Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: QoAs3xTKrxDSlND2J7CIVbnj9/LISKvjbmvp+fRjaRU=
Subject key identifier: 3D:20:97:E9:4C:2F:B9:92:3A:B3:2B:C6:8F:6D:FF:1D:DD:BC:24:B6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 54F6FEB0C83BCD8E231F7CA9BC7DCAA1C4D1D0D5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8881.roa
Signing time: Fri 04 Apr 2025 17:41:23 +0000
ROA not before: Fri 04 Apr 2025 17:36:23 +0000
ROA not after: Fri 03 Apr 2026 17:41:23 +0000
asID: 8881
IP address blocks: 82.21.129.0/24 maxlen: 24
82.22.177.0/24 maxlen: 24
82.22.178.0/24 maxlen: 24
82.22.180.0/24 maxlen: 24
82.23.65.0/24 maxlen: 24
82.23.66.0/24 maxlen: 24
82.23.67.0/24 maxlen: 24
82.23.68.0/24 maxlen: 24
82.23.70.0/24 maxlen: 24
82.23.71.0/24 maxlen: 24
82.23.72.0/24 maxlen: 24
82.23.73.0/24 maxlen: 24
82.23.75.0/24 maxlen: 24
82.23.76.0/24 maxlen: 24
82.23.77.0/24 maxlen: 24
82.23.78.0/24 maxlen: 24
82.23.80.0/24 maxlen: 24
82.23.81.0/24 maxlen: 24
82.23.82.0/24 maxlen: 24
82.23.83.0/24 maxlen: 24
82.23.84.0/24 maxlen: 24
82.23.85.0/24 maxlen: 24
82.23.86.0/24 maxlen: 24
82.23.87.0/24 maxlen: 24
82.23.88.0/24 maxlen: 24
82.23.89.0/24 maxlen: 24
82.23.90.0/24 maxlen: 24
82.23.91.0/24 maxlen: 24
82.24.22.0/24 maxlen: 24
82.24.61.0/24 maxlen: 24
82.24.207.0/24 maxlen: 24
82.26.205.0/24 maxlen: 24
82.26.206.0/24 maxlen: 24
82.29.127.0/24 maxlen: 24
82.29.138.0/24 maxlen: 24
82.29.140.0/24 maxlen: 24
82.29.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f6:fe:b0:c8:3b:cd:8e:23:1f:7c:a9:bc:7d:ca:a1:c4:d1:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 4 17:36:23 2025 GMT
Not After : Apr 3 17:41:23 2026 GMT
Subject: CN=3D2097E94C2FB9923AB32BC68F6DFF1DDDBC24B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:32:52:1d:5d:d9:f3:9c:71:d4:21:0f:88:
ff:7b:9f:10:85:cb:46:b9:5f:10:82:2a:fb:9e:9f:
ab:89:28:22:11:51:0c:08:9f:1f:40:fb:13:dd:1d:
76:16:2b:48:d7:ef:69:bd:e3:ee:0c:45:2b:33:2f:
c7:30:e4:fe:dc:20:03:59:2d:1a:fe:6c:9e:18:3b:
f8:86:68:25:e9:2c:38:55:f1:eb:d0:fb:24:cb:cb:
6a:31:9b:94:41:cd:a5:41:be:15:27:63:1f:f0:66:
d3:0b:97:f7:83:cc:e6:59:f6:ce:ee:35:ae:5c:7a:
cc:54:58:c4:34:f5:76:1e:0f:87:6c:f1:f3:25:ae:
2c:e9:5e:51:92:d3:f2:e4:39:86:0c:e6:0c:b4:aa:
44:4e:8f:fc:91:76:a6:02:44:86:61:96:c3:c0:7a:
24:20:c1:c1:d2:ad:c3:45:1e:77:4d:7d:92:a9:d8:
ab:a6:71:7e:c2:03:81:2c:f1:b0:2a:7b:87:f8:76:
38:c1:ae:d7:dd:66:d9:90:67:b8:7f:dc:06:25:3f:
e0:68:20:76:23:ef:57:3c:56:49:43:e3:ee:fa:c1:
8a:dc:0a:c3:cd:0e:0f:7f:40:d9:0f:cd:f3:17:f1:
de:99:81:9f:0b:82:e9:d3:1e:e4:2b:f1:7f:c4:71:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:97:E9:4C:2F:B9:92:3A:B3:2B:C6:8F:6D:FF:1D:DD:BC:24:B6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.129.0/24
82.22.177.0-82.22.178.255
82.22.180.0/24
82.23.65.0-82.23.68.255
82.23.70.0-82.23.73.255
82.23.75.0-82.23.78.255
82.23.80.0-82.23.91.255
82.24.22.0/24
82.24.61.0/24
82.24.207.0/24
82.26.205.0-82.26.206.255
82.29.127.0/24
82.29.138.0/24
82.29.140.0/24
82.29.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e8:99:28:02:94:f2:61:60:cf:fa:e4:23:44:10:e4:76:d0:
07:c6:14:42:74:bb:0c:64:be:8f:7e:ba:bf:66:36:7e:74:50:
4e:70:7c:aa:af:6e:42:3f:26:28:88:cd:00:46:3a:3f:89:43:
2b:57:02:fc:ea:5a:2d:f0:52:c1:99:ce:98:95:f6:f5:f9:80:
86:16:c9:62:d4:d1:ab:9f:fe:f2:42:41:f0:42:1b:4d:fd:48:
8d:78:84:ed:65:02:8e:64:56:c5:e5:5d:14:02:97:ce:3c:5f:
18:f5:ef:17:db:5c:d6:b9:92:f0:a1:b0:ac:44:7d:23:01:45:
87:1e:3d:4a:0e:21:a3:67:ba:b9:95:60:91:7e:45:cd:60:da:
c6:a2:a5:30:74:3e:31:9d:6a:62:6a:c2:f9:a2:4b:c8:10:72:
ac:69:d4:81:1c:2e:ff:37:58:e2:85:dc:ae:86:26:11:9d:9b:
fa:67:3a:25:0b:ac:0d:61:e8:1e:6b:9c:dd:51:08:6d:29:fd:
b3:e6:f8:55:6f:c7:66:8f:85:d7:55:18:f0:29:8c:5a:26:e2:
1c:3d:fd:38:e8:35:61:51:b2:62:c7:94:83:51:b9:86:a3:20:
32:3d:09:6f:7b:59:40:ba:48:ae:0d:0f:1b:1e:13:fa:cd:e2:
d3:f9:54:90
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUVPb+sMg7zY4jH3ypvH3KocTR0NUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTA0MDQxNzM2MjNaFw0yNjA0MDMxNzQxMjNaMDMxMTAvBgNV
BAMTKDNEMjA5N0U5NEMyRkI5OTIzQUIzMkJDNjhGNkRGRjFERERCQzI0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3DJSHV3Z85xx1CEPiP97nxCF
y0a5XxCCKvuen6uJKCIRUQwInx9A+xPdHXYWK0jX72m94+4MRSszL8cw5P7cIANZ
LRr+bJ4YO/iGaCXpLDhV8evQ+yTLy2oxm5RBzaVBvhUnYx/wZtMLl/eDzOZZ9s7u
Na5cesxUWMQ09XYeD4ds8fMlrizpXlGS0/LkOYYM5gy0qkROj/yRdqYCRIZhlsPA
eiQgwcHSrcNFHndNfZKp2KumcX7CA4Es8bAqe4f4djjBrtfdZtmQZ7h/3AYlP+Bo
IHYj71c8VklD4+76wYrcCsPNDg9/QNkPzfMX8d6ZgZ8LgunTHuQr8X/Ecd6hAgMB
AAGjggKRMIICjTAdBgNVHQ4EFgQUPSCX6UwvuZI6syvGj23/Hd28JLYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTODg4MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBpwYIKwYBBQUHAQcBAf8EgZcwgZQwgZEEAgABMIGKAwQA
UhWBMAwDBABSFrEDBABSFrIDBABSFrQwDAMEAFIXQQMEAFIXRDAMAwQBUhdGAwQB
UhdIMAwDBABSF0sDBABSF04wDAMEBFIXUAMEAlIXWAMEAFIYFgMEAFIYPQMEAFIY
zzAMAwQAUhrNAwQAUhrOAwQAUh1/AwQAUh2KAwQAUh2MAwQAUh2OMA0GCSqGSIb3
DQEBCwUAA4IBAQAt6JkoApTyYWDP+uQjRBDkdtAHxhRCdLsMZL6Pfrq/ZjZ+dFBO
cHyqr25CPyYoiM0ARjo/iUMrVwL86lot8FLBmc6Ylfb1+YCGFsli1NGrn/7yQkHw
QhtN/UiNeITtZQKOZFbF5V0UApfOPF8Y9e8X21zWuZLwobCsRH0jAUWHHj1KDiGj
Z7q5lWCRfkXNYNrGoqUwdD4xnWpiasL5okvIEHKsadSBHC7/N1jihdyuhiYRnZv6
ZzolC6wNYegea5zdUQhtKf2z5vhVb8dmj4XXVRjwKYxaJuIcPf046DVhUbJix5SD
UbmGoyAyPQlve1lAukiuDQ8bHhP6zeLT+VSQ
-----END CERTIFICATE-----
Generated at Tue Apr 15 23:23:56 2025 by rpki-client