Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4515.roa
File: AS4515.roa (raw, json)
Hash identifier: vmf/IiACN+/VLmDTN2Uk8QhtrnvJkqe1JYJBIVhAxH8=
Subject key identifier: DA:6F:61:B0:A9:90:B6:6A:A1:91:20:89:DA:6F:79:22:CF:75:DB:1B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 699C399C90D76B63A59C4BF6B8224DD079DB4774
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4515.roa
Signing time: Sun 26 Jan 2025 14:39:26 +0000
ROA not before: Sun 26 Jan 2025 14:34:26 +0000
ROA not after: Sun 25 Jan 2026 14:39:26 +0000
asID: 4515
IP address blocks: 82.21.187.0/24 maxlen: 24
82.22.200.0/24 maxlen: 24
82.23.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9c:39:9c:90:d7:6b:63:a5:9c:4b:f6:b8:22:4d:d0:79:db:47:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 26 14:34:26 2025 GMT
Not After : Jan 25 14:39:26 2026 GMT
Subject: CN=DA6F61B0A990B66AA1912089DA6F7922CF75DB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:a1:7d:53:07:1a:c2:dd:1f:ef:fd:7a:50:
9c:00:e9:9e:8d:e3:4c:b9:d6:a5:ac:88:55:4d:20:
1d:a7:29:20:80:ee:b3:10:98:88:9d:a1:2b:3f:44:
c3:69:4d:12:85:d0:c1:04:cb:1c:af:d1:d9:4f:3e:
1e:24:f0:44:8d:99:35:38:53:38:c6:1d:97:90:ad:
3c:72:e1:ad:fb:b9:9d:7d:1b:63:c5:15:0d:f0:f5:
97:e8:17:6d:cb:f3:cf:8b:54:e5:5c:69:ef:f7:d0:
21:aa:0a:ec:bd:f5:93:f5:bd:33:89:f7:66:96:85:
21:a2:75:e5:ba:17:d4:67:fc:4a:0d:aa:bb:29:d5:
87:ec:fa:7d:97:de:ef:f3:58:8c:b5:cd:6a:43:c0:
c7:98:0e:9d:b3:61:f9:95:4f:bc:71:85:81:c5:79:
e3:5b:25:c2:aa:6a:76:82:48:e1:be:80:78:e6:f6:
c2:a5:8e:56:e4:16:e9:a2:36:20:38:98:b5:7c:28:
53:77:59:a1:8d:ff:45:a4:59:45:84:c9:08:9c:04:
c1:cd:19:93:dc:c0:68:68:0f:18:4b:3b:2a:f8:20:
9d:7a:49:b1:e9:87:5a:92:09:f7:e4:6c:f5:94:4c:
3e:ee:7e:d5:f9:25:93:4f:51:e0:32:4e:f2:09:0f:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:61:B0:A9:90:B6:6A:A1:91:20:89:DA:6F:79:22:CF:75:DB:1B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.187.0/24
82.22.200.0/24
82.23.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6a:3c:b7:93:06:c6:16:af:ab:85:63:3e:6d:ff:eb:b1:54:
87:d9:ce:83:09:82:ce:27:85:67:ac:49:75:60:41:4e:7c:ac:
2f:59:86:6e:52:68:5a:aa:26:97:0b:14:bb:ab:42:e4:e7:9c:
3a:97:b5:24:13:7f:7a:46:14:72:8a:1e:fd:74:55:b1:36:68:
80:08:28:5f:bf:7c:73:b3:7a:b6:1c:90:2e:e8:a1:e8:99:93:
ab:0c:13:af:f1:7e:12:89:51:d8:35:fe:c9:4a:c6:20:80:69:
88:ac:05:6e:7c:4f:6a:9b:74:b9:8c:ec:fc:66:ff:48:a5:9b:
40:d1:1e:a2:a7:ba:fa:8d:b1:9d:04:02:38:84:41:10:55:77:
42:12:7e:a6:2c:c7:16:aa:df:ba:46:37:e1:2f:a9:71:41:1e:
b8:95:1d:b9:15:17:29:33:d4:57:55:17:b1:b2:b3:f6:ed:9b:
b6:bf:62:55:ed:a0:e7:5c:2f:b2:82:d2:7d:6e:c2:d1:16:99:
ea:1d:70:15:d4:c4:1c:08:14:23:1c:b8:25:d6:2f:b8:e9:08:
d8:08:02:dc:d1:c8:79:10:c7:37:37:ca:3e:eb:f3:b6:06:ab:
0e:f9:35:60:e3:fd:64:22:63:bc:62:dd:bb:d5:fa:88:a4:38:
38:2f:b5:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:17 2025 by rpki-client