Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: gw+akLHDAtL3xlFDW6ppeSF+R3YqtQ3JmZt63gnJ0aE=
Subject key identifier: 7C:B9:1C:F2:00:39:C4:7D:7A:74:75:CC:6B:90:B8:56:66:68:4F:BC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 30687DE6CCF2B2C134BFAD2FC2EF826CBF009123
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa
Signing time: Thu 23 Jan 2025 17:55:12 +0000
ROA not before: Thu 23 Jan 2025 17:50:12 +0000
ROA not after: Thu 22 Jan 2026 17:55:12 +0000
asID: 397373
IP address blocks: 82.21.190.0/24 maxlen: 24
82.23.192.0/24 maxlen: 24
82.25.180.0/24 maxlen: 24
82.27.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:68:7d:e6:cc:f2:b2:c1:34:bf:ad:2f:c2:ef:82:6c:bf:00:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 23 17:50:12 2025 GMT
Not After : Jan 22 17:55:12 2026 GMT
Subject: CN=7CB91CF20039C47D7A7475CC6B90B85666684FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:06:5d:c3:60:e6:36:1b:14:62:2e:8f:0c:
1f:58:17:85:ac:f2:a0:32:dd:d8:8e:18:96:4f:be:
6b:a3:96:1b:6f:5b:fb:e7:90:f9:8f:61:2e:94:4d:
4a:f5:9f:89:13:79:84:d8:47:39:4b:12:51:b9:b1:
79:9a:71:58:0b:2a:7d:69:89:60:9c:ab:93:dd:ed:
ba:9b:f4:52:7d:c5:b3:8a:a0:a8:c5:19:10:44:42:
dd:31:ae:55:88:76:02:83:01:2e:b8:bf:5d:d2:71:
70:e0:aa:44:82:21:c0:cc:8f:78:6f:e9:a5:30:3d:
0c:7f:12:bc:5c:96:5a:29:3a:44:ea:d6:61:fb:17:
a5:d1:b0:76:92:78:07:f8:8f:bf:56:ff:9e:08:b6:
e1:f9:66:ba:22:eb:13:cd:4c:5b:b3:44:e0:07:4b:
1b:cd:b6:ab:8b:e3:45:b7:98:1a:09:e7:d2:0d:a9:
7c:da:16:85:f2:95:52:18:81:e9:25:c7:a6:a2:20:
f2:22:ec:22:85:d5:df:b5:f0:56:b1:53:79:20:4e:
55:26:c2:8d:6d:c9:be:91:01:e0:a8:9f:93:10:39:
eb:9c:a6:18:12:b3:5f:11:4a:46:b1:65:62:eb:22:
2c:8d:7b:5f:d8:5d:a5:b3:6e:55:9f:dd:f0:9f:83:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:1C:F2:00:39:C4:7D:7A:74:75:CC:6B:90:B8:56:66:68:4F:BC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.190.0/24
82.23.192.0/24
82.25.180.0/24
82.27.201.0/24
Signature Algorithm: sha256WithRSAEncryption
49:76:c1:b2:3b:73:1b:0d:b2:f8:a0:03:d5:2b:47:ed:f3:04:
43:af:b1:f4:f6:73:08:ef:bd:51:1f:03:ed:81:7b:99:95:66:
25:60:83:42:5e:af:a5:18:48:9d:e2:ad:0d:2a:70:ce:ef:be:
e8:5f:78:1e:08:f1:19:4f:b4:3a:2e:f8:02:28:2f:0b:4c:79:
ce:65:72:60:5c:ea:c8:57:12:e9:e3:f7:c7:1a:35:92:8c:19:
10:56:c9:84:8d:9c:bd:9a:8e:39:c3:f2:88:96:4b:d6:20:35:
0c:67:02:19:c5:06:80:e5:91:56:f5:7a:b9:2a:47:6a:f5:ac:
32:6f:80:b9:68:e8:5e:3d:57:23:33:80:13:6e:40:ad:ab:35:
72:ed:a5:be:2b:69:9a:51:44:1a:14:86:0d:b6:0a:d1:b8:7b:
58:ba:0c:4e:8d:95:d8:13:2f:29:de:dc:08:61:4e:18:84:33:
52:5f:d8:29:8e:0b:c1:a1:c7:51:d7:a9:30:df:89:54:9e:ca:
39:bc:a6:b7:3c:44:38:18:2f:f6:1a:da:99:ae:91:cc:7b:4c:
2b:10:e9:61:b5:ba:3c:c9:fc:25:5e:02:39:d7:e8:55:a4:8b:
9b:cb:3c:fb:42:c5:8b:54:1b:ff:5b:51:86:ef:dd:04:34:31:
93:92:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:47:07 2025 by rpki-client