Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
File: AS216147.roa (raw, json)
Hash identifier: XwkTTV6kqZPbd8XPqs3r3R0GelIkMM+OH1jYKdBSswE=
Subject key identifier: 8D:A4:3F:54:B7:D3:96:55:76:5C:69:E9:D6:D9:0D:DF:00:03:FB:C9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 646569CDEE31BDD75EE9ACB7A29318F3E6BEF251
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
Signing time: Sat 21 Jun 2025 11:54:11 +0000
ROA not before: Sat 21 Jun 2025 11:49:11 +0000
ROA not after: Sat 20 Jun 2026 11:54:11 +0000
asID: 216147
IP address blocks: 147.79.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:65:69:cd:ee:31:bd:d7:5e:e9:ac:b7:a2:93:18:f3:e6:be:f2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 21 11:49:11 2025 GMT
Not After : Jun 20 11:54:11 2026 GMT
Subject: CN=8DA43F54B7D39655765C69E9D6D90DDF0003FBC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:6c:e6:19:c6:b3:36:72:00:df:77:85:fc:
0f:c1:2f:85:6b:a0:3d:78:63:be:e3:4f:bd:2c:6c:
3d:aa:51:65:30:df:3f:1d:4b:d5:1c:64:d7:20:ec:
68:a3:a2:9a:26:41:1f:73:30:da:e5:c7:79:6e:a9:
fd:aa:7e:68:e5:b9:10:35:3f:fe:dc:e6:a4:40:75:
03:76:09:22:63:d7:41:0f:f9:d4:72:43:d4:21:27:
67:2d:eb:e4:48:65:e3:8f:7e:32:ce:5c:f3:52:6f:
23:39:f4:22:79:cd:33:af:33:c1:30:82:5b:b3:d8:
c0:50:22:77:b0:9d:e9:45:85:95:04:2c:71:0e:52:
e1:6d:ce:33:1e:ec:9c:b2:b9:5e:5d:39:fd:89:a1:
24:7a:6a:a8:df:8c:8d:ba:ce:69:e2:5e:e0:2a:df:
ce:76:3b:03:58:e9:1d:89:8e:25:76:aa:8d:39:63:
97:c4:71:5c:1f:d3:2e:b6:be:0d:b9:93:c3:b3:e8:
f7:4b:56:e8:eb:5e:bf:36:ff:08:db:d1:91:2f:3a:
74:15:3c:fc:04:e8:1d:e5:b9:f6:8c:d3:eb:8c:4b:
da:51:94:e6:0e:94:17:f9:ec:9c:fb:2f:34:b4:2c:
4b:78:8f:f4:50:36:6d:dd:35:f4:31:56:6a:b9:a1:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:3F:54:B7:D3:96:55:76:5C:69:E9:D6:D9:0D:DF:00:03:FB:C9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.21.0/24
Signature Algorithm: sha256WithRSAEncryption
61:dc:bb:8d:27:88:11:5b:43:96:33:fa:5b:33:55:9a:81:f3:
06:95:b4:3f:cc:2a:f1:26:34:4a:65:6f:16:db:61:a4:1a:be:
01:dc:41:3a:fd:c4:ab:e5:43:70:f9:c8:b1:7b:87:92:50:df:
6e:ed:aa:54:4c:ae:d1:cf:bc:76:3d:25:ab:cd:14:d1:8a:e5:
61:81:98:42:64:79:93:06:ad:c9:49:80:c1:73:c0:b0:05:dc:
ca:9e:4e:0b:3c:fc:f2:c3:d6:17:1a:2d:48:9c:64:81:97:53:
e4:59:6e:1b:f7:ec:98:8a:47:d5:59:9c:68:ad:0b:08:52:68:
4f:09:1f:8d:26:b3:54:64:4e:f2:f3:50:35:3a:81:15:28:b1:
d0:fa:97:81:08:72:65:10:ca:fc:62:6a:9d:43:41:53:33:da:
c9:39:4c:f8:46:b9:ed:37:72:bb:0b:cf:ca:54:5f:62:ba:ce:
0e:c1:ba:db:b3:3b:61:29:28:7f:f8:d1:6e:f2:ed:a5:8d:2c:
bd:d2:1f:fe:fb:68:94:39:9b:a8:ce:21:1a:b0:27:cc:33:92:
4b:8b:ee:17:be:ae:46:53:54:93:22:e8:4b:9e:98:68:73:f6:
61:1c:85:36:62:a2:f1:8a:c2:76:67:33:41:6e:e9:3a:b9:ba:
38:f7:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:42:14 2025 by rpki-client