Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
File: AS62390.roa (raw, json)
Hash identifier: fNXZfroCOCiQR9u+TWUvhqgQG7oPvM/nwZ25vBPAu0c=
Subject key identifier: C5:67:6A:E4:4D:A1:BD:A5:C0:1C:5C:A7:95:91:62:6C:FA:0C:78:B4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 026E29B04F9AF8B9F1B64E33D340E7136D6307D1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
Signing time: Fri 10 Jan 2025 08:12:04 +0000
ROA not before: Fri 10 Jan 2025 08:07:04 +0000
ROA not after: Fri 09 Jan 2026 08:12:04 +0000
asID: 62390
IP address blocks: 82.29.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6e:29:b0:4f:9a:f8:b9:f1:b6:4e:33:d3:40:e7:13:6d:63:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 10 08:07:04 2025 GMT
Not After : Jan 9 08:12:04 2026 GMT
Subject: CN=C5676AE44DA1BDA5C01C5CA79591626CFA0C78B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:6d:dd:07:a7:a7:08:46:54:95:35:1e:eb:
85:a9:5d:45:51:dd:28:00:63:65:4f:a7:48:cc:88:
cd:04:75:fb:7b:73:b0:39:15:5d:8f:6e:67:a4:d9:
10:04:c3:91:60:5a:39:d0:97:bd:b7:5e:82:a6:56:
3d:80:21:00:4c:ec:58:9f:63:46:82:56:50:82:5e:
18:78:44:b2:7d:0b:82:39:cb:80:51:0e:a3:8b:fd:
6d:75:44:a9:41:63:f3:69:f1:ba:28:13:80:5d:f8:
36:d7:1e:99:30:f2:16:92:91:7b:7a:00:38:33:96:
c7:39:ee:4a:a7:7a:cd:fa:b3:68:bd:15:6b:89:bd:
70:9f:b7:25:6e:34:c8:8d:a8:c7:d2:88:a2:b1:82:
11:26:b9:aa:ac:14:ba:3b:4f:d6:0b:14:34:29:cf:
a9:5c:bb:cd:bc:e6:49:6f:27:e1:2a:2c:00:95:9a:
5c:c7:3f:1f:4c:00:3e:99:77:fa:6b:86:67:7c:b2:
75:bf:f1:c0:a0:c0:fe:96:08:2f:7e:6c:b1:7b:1e:
0b:9a:a5:9b:35:4a:b0:9a:da:bb:41:7e:39:6d:df:
49:4a:63:c1:d8:2d:49:06:75:97:db:0f:63:a1:72:
6b:a3:ef:d4:0e:2d:e3:ce:64:08:bb:01:a9:3c:71:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:67:6A:E4:4D:A1:BD:A5:C0:1C:5C:A7:95:91:62:6C:FA:0C:78:B4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.112.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4c:68:a1:c2:01:c8:87:66:ab:d9:c1:2d:d5:7a:8a:0a:ba:
ec:46:18:fe:ce:32:ab:2e:62:33:2e:e1:ef:55:88:0f:bb:82:
1f:1f:3c:73:44:b2:b1:e7:69:51:c3:2e:41:95:14:d0:e7:62:
7e:6c:39:87:c0:88:b7:66:fd:fd:b0:83:59:cb:49:5c:04:bb:
b7:96:2b:37:22:a1:81:fe:21:11:82:88:21:39:c5:6e:8d:b7:
8b:cd:99:71:97:6f:c9:18:6c:6f:b4:7d:ca:40:11:f5:2c:3d:
0c:21:e7:00:b4:91:5c:e0:27:17:02:60:b2:4e:aa:6a:44:53:
de:5c:30:98:43:29:3e:f6:e6:43:09:42:af:3b:87:c1:1b:15:
48:bf:e7:c1:e4:c8:91:39:5d:27:44:d7:e0:35:94:c0:53:64:
58:88:a3:96:a1:77:0d:4b:15:a2:26:ef:9d:1d:28:71:c2:5b:
1b:52:07:5a:2d:68:37:a9:ee:f7:58:d3:c4:d6:9f:49:6b:4b:
d8:b9:54:7c:41:ce:dc:9d:60:38:cc:78:94:c1:b0:55:8b:46:
56:e7:34:b2:23:e4:bc:50:b2:38:2b:1e:a6:2b:2a:17:d1:87:
e3:21:f1:28:58:fe:c6:bc:e6:bc:f0:92:a4:16:e1:32:8b:81:
82:d3:59:ee
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUAm4psE+a+Lnxtk4z00DnE21jB9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMTAwODA3MDRaFw0yNjAxMDkwODEyMDRaMDMxMTAvBgNV
BAMTKEM1Njc2QUU0NERBMUJEQTVDMDFDNUNBNzk1OTE2MjZDRkEwQzc4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNG3dB6enCEZUlTUe64WpXUVR
3SgAY2VPp0jMiM0Edft7c7A5FV2Pbmek2RAEw5FgWjnQl723XoKmVj2AIQBM7Fif
Y0aCVlCCXhh4RLJ9C4I5y4BRDqOL/W11RKlBY/Np8booE4Bd+DbXHpkw8haSkXt6
ADgzlsc57kqnes36s2i9FWuJvXCftyVuNMiNqMfSiKKxghEmuaqsFLo7T9YLFDQp
z6lcu8285klvJ+EqLACVmlzHPx9MAD6Zd/prhmd8snW/8cCgwP6WCC9+bLF7Hgua
pZs1SrCa2rtBfjlt30lKY8HYLUkGdZfbD2Ohcmuj79QOLePOZAi7Aak8cfNLAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUxWdq5E2hvaXAHFynlZFibPoMeLQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjIzOTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSHXAw
DQYJKoZIhvcNAQELBQADggEBACFMaKHCAciHZqvZwS3VeooKuuxGGP7OMqsuYjMu
4e9ViA+7gh8fPHNEsrHnaVHDLkGVFNDnYn5sOYfAiLdm/f2wg1nLSVwEu7eWKzci
oYH+IRGCiCE5xW6Nt4vNmXGXb8kYbG+0fcpAEfUsPQwh5wC0kVzgJxcCYLJOqmpE
U95cMJhDKT725kMJQq87h8EbFUi/58HkyJE5XSdE1+A1lMBTZFiIo5ahdw1LFaIm
750dKHHCWxtSB1otaDep7vdY08TWn0lrS9i5VHxBztydYDjMeJTBsFWLRlbnNLIj
5LxQsjgrHqYrKhfRh+Mh8ShY/sa85rzwkqQW4TKLgYLTWe4=
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:59 2025 by rpki-client