Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: q0Xh5fsKU+upzDFl27u8866vmVyqlfa8kTF1QWHC4J4=
Subject key identifier: 8C:E7:1A:2B:CE:67:FF:53:6B:99:4D:A7:DF:8E:67:33:D5:EA:52:78
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 54E2BF8F9839CA2D424220770B57B1A1945281E9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
Signing time: Mon 31 Mar 2025 04:38:10 +0000
ROA not before: Mon 31 Mar 2025 04:33:10 +0000
ROA not after: Mon 30 Mar 2026 04:38:10 +0000
asID: 26042
IP address blocks: 2a14:7584:1000::/36 maxlen: 48
2a14:7584:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e2:bf:8f:98:39:ca:2d:42:42:20:77:0b:57:b1:a1:94:52:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 31 04:33:10 2025 GMT
Not After : Mar 30 04:38:10 2026 GMT
Subject: CN=8CE71A2BCE67FF536B994DA7DF8E6733D5EA5278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:05:30:3e:01:6b:87:01:d9:bd:03:88:38:
18:40:2f:e0:e0:a4:0c:5e:6e:42:8b:2c:0a:b0:27:
1d:53:d9:00:12:10:6f:55:82:bb:82:96:40:d2:04:
c4:8c:72:51:c6:69:52:db:26:ab:0f:2d:1b:eb:b5:
31:6c:62:4c:11:d2:f3:26:97:57:df:d5:0e:c6:a0:
62:3d:34:20:b3:09:b3:a6:07:09:84:e3:35:70:9e:
2b:46:23:89:d1:fe:56:97:14:19:04:92:96:10:d2:
42:66:d3:90:fd:91:e6:9d:23:17:57:8d:38:21:c3:
30:f2:dd:48:28:dd:f8:1b:11:0a:18:b8:7c:38:e6:
4c:c5:fb:bf:ea:e2:87:0e:9e:bc:41:7a:24:f9:fb:
8b:02:38:24:eb:85:2c:bc:84:c3:5f:39:0e:98:cd:
65:44:2b:5c:e2:21:27:16:33:12:3f:f4:c9:49:ee:
b8:2e:67:ca:dd:69:fe:cc:9b:8f:ad:43:fa:47:ec:
24:dd:dd:b2:6f:a3:e9:6c:ff:1c:94:d8:03:21:b9:
78:2f:17:36:9b:66:b8:57:81:7d:1b:53:17:58:30:
ba:2e:d2:b1:cf:32:db:ea:ec:6a:5f:7b:a4:7e:59:
ed:c3:69:c3:e2:a7:a0:d8:d5:2a:6a:ee:ab:ea:ad:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E7:1A:2B:CE:67:FF:53:6B:99:4D:A7:DF:8E:67:33:D5:EA:52:78
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:1000::/36
2a14:7584:5000::/36
Signature Algorithm: sha256WithRSAEncryption
58:8f:c1:64:29:a7:dc:58:79:8a:77:dd:16:c1:f7:a6:26:c4:
93:40:c4:eb:fa:10:bb:02:7c:12:6b:1f:5f:0f:e5:7a:1d:a8:
b0:66:1f:a4:bf:c3:e4:81:b8:86:5e:e6:af:5c:5d:c3:b2:7d:
70:d2:4d:ce:e8:99:81:11:e7:19:32:ab:f9:40:ef:3b:cb:77:
b2:bb:0f:da:30:99:1b:43:7c:82:c9:09:db:ee:ca:94:67:d7:
d3:9d:03:e1:8a:88:2a:a6:15:bd:6b:2e:fa:2b:1f:bb:95:2e:
73:9c:fb:48:2d:2a:0a:83:86:b5:37:95:7c:26:51:28:27:85:
cd:b7:39:20:54:81:43:50:db:4c:fa:13:0c:cb:7d:0f:58:99:
e9:33:da:c7:19:dc:9c:4b:db:86:ca:b3:e6:6c:83:b4:97:18:
bb:22:6b:03:a6:55:01:4b:62:6b:a3:b8:6a:e6:cb:b2:9c:43:
e2:5e:14:16:51:c0:9a:2c:84:68:2e:5b:f9:e8:e9:7f:d1:c8:
1c:c2:17:01:ad:85:fe:ef:07:7f:f3:3c:7b:59:11:7f:07:1b:
bd:62:7e:2b:f9:72:a7:48:c6:f9:90:1a:7c:d3:96:cb:4d:3b:
6e:b4:cc:7e:72:4c:c0:8f:22:f6:34:66:c9:3b:77:b9:dc:bd:
32:6f:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:59 2025 by rpki-client