Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198963.roa
File: AS198963.roa (raw, json)
Hash identifier: ep5siiSdQI6cA2KtkPG/ZtqtoSqb0wyvQ2BFYjOxF30=
Subject key identifier: 29:55:44:50:B1:F2:40:5E:41:99:16:1B:29:00:86:43:06:89:41:BE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C4EC8CF49CFF75FC39A75BB3C41C36BF5650388
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198963.roa
Signing time: Sun 08 Jun 2025 10:10:30 +0000
ROA not before: Sun 08 Jun 2025 10:05:30 +0000
ROA not after: Sun 07 Jun 2026 10:10:30 +0000
asID: 198963
IP address blocks: 82.21.50.0/24 maxlen: 24
2a13:9500:8b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4e:c8:cf:49:cf:f7:5f:c3:9a:75:bb:3c:41:c3:6b:f5:65:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 8 10:05:30 2025 GMT
Not After : Jun 7 10:10:30 2026 GMT
Subject: CN=29554450B1F2405E4199161B29008643068941BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:43:1d:3c:2d:38:19:d6:58:96:83:07:d7:
5e:8e:0b:70:b4:c3:f2:63:f2:f6:b2:fd:cd:91:e8:
2d:9f:8b:d7:b6:f8:9d:df:21:48:59:e1:71:33:e8:
19:7a:da:af:3f:82:67:5e:ef:8c:57:f6:31:ba:60:
59:25:95:13:a0:ff:d7:b4:e9:f1:27:c4:ed:50:10:
b5:f0:57:3a:b3:c5:a7:a9:c5:d3:0f:11:ed:1e:51:
b5:1a:e8:6e:71:ee:fb:1b:f3:9b:df:1d:01:b9:fe:
a7:ec:78:fd:28:e7:f6:d3:77:8e:b8:46:db:11:a9:
61:ad:b2:ee:bc:2a:2a:54:ca:c7:2b:80:6d:63:98:
d6:c3:fa:ef:3f:b7:b0:25:25:4f:79:e9:9b:26:b6:
e2:45:d7:95:f7:f5:3e:a7:3b:28:14:19:c6:9c:d6:
4c:61:50:d1:43:4c:9d:4c:bb:4d:c3:51:f6:95:96:
be:cb:ac:08:17:f6:d2:f4:26:c2:0b:1d:44:4c:1a:
30:b5:1d:76:2a:e3:ff:3a:f8:ff:9b:46:17:a9:55:
98:91:6a:72:cc:6b:19:a1:e0:1e:11:a6:b6:94:ae:
de:db:36:eb:3c:13:78:17:ee:70:e4:a6:8c:04:d4:
4f:2a:98:5b:98:78:60:56:b4:21:12:cd:32:5d:33:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:44:50:B1:F2:40:5E:41:99:16:1B:29:00:86:43:06:89:41:BE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS198963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.50.0/24
IPv6:
2a13:9500:8b::/48
Signature Algorithm: sha256WithRSAEncryption
6e:d4:3a:78:9d:d7:d1:85:19:4e:39:13:ea:8b:a5:0d:c2:3b:
7e:fe:55:b5:a6:d2:6a:e2:b0:80:b4:27:be:bd:fe:df:81:ef:
18:19:c3:01:87:e0:46:d9:d7:78:d2:d7:68:c2:09:61:06:d0:
9e:71:2d:44:99:9d:42:3a:9e:ee:f3:58:40:ad:a3:7c:94:c5:
2b:a1:3d:5b:4c:1c:ee:7b:38:cd:ef:cd:38:4e:7f:90:4c:a8:
65:41:f3:50:ed:5b:d9:3f:81:64:d2:70:8b:1d:60:ba:3d:61:
42:c0:a5:da:5c:27:4e:76:48:fe:7f:90:57:c0:53:d4:b7:fa:
00:00:2f:ef:58:ae:ca:63:db:fd:bf:76:81:4f:29:49:3c:de:
4b:df:d5:5b:aa:5e:90:23:74:c2:85:41:1d:45:2c:87:fa:f9:
ae:63:dd:da:21:41:dd:cc:ab:13:ec:e6:55:11:a6:91:35:1b:
a3:ba:8a:2a:93:ad:22:ae:49:eb:a1:36:9d:40:a0:07:7f:b0:
07:31:ff:15:ad:97:2f:68:69:b9:4f:ac:7f:b9:0e:89:68:8a:
cc:79:1b:42:4c:85:c9:fc:2c:9e:51:5d:9f:da:09:d9:a0:56:
01:af:4a:d0:2a:39:65:fe:2c:a2:4b:e7:84:9a:62:63:ee:9f:
32:a6:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:51 2025 by rpki-client