Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
File: AS42960.roa (raw, json)
Hash identifier: uIpbb2LPuDgGsZXsV7OUlNsUqD5sx4BO+bM82ljcPX8=
Subject key identifier: 30:3B:9B:98:EC:59:F5:B9:E7:61:98:8E:E8:24:01:97:11:62:60:50
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5BC0A22247708C50F8EB8EBFD4922A7DA7CC1DF5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
Signing time: Thu 12 Jun 2025 05:23:18 +0000
ROA not before: Thu 12 Jun 2025 05:18:18 +0000
ROA not after: Thu 11 Jun 2026 05:23:18 +0000
asID: 42960
IP address blocks: 82.26.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c0:a2:22:47:70:8c:50:f8:eb:8e:bf:d4:92:2a:7d:a7:cc:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 12 05:18:18 2025 GMT
Not After : Jun 11 05:23:18 2026 GMT
Subject: CN=303B9B98EC59F5B9E761988EE824019711626050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:ba:49:63:37:1a:31:5c:15:30:f3:96:cc:
16:88:8f:5f:e0:b4:bb:60:ec:19:ae:8f:e4:81:7d:
6b:a8:86:10:61:e9:ae:8a:f2:d6:44:75:0d:e5:71:
81:be:20:a3:ef:1c:38:b9:bb:24:5e:fb:80:54:75:
31:3b:39:85:2f:2d:46:7e:7e:fb:9c:a4:ec:84:bc:
2e:96:56:40:9f:96:a4:1d:59:d1:20:54:08:a8:99:
82:31:01:85:9c:ed:b4:25:3f:2a:43:b2:3d:94:1e:
a7:68:37:3a:cb:5d:69:8d:5b:70:30:b2:98:65:01:
d8:25:09:ba:6c:c9:48:cd:c6:69:13:51:82:6b:54:
15:be:3c:47:91:c9:df:59:ca:ab:45:57:44:18:1b:
73:f0:ff:96:8f:72:ec:a8:ba:16:b5:56:b6:7c:81:
66:87:d1:27:fa:bd:20:c1:27:8b:91:ab:8b:c1:34:
d4:6c:84:a1:bd:f6:d0:a2:0a:b0:cd:49:ae:00:6b:
6e:d2:93:d2:da:80:7a:57:26:1d:e5:80:33:84:06:
d4:9c:df:dc:f3:32:91:be:b6:f5:84:d2:4c:9f:09:
95:6d:88:11:25:f6:c5:6f:9f:01:6f:ac:af:1a:c2:
4b:47:8a:96:9d:54:6a:5b:37:f0:7a:34:b7:c1:65:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:9B:98:EC:59:F5:B9:E7:61:98:8E:E8:24:01:97:11:62:60:50
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS42960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.122.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:18:47:40:86:8c:50:9f:58:83:ec:c0:13:9d:f2:c5:10:
7d:73:e4:94:ff:97:96:f2:51:b8:ef:08:cc:e6:87:56:05:93:
16:8e:25:53:c9:4e:71:8f:58:9f:62:89:72:f9:dd:0c:68:34:
7f:c5:19:23:02:d8:54:b6:06:58:84:99:da:8f:4c:f8:10:77:
9c:a6:b0:d7:e1:c0:ca:38:cb:bf:38:71:da:7c:74:b2:82:8c:
ca:08:cb:40:cd:90:dd:9d:8b:ab:b8:a4:b8:60:c9:94:0b:fe:
99:bc:90:d1:02:84:b1:c9:e5:63:88:6b:a3:cb:a2:6d:ae:bb:
10:50:f5:16:49:0b:74:b2:4c:7c:1c:e6:a5:b6:ab:c8:09:30:
1d:6f:da:fa:b2:d4:80:f0:ff:db:6d:90:d0:14:7b:7a:17:d8:
66:57:9f:a2:68:6c:65:a3:94:56:79:c9:29:3d:4e:e2:e9:c9:
5d:c9:99:84:b8:55:e6:d3:c8:75:a4:03:2e:ca:4b:3f:eb:a5:
3a:5b:51:a9:12:ca:a6:43:e8:22:a1:08:66:fc:8c:f4:ec:85:
5c:80:dd:7e:ec:55:a4:63:c5:aa:d8:1f:bc:78:59:c7:d8:80:
20:e7:75:c7:21:0c:ca:cb:4f:82:be:a5:ab:36:f7:41:43:bd:
28:53:5e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:58:10 2025 by rpki-client