Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa
File: AS54004.roa (raw, json)
Hash identifier: jQc9XnrwiUW4SXSqRTelMeQdMGyTc2/cTpXWxYMwccc=
Subject key identifier: BD:2F:35:1E:3F:45:6F:19:40:62:44:50:32:3A:13:E7:CE:A2:FE:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 49CC62C9127C0F1635678B9B3ADD2C175B6BFDAE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa
Signing time: Wed 22 Jan 2025 19:05:05 +0000
ROA not before: Wed 22 Jan 2025 19:00:05 +0000
ROA not after: Wed 21 Jan 2026 19:05:05 +0000
asID: 54004
IP address blocks: 82.21.88.0/22 maxlen: 22
82.22.206.0/24 maxlen: 24
82.22.207.0/24 maxlen: 24
82.25.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cc:62:c9:12:7c:0f:16:35:67:8b:9b:3a:dd:2c:17:5b:6b:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 22 19:00:05 2025 GMT
Not After : Jan 21 19:05:05 2026 GMT
Subject: CN=BD2F351E3F456F1940624450323A13E7CEA2FEAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:70:08:9c:1b:3f:bc:fb:ac:db:aa:49:b9:
31:d4:df:b6:90:1f:db:30:81:b6:ec:9d:23:ba:e8:
6e:ff:9d:f9:c1:14:e2:06:24:78:5d:5f:d3:d0:21:
bd:9e:d5:6d:81:92:9b:9b:0b:dc:93:14:ff:d7:2b:
1c:5c:31:b1:cf:fe:61:e5:5d:96:e2:94:e1:ca:fd:
44:19:6b:95:03:25:ae:c5:05:25:07:5d:ec:03:e9:
57:b8:f2:0f:d8:2a:f5:9e:2b:f8:bc:39:b9:70:3b:
65:68:c8:fc:8a:bc:bc:3f:ff:57:d6:b2:39:75:f5:
c0:10:8c:1c:7b:cd:79:f3:b6:d9:51:5d:5f:44:1b:
1d:fd:6a:e9:af:ae:b6:66:5d:60:d1:6d:b8:5e:f0:
c4:ba:c6:f3:bc:b4:03:ca:4b:6e:5a:04:33:4e:42:
a0:9a:52:b3:57:ea:72:2e:01:d3:eb:c9:82:8b:54:
08:14:89:37:e6:82:77:b6:78:4f:47:9f:aa:8c:18:
df:96:4b:eb:93:d2:f5:a4:ea:d6:b8:9f:9d:83:e5:
9d:53:e2:e3:db:07:2f:19:f9:02:dd:63:57:9e:5e:
a8:4c:e0:81:63:34:6a:d1:1c:ca:23:eb:da:8f:4f:
83:e9:bb:a0:0b:0a:14:d5:74:85:41:aa:0c:89:e7:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:35:1E:3F:45:6F:19:40:62:44:50:32:3A:13:E7:CE:A2:FE:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.88.0/22
82.22.206.0/23
82.25.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:9b:ef:b5:64:44:72:4e:90:08:1f:7d:9b:78:18:01:88:44:
cc:3e:d1:97:a8:ed:8b:ba:1a:90:a1:07:f1:c0:fe:13:bf:e9:
ed:f7:c6:85:99:58:3a:e8:6c:46:b4:1f:80:62:03:81:6d:f7:
f8:ff:28:09:2a:ed:df:34:6d:6f:1f:74:f0:99:bc:65:a8:e1:
e6:15:41:6b:d3:2a:23:93:87:33:f7:0b:00:e2:e3:5d:5a:cd:
1b:5b:6b:28:07:d6:e6:c4:0f:9a:b2:80:81:2a:99:61:a3:9a:
17:80:fe:17:70:64:4a:29:a7:9c:65:7b:60:ea:72:c0:47:fa:
d8:17:dc:2a:78:8b:77:d9:46:af:29:b1:a0:dd:a3:f6:15:f8:
f8:1b:ba:11:3c:21:eb:19:c6:b7:bf:e2:21:9d:73:d7:6e:92:
fb:ec:fa:30:b2:cf:16:d1:92:13:16:1e:a1:83:ae:57:fd:d6:
c7:71:7f:51:07:8c:d9:0f:49:2b:c5:b4:cb:7a:e3:f4:99:db:
95:6b:8c:23:e3:e8:9c:30:ad:3e:af:eb:d9:42:89:f0:ea:94:
cb:c2:4f:54:64:72:93:10:78:33:cb:79:74:6f:96:31:d7:a7:
4c:c6:33:4a:2a:3b:f7:10:d6:52:f2:ab:dc:55:3b:86:3f:3c:
fe:a3:44:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:06 2025 by rpki-client