Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: tQi74r2OLQdv2psqvsfvk0YAb6HZ9/dV5kZoWgKFDCE=
Subject key identifier: 9C:08:F1:AD:34:D2:FE:A3:46:5B:95:6D:81:DE:D9:F0:47:BB:EE:29
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2D538023C7DC0DED5717EE824F54ECA7E4621DD0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
Signing time: Tue 20 May 2025 00:00:48 +0000
ROA not before: Mon 19 May 2025 23:55:48 +0000
ROA not after: Tue 19 May 2026 00:00:48 +0000
asID: 4637
IP address blocks: 82.21.101.0/24 maxlen: 24
82.21.134.0/23 maxlen: 24
82.21.144.0/24 maxlen: 24
82.23.140.0/23 maxlen: 24
82.23.162.0/23 maxlen: 24
82.29.26.0/24 maxlen: 24
82.29.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:53:80:23:c7:dc:0d:ed:57:17:ee:82:4f:54:ec:a7:e4:62:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 19 23:55:48 2025 GMT
Not After : May 19 00:00:48 2026 GMT
Subject: CN=9C08F1AD34D2FEA3465B956D81DED9F047BBEE29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:50:42:f3:e3:39:d8:6a:8b:02:04:f5:2d:
ec:a1:d2:14:c5:f6:3a:36:85:72:a4:35:8e:7c:e1:
16:fa:d1:13:76:4d:87:2b:71:e3:68:1e:0e:3f:12:
80:aa:37:80:81:6d:06:5e:9e:b3:17:26:c6:91:d3:
25:06:10:c1:71:c3:74:6b:32:a0:6b:29:cb:b1:a6:
19:4f:73:4d:a0:f9:1d:cb:4f:dd:f6:dd:35:00:f5:
24:81:fb:1c:80:35:51:97:fe:e8:ac:12:73:f5:e7:
65:52:ce:5d:b3:6a:1d:fb:8c:70:b1:90:70:26:5b:
05:67:70:29:7e:4a:16:bc:d0:66:7d:5b:b0:c4:30:
fe:05:b0:51:02:72:27:db:01:08:7e:e0:cd:24:10:
38:5f:17:01:71:85:57:d5:a3:4f:9e:66:fd:0b:88:
3d:46:c0:de:2d:36:1b:30:6b:11:b0:dc:65:1a:13:
aa:19:e1:bd:80:62:56:bf:e2:04:cc:7c:93:7f:d8:
6b:b6:9a:55:6e:be:c4:56:79:59:03:d2:bb:5e:5b:
3b:bf:b3:8c:54:dd:f2:39:4a:92:33:cf:75:e0:4b:
c6:14:05:05:46:7a:16:a0:d1:a2:c1:9a:23:4a:6f:
92:47:50:78:5d:af:a0:26:1e:3a:85:4f:eb:82:72:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:F1:AD:34:D2:FE:A3:46:5B:95:6D:81:DE:D9:F0:47:BB:EE:29
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.101.0/24
82.21.134.0/23
82.21.144.0/24
82.23.140.0/23
82.23.162.0/23
82.29.26.0/24
82.29.75.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:e6:c7:06:92:87:f3:5b:4d:9c:09:bb:98:91:08:0a:ef:
03:d0:08:c8:95:bd:ed:1f:2f:e4:43:9a:93:4b:65:8c:7f:b1:
f8:04:90:57:84:5a:14:eb:48:3e:0d:31:fa:21:8b:63:8c:8f:
01:cd:2d:66:71:7f:96:ae:57:be:a3:34:88:43:d5:b2:62:6e:
fc:4f:28:d2:a2:88:1d:91:16:39:c8:8d:74:8b:e7:36:64:5e:
c2:63:68:3c:99:f0:da:7b:d4:82:71:56:e5:a1:02:a6:e2:94:
31:7c:a7:fd:61:97:3c:10:74:80:a1:d8:af:da:d3:63:2c:b9:
cc:65:8a:fd:ce:8a:d5:4e:4d:d3:cc:74:c7:e2:5e:c1:93:2f:
8b:fc:ef:b4:40:99:61:d0:61:58:9b:8c:b3:b7:8a:0d:4f:c4:
0c:4b:dd:7e:57:c1:9e:c5:cc:43:d1:b3:fe:40:e6:9c:a3:0e:
5f:c4:60:6f:8f:91:c9:e0:eb:96:c3:03:d9:89:af:9e:dd:e1:
71:67:16:a0:7b:1f:c4:00:63:3e:6b:31:4b:a3:17:fd:3a:58:
12:0a:5b:90:0a:08:8c:e8:00:b4:a1:ca:bc:ef:22:d0:13:a5:
01:6e:36:94:f3:9e:84:ba:5c:75:1a:a6:95:97:a1:50:7b:99:
74:f4:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:18 2025 by rpki-client