Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
File: AS210814.roa (raw, json)
Hash identifier: p8s4RcYIx6zdLwcUU6n0pijPNB7KJLdqPQTahHkomhU=
Subject key identifier: AF:7A:DE:37:AD:B8:F8:D3:35:45:DD:24:BE:A3:E4:C9:F9:AD:B2:C9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 16D8DBE5C49F47F57DB1884B4D15116B400A81BB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
Signing time: Thu 12 Jun 2025 14:52:48 +0000
ROA not before: Thu 12 Jun 2025 14:47:48 +0000
ROA not after: Thu 11 Jun 2026 14:52:48 +0000
asID: 210814
IP address blocks: 82.21.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d8:db:e5:c4:9f:47:f5:7d:b1:88:4b:4d:15:11:6b:40:0a:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 12 14:47:48 2025 GMT
Not After : Jun 11 14:52:48 2026 GMT
Subject: CN=AF7ADE37ADB8F8D33545DD24BEA3E4C9F9ADB2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:f0:03:26:5e:2f:a1:eb:c2:22:01:20:de:
72:89:32:4f:4a:0a:c4:74:36:09:0c:4b:33:e6:11:
ac:de:db:7d:0b:15:2a:e0:c5:e4:e1:20:4f:2b:31:
7e:bd:66:de:9f:c7:55:8c:e2:6e:df:d1:ed:20:0a:
96:69:f5:d5:dc:c7:75:72:7b:74:94:2f:3f:9c:d1:
53:5e:09:65:1d:40:8b:bb:07:d4:bc:ee:56:77:08:
7e:16:1c:3f:cf:30:3e:29:81:58:23:40:2b:6e:58:
da:73:7c:a7:2b:8e:b8:d7:b8:4b:22:83:c5:bb:6e:
f1:b4:c9:f3:44:71:b6:bd:30:c7:88:58:40:73:17:
06:4f:b0:b2:5a:f4:e3:c0:cf:ed:5a:e7:b9:e8:d7:
cf:e7:c7:44:87:c5:12:49:1e:50:d9:52:c1:d6:7a:
5f:6b:be:e5:f8:f0:8a:37:ce:f5:b0:bf:d5:37:e1:
fe:d0:2e:ef:bb:54:31:56:76:12:45:2c:85:22:fa:
0b:6e:71:5a:7f:5c:c6:73:ac:ce:b2:14:61:34:ce:
8b:38:2b:e1:1a:f6:3d:74:23:d5:25:97:b6:23:23:
81:9f:6b:fd:0d:40:bf:cd:32:e1:c9:6a:19:f4:ac:
44:0a:a6:15:03:45:9f:22:5f:6d:9c:ee:ed:a0:67:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:DE:37:AD:B8:F8:D3:35:45:DD:24:BE:A3:E4:C9:F9:AD:B2:C9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210814.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.41.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3b:5c:78:c9:f0:32:77:23:32:b1:90:90:dc:5e:6f:4e:d2:
54:f5:4d:a5:63:5f:75:35:24:f5:f5:3e:f0:85:2d:66:2e:4e:
bd:a0:30:ba:2a:7a:32:3f:7a:92:bc:fd:35:d8:f5:d4:ac:be:
b9:5b:de:6b:a5:16:7e:7c:be:da:64:93:cd:9d:f2:85:76:4d:
8a:eb:c9:8b:fd:bb:59:c5:51:22:53:ae:f7:74:03:4d:aa:f0:
14:a1:d4:24:34:b1:f8:7b:01:65:fb:8f:bb:76:0f:0e:8a:e1:
6d:c0:0e:ea:58:a6:f5:df:5c:b2:9a:fc:aa:2f:8d:48:15:0f:
67:78:94:fa:c9:e3:66:67:a2:2e:df:1d:0d:ce:15:38:62:60:
c7:30:1b:9f:21:82:9a:d6:54:bb:0e:ad:8c:9d:0f:0e:8a:60:
a3:1b:84:62:2a:18:f0:07:ae:b0:22:00:ef:31:47:2d:29:27:
1e:f0:18:43:1b:3c:e8:5c:b9:39:2b:1d:e6:17:a2:07:89:cf:
70:7b:70:b6:c0:eb:0b:23:54:1e:c1:4d:dd:1a:71:be:24:0e:
5d:2c:ac:25:e1:18:26:37:bd:ed:47:1b:1e:cc:eb:bc:25:e3:
60:57:73:3e:4f:bb:8a:6d:3e:2d:68:be:91:8f:ba:64:b9:b1:
fb:f0:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:15 2025 by rpki-client