65:61:90:38:5d:e8:42:1b:67:
59:b1:bd:b5:bf:1e:11:7b:2c:f5:71:9a:d7:1c:5f:8b:3b:f4:
4e:22:a7:c4:bb:dc:1c:da:a9:bc:c7:75:06:8a:9f:7d:7b:6d:
43:23:61:f4:3e:16:20:3c:ba:5f:8c:36:75:78:7d:06:6c:ed:
50:85:c4:0c:c5:c0:ef:90:cb:4d:b3:d9:1d:00:8a:d6:ef:ba:
83:06:62:bd:1f:d5:c1:32:f8:9b:01:a0:c0:99:6d:d6:1f:89:
43:62:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:40 2025 by rpki-client