Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: MIdca4OrmYzlknRM3uv+LS7gqJnjcf01OtQ+c9LqnDg=
Subject key identifier: B9:42:EB:59:0B:37:39:C2:00:31:CA:72:C4:C5:10:42:B0:94:04:77
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07EBDBC543448D0D06430C1E9F62CE35B821282C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Wed 11 Jun 2025 13:35:07 +0000
ROA not before: Wed 11 Jun 2025 13:30:07 +0000
ROA not after: Wed 10 Jun 2026 13:35:07 +0000
asID: 137235
IP address blocks: 82.24.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:eb:db:c5:43:44:8d:0d:06:43:0c:1e:9f:62:ce:35:b8:21:28:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 11 13:30:07 2025 GMT
Not After : Jun 10 13:35:07 2026 GMT
Subject: CN=B942EB590B3739C20031CA72C4C51042B0940477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c4:89:3b:48:91:8b:8a:12:4a:0a:1e:ad:78:
06:67:aa:0c:65:05:a2:86:b2:3c:c9:7b:b8:e3:08:
e4:87:fb:d0:43:f1:f9:5d:b2:58:7e:f4:f5:8a:f3:
45:05:71:b8:cb:e6:44:ba:7f:85:f8:fd:5a:dd:e6:
e2:e5:24:95:c0:d0:dc:38:6f:69:2e:60:eb:0a:26:
e7:d6:76:1c:eb:f1:64:cd:ca:42:c9:d4:df:ec:61:
ee:66:d2:a4:e3:45:8b:77:b6:67:a2:a6:ff:fd:57:
7a:4e:9d:d1:9f:94:8f:16:2b:34:4b:6f:e4:87:50:
d0:e2:eb:20:15:e9:4d:da:5f:0d:d8:83:c8:8b:85:
d8:03:7c:e7:3f:2b:f7:2b:a5:02:14:0b:8a:d1:12:
ef:1c:dc:26:b5:f4:17:7a:1e:90:11:d5:d8:35:f8:
dd:c8:1f:08:c8:4a:94:e1:87:24:dd:34:7e:82:21:
a6:8b:72:1a:f4:e8:ab:0b:05:89:65:55:fe:0a:96:
67:2f:94:be:7f:cb:b9:4f:88:00:12:86:20:4f:03:
45:eb:5e:2a:96:37:11:d6:95:18:34:72:39:58:9f:
fd:7b:e2:84:27:a1:ce:02:86:e6:2e:4f:06:99:24:
3f:1c:11:1c:8f:c9:50:40:a9:dc:ae:8f:14:0e:2a:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:42:EB:59:0B:37:39:C2:00:31:CA:72:C4:C5:10:42:B0:94:04:77
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d0:b3:03:c7:39:dd:0e:fc:93:df:8a:7b:3f:fc:ff:4a:35:
ee:c6:63:be:3e:3c:fe:83:fd:53:e0:72:c0:ee:62:f6:fa:c5:
6a:86:95:a9:6a:9e:74:e2:1a:91:47:1e:5b:8a:40:cc:28:9e:
56:8a:6f:7c:ba:22:9d:3d:75:cc:34:d8:ff:dd:ea:5d:f9:1f:
64:91:f6:2a:31:ce:24:c2:6c:3f:fe:dc:5c:47:6b:cb:32:f7:
6c:6f:cf:79:25:c4:b0:e0:65:1d:a9:8e:50:12:29:56:16:e5:
6b:c5:70:01:fd:7f:87:76:39:fd:0a:9a:cf:49:5e:45:70:f5:
55:5f:3b:03:6f:5b:72:de:99:2d:eb:b3:44:de:cf:fc:6c:a2:
2d:a0:42:67:e7:8e:4a:a9:f4:43:cc:1a:e9:a7:e3:e2:97:54:
e5:54:3d:f5:31:0b:8b:11:e5:af:64:71:ad:51:53:55:c8:c8:
80:55:e2:58:c2:1c:27:89:47:e7:66:7a:aa:76:8d:3f:89:d1:
40:b0:4c:ea:a4:e8:a2:f7:d1:a8:6e:10:ba:22:d3:17:41:d2:
8d:c0:dd:fe:1a:f4:4b:fc:4f:b7:60:4e:b9:65:a5:5c:f7:b5:
1e:3c:d2:4a:09:2a:02:05:72:e0:65:db:92:d3:9b:1e:87:e5:
4e:92:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:59 2025 by rpki-client