Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: KovX6ajoahQ8JDjVubWwkp8PpqjtkXypAKFRMTJVqus=
Subject key identifier: 12:61:1E:C8:4B:96:5F:82:84:D3:B8:4A:CC:A2:9B:2E:16:FF:72:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6F7BFD9684B0694E89F49535BB14B4BEA8CAE1CE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398465.roa
Signing time: Thu 13 Feb 2025 05:51:56 +0000
ROA not before: Thu 13 Feb 2025 05:46:56 +0000
ROA not after: Thu 12 Feb 2026 05:51:56 +0000
asID: 398465
IP address blocks: 82.21.101.0/24 maxlen: 24
82.21.144.0/24 maxlen: 24
82.29.26.0/24 maxlen: 24
82.29.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7b:fd:96:84:b0:69:4e:89:f4:95:35:bb:14:b4:be:a8:ca:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 13 05:46:56 2025 GMT
Not After : Feb 12 05:51:56 2026 GMT
Subject: CN=12611EC84B965F8284D3B84ACCA29B2E16FF72AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:8d:bc:ae:14:f9:52:fb:8a:cc:76:dc:91:
6f:eb:fd:1f:e0:57:f2:88:29:14:6e:27:76:de:1f:
38:d0:0b:5f:66:a7:11:58:18:4b:2a:6b:34:28:a1:
db:82:9b:a7:9e:1b:f1:35:98:46:f2:c4:e9:ab:e9:
1f:06:4a:8a:ce:8c:cc:d8:84:bc:da:3f:a4:c1:ec:
e6:e3:72:15:c0:04:06:c8:ac:f9:e5:7c:65:fe:86:
ca:7d:11:33:17:21:1d:fb:1d:66:32:a7:d7:3b:e4:
dc:6e:76:7d:fd:7f:52:79:82:f6:d7:f1:51:21:f9:
ba:a2:9d:ba:cd:57:f3:b3:c2:bc:27:3e:84:5c:6b:
f9:8f:68:84:d9:f8:99:a6:9e:3c:12:cc:32:dc:97:
43:46:83:11:49:49:da:f0:b5:c1:82:0c:13:5b:06:
63:cc:f1:5b:9a:88:f4:59:f8:47:f1:35:e0:16:f6:
db:45:77:12:79:5c:30:f4:e7:ad:2f:64:78:1b:dc:
a0:dc:2f:15:50:9f:9a:05:c3:96:6d:98:d7:36:93:
2e:05:81:99:67:0f:c6:2b:ff:27:45:b1:30:9c:e1:
9d:7e:23:f5:c9:65:84:19:cd:2c:5d:43:19:d7:75:
fb:00:be:e7:7c:8a:ae:6c:35:2e:87:ae:9e:dd:3a:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:1E:C8:4B:96:5F:82:84:D3:B8:4A:CC:A2:9B:2E:16:FF:72:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.101.0/24
82.21.144.0/24
82.29.26.0/24
82.29.75.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5f:a2:a8:5e:d0:7e:f7:ae:24:e4:68:42:0a:0b:81:67:0d:
0a:48:08:38:bc:f8:93:55:ad:77:64:9d:14:09:ee:07:26:33:
78:3d:ac:0f:6f:5f:99:e1:c6:06:c1:e7:bf:20:27:fe:c2:15:
44:81:aa:d0:47:f5:bb:bc:9f:e6:d2:2a:f5:81:ab:5c:a0:cc:
ec:c6:ca:56:ee:41:b8:7a:60:dd:5b:2e:79:23:a3:31:d4:4e:
9f:cf:5b:c3:01:ac:6a:2c:07:9e:1b:81:9d:ca:2d:4a:5e:4e:
a0:f0:aa:d0:e2:52:00:89:16:8b:50:03:07:0a:f8:d5:b9:d2:
76:1d:92:33:52:b3:99:e7:4a:fc:08:d8:84:50:99:66:d2:86:
0a:75:1a:54:6d:dc:54:d0:82:91:fb:bc:fe:86:b7:ff:cd:ab:
02:e7:35:bb:b5:81:ed:03:3e:1d:d4:eb:0a:08:6f:a0:ff:50:
0b:b9:ef:17:d5:00:9e:bf:00:f9:5d:3b:b7:9e:13:8a:14:10:
85:1e:a5:7c:15:bd:5e:cb:ae:02:8e:38:2c:cc:7c:f0:17:31:
90:22:b8:f3:ed:54:c9:49:a7:a2:22:7b:67:13:b8:29:71:ec:
8c:dc:38:0d:5d:af:45:25:bc:72:55:c7:90:d4:20:fc:ab:6a:
c9:1f:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:18 2025 by rpki-client