Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: p8SISNgRCDe6REW88MllvL2VzD8CbsQnMKZ/r097BNI=
Subject key identifier: 0A:5B:0F:25:AC:E3:B9:73:D8:19:B1:3F:E6:A7:48:AA:7F:22:69:16
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5C6B13C0C438889F41F152825ECD594029263E9B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265919.roa
Signing time: Tue 03 Jun 2025 19:59:55 +0000
ROA not before: Tue 03 Jun 2025 19:54:55 +0000
ROA not after: Tue 02 Jun 2026 19:59:55 +0000
asID: 265919
IP address blocks: 82.24.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6b:13:c0:c4:38:88:9f:41:f1:52:82:5e:cd:59:40:29:26:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 3 19:54:55 2025 GMT
Not After : Jun 2 19:59:55 2026 GMT
Subject: CN=0A5B0F25ACE3B973D819B13FE6A748AA7F226916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:5c:0a:0d:da:aa:d7:34:c6:48:71:d9:66:
0a:5e:0c:9e:a0:ed:d6:c3:1f:90:89:64:11:78:9a:
e4:20:b9:b5:d9:e9:0e:d8:35:48:81:b1:1b:8f:84:
4b:12:8e:55:36:db:f4:10:5b:6f:4b:93:7c:b7:ad:
bf:4f:67:2f:ea:03:5a:ae:8e:85:c1:66:64:76:cb:
6e:64:69:56:bd:c6:1a:f2:17:c1:ed:f1:61:ab:04:
94:2f:ac:d6:82:cb:4e:cd:83:09:f3:db:89:d8:2f:
03:6a:80:9c:a9:8f:29:3a:a3:06:5b:5c:d1:58:28:
bf:dd:3e:c9:68:04:e8:a1:5e:41:64:03:da:34:33:
c4:47:9f:56:1a:55:35:ab:23:1b:9c:d0:00:d2:43:
e4:69:2a:3b:db:29:1c:cb:95:a4:e2:b9:27:c8:36:
bc:2a:1b:d5:3e:ae:a8:78:90:65:c3:cf:c0:64:ed:
71:a4:a9:47:16:1b:5b:ef:56:82:a3:eb:c6:ef:17:
8c:60:3d:12:b1:c0:5c:2c:13:5c:79:15:0a:88:1b:
fa:ca:b2:2f:4b:ce:e3:8e:25:ad:da:7d:88:04:e3:
57:f6:44:7a:51:61:f6:7b:69:af:23:ab:6e:c2:b4:
fc:de:df:f7:36:23:98:c8:36:0b:a7:f0:ab:23:53:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:0F:25:AC:E3:B9:73:D8:19:B1:3F:E6:A7:48:AA:7F:22:69:16
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2f:91:67:3f:21:f6:5d:d4:a6:4b:04:95:73:30:52:73:94:
7d:ef:09:43:ef:6a:1c:5d:50:c1:52:a8:c2:24:00:44:c4:cb:
c0:6e:60:02:69:8f:b2:49:c5:18:a4:23:3a:71:32:b8:40:42:
61:e5:f7:4d:1c:8e:80:fa:74:9c:2f:4c:73:58:5a:a8:57:d7:
e6:9b:65:cd:6c:ad:82:b3:52:7b:12:fb:d6:d1:da:d4:a0:b0:
cc:77:1a:42:d7:f1:96:57:ab:10:a8:af:10:0e:5e:75:d2:76:
e9:48:be:e7:86:22:4a:8f:06:cf:b9:a9:b8:57:c1:e9:c4:67:
a5:b6:62:9a:80:aa:54:12:f8:ff:50:01:2f:d7:51:fe:59:e3:
fc:73:98:fe:a3:a9:c4:03:2b:50:e9:2c:05:ae:bd:5b:65:a7:
4c:c9:87:7b:49:99:e1:12:5f:c8:a9:ef:3c:86:86:5f:2e:46:
ca:b0:d7:10:e1:b6:0c:81:83:91:f0:a6:f2:16:88:43:82:87:
de:f3:e8:3f:fa:36:e8:d6:59:3b:39:02:07:92:1c:e4:83:d1:
9a:8c:b7:d0:01:58:0e:d0:14:e3:c0:ef:6e:a1:10:5d:db:cd:
c6:c2:f3:80:23:33:55:5e:8f:4f:14:9b:c9:4d:13:ef:a9:07:
78:40:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:56:21 2025 by rpki-client