Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
File: AS149981.roa (raw, json)
Hash identifier: cIVuOw9O7oHbH8RogOsiflKXW+Gz7OoQCIobqo1hI+0=
Subject key identifier: 1E:A1:53:74:AC:12:7F:47:A1:ED:9A:FD:4A:63:0B:65:84:53:FB:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E474CC1E1A4E7F198C97478011EFD726C8F2196
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
Signing time: Mon 21 Apr 2025 08:26:12 +0000
ROA not before: Mon 21 Apr 2025 08:21:12 +0000
ROA not after: Mon 20 Apr 2026 08:26:12 +0000
asID: 149981
IP address blocks: 82.27.189.0/24 maxlen: 24
82.27.190.0/24 maxlen: 24
82.27.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:47:4c:c1:e1:a4:e7:f1:98:c9:74:78:01:1e:fd:72:6c:8f:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 08:21:12 2025 GMT
Not After : Apr 20 08:26:12 2026 GMT
Subject: CN=1EA15374AC127F47A1ED9AFD4A630B658453FBE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:2d:de:4b:e7:fe:e7:58:e1:74:3e:dd:bb:
78:63:2f:61:21:55:1b:26:aa:5a:68:d1:7e:88:9c:
aa:d6:dd:2a:5f:68:b2:e5:b3:b0:ac:5d:c7:35:30:
15:f2:01:9b:55:bc:07:8f:89:2d:92:49:bc:85:59:
a4:06:91:21:21:27:c0:c7:65:5f:f6:06:15:49:0f:
95:0f:88:71:ce:2a:82:3a:5e:0c:8f:58:43:a8:84:
38:29:01:63:92:91:1c:30:81:55:01:d0:6d:07:1c:
cd:40:a7:a4:33:ff:c7:03:98:f6:f4:3c:f2:82:e9:
bf:13:6b:de:66:ee:54:fe:cf:45:2d:2d:3f:26:1b:
da:ad:9d:0e:f4:bd:d0:88:0d:a6:0c:3d:af:8b:dc:
bb:75:8b:cd:73:29:30:58:8a:52:08:52:09:82:b3:
4f:f7:15:74:38:3f:a7:bc:e5:3e:85:80:39:65:fa:
36:25:dc:67:15:9f:26:c6:be:2f:d4:0f:b0:7e:ee:
6b:28:7a:24:9f:c1:ec:86:2c:b3:1e:08:6e:e7:73:
58:2f:94:97:ce:78:67:d4:f3:49:8c:7a:b7:aa:a7:
82:dd:52:a0:c9:b8:08:be:41:99:b2:c7:f7:6a:29:
3b:6e:e1:c0:10:4e:48:fa:01:90:50:72:ac:3c:ee:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:53:74:AC:12:7F:47:A1:ED:9A:FD:4A:63:0B:65:84:53:FB:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS149981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.189.0-82.27.191.255
Signature Algorithm: sha256WithRSAEncryption
27:a5:99:c7:d1:ed:7a:b5:7b:2b:51:ea:19:0c:84:eb:a7:c4:
81:ca:ee:1c:72:86:44:0b:df:75:65:10:fe:bf:23:fb:e9:08:
fb:0e:53:be:85:c7:3b:3e:8f:58:44:fd:2c:e2:95:1d:d8:42:
38:5e:31:f8:2f:51:6a:2d:83:25:c6:04:e8:a5:1a:89:c7:ec:
41:31:92:2c:39:91:d0:3e:95:fb:58:05:ee:7e:06:13:7a:1f:
e9:16:99:7d:f1:95:16:7b:26:81:62:33:74:b3:26:80:a2:7f:
de:b9:fb:d3:2a:03:d4:5d:36:e0:63:85:9f:3c:bc:6c:5e:b3:
97:62:e1:92:15:cc:62:6c:57:e8:b0:76:1c:27:6e:af:8d:01:
6e:a5:51:f0:ed:01:68:13:a6:f0:f5:e4:8d:9a:af:8f:5e:70:
90:b0:eb:18:88:ad:35:e9:73:9c:50:b8:ca:6f:7f:00:de:7f:
b8:23:d3:36:d5:4b:1c:3e:a3:2f:a8:a7:bc:62:81:b1:85:29:
8b:75:95:08:bf:38:c9:8f:55:12:b7:9c:f9:c6:e6:3a:72:d9:
78:96:89:1a:e3:a0:70:dd:5e:6a:e2:5f:52:1e:57:c0:c3:5e:
29:0d:04:d4:7b:6f:63:da:1a:c3:1f:7f:9a:23:8e:78:51:51:
2a:99:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:07 2025 by rpki-client