Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
File: AS8368.roa (raw, json)
Hash identifier: 2b3yr0LRqROHnzoXZUUnVlMNyecZC3FVWxdfxylr8Fg=
Subject key identifier: 1F:EA:2C:52:9E:EA:D2:E8:04:B9:DE:52:12:92:C5:2D:7C:03:54:D8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31F51DC7765903E5AE02B127B24D7F32D0EF366C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
Signing time: Tue 03 Jun 2025 06:56:46 +0000
ROA not before: Tue 03 Jun 2025 06:51:46 +0000
ROA not after: Tue 02 Jun 2026 06:56:46 +0000
asID: 8368
IP address blocks: 82.21.234.0/24 maxlen: 24
82.22.233.0/24 maxlen: 24
82.22.244.0/24 maxlen: 24
82.23.228.0/24 maxlen: 24
82.23.234.0/24 maxlen: 24
82.24.219.0/24 maxlen: 24
82.24.233.0/24 maxlen: 24
82.24.244.0/24 maxlen: 24
82.25.244.0/24 maxlen: 24
82.26.244.0/24 maxlen: 24
82.27.244.0/24 maxlen: 24
82.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f5:1d:c7:76:59:03:e5:ae:02:b1:27:b2:4d:7f:32:d0:ef:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 3 06:51:46 2025 GMT
Not After : Jun 2 06:56:46 2026 GMT
Subject: CN=1FEA2C529EEAD2E804B9DE521292C52D7C0354D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:b1:4d:a3:2d:d1:3f:23:f1:dd:4a:3b:ab:
53:89:a4:9c:3d:22:7f:b9:d5:3c:d7:31:04:31:8f:
7e:6d:95:93:97:59:5c:b1:0c:3c:cc:e5:03:15:5e:
62:2f:e6:2a:71:6d:8a:e7:98:ac:2d:3e:00:e9:e1:
4c:9f:4f:de:1a:9c:e6:30:a3:b4:9f:02:a8:a9:5d:
34:d6:48:3c:e8:7e:10:a5:38:45:c9:4e:8b:e4:2d:
bb:da:b1:94:a3:df:4c:59:81:f7:73:e0:52:6c:bf:
7b:a7:c6:91:db:35:e7:76:4b:51:e8:8e:b7:69:a4:
5a:39:41:27:bb:bf:fb:73:84:ff:14:89:43:38:8b:
f9:b7:aa:42:aa:af:69:b4:b2:9f:7f:81:5a:e1:2a:
90:05:d7:f2:42:5c:6d:8b:4b:32:6b:94:da:97:6e:
20:12:d5:62:7f:eb:ef:f8:18:43:30:48:ca:8c:a6:
bd:28:8a:12:55:8c:5f:be:cf:c2:ee:75:d4:61:91:
a6:a2:cf:ce:ec:f0:43:e1:2d:84:83:2e:aa:61:93:
94:26:1b:35:fa:7f:11:48:be:f5:13:eb:df:27:b0:
18:09:62:cf:1a:6d:48:07:67:91:df:f6:e3:7a:2c:
f6:25:e6:14:02:9d:35:02:a7:94:ff:02:87:34:3b:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:2C:52:9E:EA:D2:E8:04:B9:DE:52:12:92:C5:2D:7C:03:54:D8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8368.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.234.0/24
82.22.233.0/24
82.22.244.0/24
82.23.228.0/24
82.23.234.0/24
82.24.219.0/24
82.24.233.0/24
82.24.244.0/24
82.25.244.0/24
82.26.244.0/24
82.27.244.0/24
82.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
35:82:52:dc:ba:ff:c3:a9:6a:3f:42:78:9b:7c:fc:71:a2:05:
c5:fa:ef:ad:34:c4:7d:5e:86:44:67:71:4f:94:21:2e:ba:30:
1e:05:67:2c:7d:ce:e7:94:d3:69:0b:ae:19:04:ff:d8:c5:c1:
eb:db:f8:fe:bc:a5:56:90:86:3a:0b:a9:37:3b:a7:5a:82:d1:
60:01:7f:9b:e8:aa:61:13:d3:fb:25:92:47:a1:06:0d:0c:a4:
95:de:4e:11:3f:f4:e4:fa:e8:6f:29:79:e8:f8:68:cd:09:09:
b5:ed:ef:57:19:6e:c6:c6:aa:0a:38:c7:5a:00:e2:6e:18:04:
0b:75:76:49:6f:96:fd:52:2d:18:78:03:86:65:78:5c:0a:8f:
c4:17:2f:45:58:96:98:a2:d3:ba:d3:c7:c0:a2:3b:f0:11:06:
a9:6e:5d:ff:81:b2:99:61:f8:e7:54:1d:e5:68:c6:8a:40:4e:
85:70:62:fa:50:8b:24:46:73:17:24:e4:df:fe:92:9c:7a:01:
e3:0e:bc:f7:96:0a:b7:5d:a4:58:37:25:5b:26:9b:2b:85:e1:
d7:f1:3b:12:e9:4b:b2:0a:d5:cf:1c:6e:ff:97:08:84:97:14:
cc:29:39:3e:c2:57:fe:3d:24:11:ab:a8:aa:0a:05:b0:6b:50:
aa:61:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:18 2025 by rpki-client