Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
File: AS21859.roa (raw, json)
Hash identifier: tFO5UNsy43vyXAfy6BdDErtphLurMyWdawxticxhg0A=
Subject key identifier: C5:66:D1:26:5C:A3:86:D8:50:7B:B8:EE:4F:F1:9B:4D:9F:98:71:7A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2F6EF6965D0A21F58FD65334559BDF711CF33AD5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
Signing time: Wed 11 Jun 2025 08:45:45 +0000
ROA not before: Wed 11 Jun 2025 08:40:45 +0000
ROA not after: Wed 10 Jun 2026 08:45:45 +0000
asID: 21859
IP address blocks: 5.252.82.0/24 maxlen: 24
45.133.176.0/24 maxlen: 24
179.61.155.0/24 maxlen: 24
181.215.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6e:f6:96:5d:0a:21:f5:8f:d6:53:34:55:9b:df:71:1c:f3:3a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 11 08:40:45 2025 GMT
Not After : Jun 10 08:45:45 2026 GMT
Subject: CN=C566D1265CA386D8507BB8EE4FF19B4D9F98717A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:69:22:8d:54:4f:07:f0:33:49:ca:43:ff:
08:46:8c:ca:fb:7f:7f:9c:02:eb:32:e8:3d:51:98:
2a:af:c2:1b:98:1f:10:0c:e0:ac:de:de:aa:87:06:
93:f8:3f:51:12:70:80:7e:98:47:10:e3:0b:e3:94:
43:f5:aa:7b:1d:4b:eb:c6:24:39:42:76:67:8a:0b:
e7:b7:bb:cb:dc:4b:f5:11:f0:80:2a:ea:fe:e6:4f:
11:3d:6e:83:04:b8:49:ca:70:67:a4:19:31:6a:5a:
36:0d:d8:3f:44:82:ee:3b:b8:f1:6b:4e:6b:87:80:
46:15:2f:e0:7d:bb:f0:af:b5:63:fb:f0:c8:c4:e8:
e9:cd:31:02:66:72:60:93:49:5f:bb:fc:6f:02:09:
3c:2a:66:b9:e2:2d:42:56:6e:17:53:af:c8:9c:b7:
2e:d0:3a:56:6b:5e:72:b0:44:ef:5c:dc:da:6d:88:
d5:99:62:d5:a3:88:0b:26:42:10:90:dc:bc:5b:3b:
1f:28:34:e8:36:cf:e8:ec:43:8e:64:1e:f7:74:15:
5d:d9:c1:d8:3a:5d:fc:66:26:a7:a8:78:52:30:3e:
9a:f0:14:9f:dc:9d:6a:46:c9:88:d9:94:73:02:82:
a5:5c:6e:9d:00:90:3c:c9:2e:a1:68:75:18:cd:f9:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:D1:26:5C:A3:86:D8:50:7B:B8:EE:4F:F1:9B:4D:9F:98:71:7A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS21859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.82.0/24
45.133.176.0/24
179.61.155.0/24
181.215.205.0/24
Signature Algorithm: sha256WithRSAEncryption
61:50:96:6e:4b:b9:aa:78:02:84:32:43:84:90:f7:42:32:da:
c2:a9:74:20:4a:dc:c7:0f:7b:47:7d:a1:2c:d6:7d:24:51:c8:
ea:73:b5:ba:c0:be:65:c4:c7:8f:08:eb:27:66:67:a5:b2:0f:
41:13:39:98:70:8c:3f:e0:44:b7:a3:4e:01:23:ad:4f:33:75:
aa:bc:ea:c5:0e:66:d3:2f:39:75:4b:9c:e7:76:a0:e6:4a:17:
05:98:fd:90:66:b1:f9:78:e8:0a:71:98:89:17:62:74:d7:4b:
86:40:7c:22:ab:17:ae:9c:de:b2:ee:74:12:7f:88:00:61:e1:
00:01:d8:8b:d1:a1:47:96:95:c8:14:a5:19:7b:af:69:d3:02:
c1:49:48:2a:79:75:75:4c:4f:72:0f:03:31:34:e9:98:2a:79:
82:13:ec:77:c6:83:54:25:09:20:1a:49:dc:41:97:3f:de:46:
cf:7e:47:57:75:88:43:38:b4:b9:bc:48:2f:a0:3a:44:c1:fb:
e2:81:9d:56:de:47:9d:6f:69:45:72:13:26:5b:bb:33:b1:6a:
42:91:61:d1:f6:d0:4e:e3:ef:5a:8f:f8:93:0b:b3:d8:a7:65:
66:86:eb:2c:f3:d9:6f:4e:59:79:d7:a6:57:0d:44:58:b8:d4:
b7:29:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:40:56 2025 by rpki-client