Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: BBU60iYQMUZEC37FYl1RIPI+AxxmYh0KJS4X4zzS5lw=
Subject key identifier: 72:65:19:F6:2F:DF:82:F7:24:94:AB:F4:2D:87:05:38:54:F3:74:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6314A1A76E92AA179397AFF1332CC0F263D73F75
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
Signing time: Sun 15 Jun 2025 12:58:14 +0000
ROA not before: Sun 15 Jun 2025 12:53:14 +0000
ROA not after: Sun 14 Jun 2026 12:58:14 +0000
asID: 21859
IP address blocks: 148.135.196.0/23 maxlen: 23
148.135.204.0/23 maxlen: 23
150.241.229.0/24 maxlen: 24
150.241.231.0/24 maxlen: 24
155.117.163.0/24 maxlen: 24
155.117.184.0/24 maxlen: 24
155.117.240.0/24 maxlen: 24
167.148.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 14:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:14:a1:a7:6e:92:aa:17:93:97:af:f1:33:2c:c0:f2:63:d7:3f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 15 12:53:14 2025 GMT
Not After : Jun 14 12:58:14 2026 GMT
Subject: CN=726519F62FDF82F72494ABF42D87053854F3748C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:15:3d:f2:26:0a:da:e2:ab:48:39:35:63:
8a:52:eb:63:de:8c:85:34:84:96:f1:69:0f:db:96:
a9:fd:c7:24:0b:41:36:da:a6:96:5c:e6:75:46:d4:
8b:24:c1:8d:b9:05:5c:96:0a:e5:cb:6a:43:e9:e6:
d0:b2:e4:d3:6f:c4:25:6e:bd:f9:b0:8c:d3:c3:fb:
0b:01:00:10:86:65:10:b5:b4:31:59:96:f0:d6:ef:
12:91:27:a2:1a:3a:e0:95:ae:81:de:c7:53:59:50:
68:95:8f:6b:d3:8b:f0:5a:49:db:29:47:03:76:8f:
8e:1a:92:d0:af:12:3e:18:18:45:c1:0a:fc:30:29:
4e:e0:47:bf:99:19:26:b2:43:18:c0:53:67:26:9b:
1a:15:b7:d9:76:91:6c:df:e0:40:ce:65:d3:ab:8a:
b9:a6:13:26:07:6f:d1:d3:71:4c:26:b5:ed:ed:86:
77:ea:2b:77:29:77:e4:74:af:64:5f:78:7e:94:a5:
f1:40:ca:ae:0f:74:2e:e6:fc:0e:56:ab:b8:12:32:
14:63:51:4d:69:d4:ac:63:90:94:f3:4d:92:12:52:
c3:57:95:8c:80:94:ec:94:12:93:90:cc:30:a5:cc:
d9:a0:c0:ad:69:d1:d7:a0:e0:b0:be:0e:f3:18:5e:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:19:F6:2F:DF:82:F7:24:94:AB:F4:2D:87:05:38:54:F3:74:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.196.0/23
148.135.204.0/23
150.241.229.0/24
150.241.231.0/24
155.117.163.0/24
155.117.184.0/24
155.117.240.0/24
167.148.198.0/24
Signature Algorithm: sha256WithRSAEncryption
14:71:35:d6:10:83:3a:f0:36:7d:0e:2d:c1:e6:a8:99:09:cb:
9c:2b:39:3d:a2:79:92:1d:c0:a9:c9:f4:f1:9f:2b:4b:9b:8c:
99:04:54:c0:c4:8a:bc:dc:15:4e:34:7b:c3:a4:f7:9d:8b:d0:
81:f7:00:4b:59:3f:42:3d:7d:16:9b:43:ef:9a:ae:f4:1a:c1:
4f:46:c8:f2:e9:b5:40:09:2c:6e:84:c6:f4:f9:b0:13:09:9e:
54:3e:04:d9:0d:b1:3c:c5:8c:20:0b:43:ee:12:f8:1a:e5:c8:
d1:3d:39:39:d3:b5:d1:0e:47:61:f4:33:34:85:8a:8b:89:33:
b5:07:df:89:88:d2:8f:94:cd:1b:b8:20:7b:89:dc:cc:36:ce:
5b:a9:8e:f9:f7:f1:71:e5:4f:9b:94:cf:c7:1c:a2:60:54:64:
c6:fc:64:71:9a:36:e0:36:7b:c3:5a:73:d3:6e:5e:7e:62:bd:
c3:15:d6:70:d8:bb:87:db:f6:72:cd:22:3f:db:e9:13:db:eb:
1b:20:25:c7:29:e5:a9:b4:10:9f:a1:f5:dd:14:22:55:35:34:
29:d9:2e:40:67:ec:a4:23:ea:69:b2:03:9a:7d:6a:27:02:25:
69:a4:38:5e:51:b1:71:4a:a2:5e:5e:74:39:f5:cb:2a:59:2d:
f2:b3:2c:13
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUYxShp26SqheTl6/xMyzA8mPXP3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MTUxMjUzMTRaFw0yNjA2MTQxMjU4MTRaMDMxMTAvBgNV
BAMTKDcyNjUxOUY2MkZERjgyRjcyNDk0QUJGNDJEODcwNTM4NTRGMzc0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkxU98iYK2uKrSDk1Y4pS62Pe
jIU0hJbxaQ/blqn9xyQLQTbappZc5nVG1IskwY25BVyWCuXLakPp5tCy5NNvxCVu
vfmwjNPD+wsBABCGZRC1tDFZlvDW7xKRJ6IaOuCVroHex1NZUGiVj2vTi/BaSdsp
RwN2j44aktCvEj4YGEXBCvwwKU7gR7+ZGSayQxjAU2cmmxoVt9l2kWzf4EDOZdOr
irmmEyYHb9HTcUwmte3thnfqK3cpd+R0r2RfeH6UpfFAyq4PdC7m/A5Wq7gSMhRj
UU1p1KxjkJTzTZISUsNXlYyAlOyUEpOQzDClzNmgwK1p0deg4LC+DvMYXqVNAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUcmUZ9i/fgvcklKv0LYcFOFTzdIwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE4NTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAGUh8QD
BAGUh8wDBACW8eUDBACW8ecDBACbdaMDBACbdbgDBACbdfADBACnlMYwDQYJKoZI
hvcNAQELBQADggEBABRxNdYQgzrwNn0OLcHmqJkJy5wrOT2ieZIdwKnJ9PGfK0ub
jJkEVMDEirzcFU40e8Ok952L0IH3AEtZP0I9fRabQ++arvQawU9GyPLptUAJLG6E
xvT5sBMJnlQ+BNkNsTzFjCALQ+4S+BrlyNE9OTnTtdEOR2H0MzSFiouJM7UH34mI
0o+UzRu4IHuJ3Mw2zlupjvn38XHlT5uUz8ccomBUZMb8ZHGaNuA2e8Nac9NuXn5i
vcMV1nDYu4fb9nLNIj/b6RPb6xsgJccp5am0EJ+h9d0UIlU1NCnZLkBn7KQj6mmy
A5p9aicCJWmkOF5RsXFKol5edDn1yypZLfKzLBM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:39:16 2025 by rpki-client