Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: +7l8CY2WqSKQ+gOaz4mFTEWdjxae69xP0V3Q/FNTL/I=
Subject key identifier: 2A:4B:45:DC:01:43:71:17:5E:4D:F9:E6:A5:D6:68:2E:0A:82:EA:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 547329453838586EC0473ECFC417500E0EB8FD22
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212384.roa
Signing time: Thu 19 Jun 2025 13:27:07 +0000
ROA not before: Thu 19 Jun 2025 13:22:07 +0000
ROA not after: Thu 18 Jun 2026 13:27:07 +0000
asID: 212384
IP address blocks: 82.25.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:73:29:45:38:38:58:6e:c0:47:3e:cf:c4:17:50:0e:0e:b8:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 19 13:22:07 2025 GMT
Not After : Jun 18 13:27:07 2026 GMT
Subject: CN=2A4B45DC014371175E4DF9E6A5D6682E0A82EA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:24:c6:8c:ea:ed:06:2d:5f:61:87:db:69:02:
fc:a1:bc:c6:9c:e4:59:f2:f0:90:13:4b:5e:49:4e:
c9:2a:53:10:97:07:da:4e:b0:4b:9f:82:02:e8:79:
65:5e:fe:75:45:fc:2d:e6:1e:eb:d3:30:b8:52:1a:
a5:43:7e:23:b8:45:9f:7e:4f:59:1b:a3:ec:46:c4:
99:76:d3:c0:3a:c5:8a:3a:89:ae:01:b2:b0:33:af:
ac:13:fd:8d:d0:ed:a7:e1:68:f3:c4:0d:49:13:c1:
76:2a:27:3e:f2:0e:fa:b8:e4:95:db:2e:0a:b4:85:
c1:79:80:a8:96:06:4b:68:95:6e:79:25:f5:2c:d4:
53:33:53:2b:bb:7e:66:5e:b7:f7:e8:35:0c:a9:2a:
7d:bb:99:71:00:3c:b0:43:ec:53:b6:3e:15:43:33:
65:32:98:c7:87:d1:cf:a4:a8:56:b5:e0:2e:94:d0:
f0:7b:99:29:c4:1a:74:8d:3b:db:eb:b0:bc:97:f7:
60:19:9f:1c:ff:75:76:69:82:95:a7:df:a3:5d:d4:
dd:4a:be:d0:ad:65:9c:ac:b1:3f:f1:e5:71:40:cb:
b7:94:60:92:e6:5b:d4:72:3c:b4:f5:58:ec:6e:d4:
4a:79:fd:98:47:4b:00:90:4c:5a:68:de:e2:cb:31:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:45:DC:01:43:71:17:5E:4D:F9:E6:A5:D6:68:2E:0A:82:EA:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.38.0/24
Signature Algorithm: sha256WithRSAEncryption
47:45:90:e7:50:52:7b:e6:7e:a0:f8:be:11:78:12:56:af:c9:
63:c3:70:df:aa:d1:9e:e1:01:5d:02:df:fb:c7:02:ad:45:67:
20:95:d0:3d:9e:6d:1f:ad:4d:0a:4f:1f:d4:bc:53:87:50:39:
3d:1e:c3:e0:c9:7a:73:7f:01:2e:cd:e9:f4:e1:1b:1e:70:33:
28:24:f2:e5:2f:d1:f0:90:62:ea:9f:9c:0d:8f:96:c6:b8:5b:
48:2c:61:13:5f:76:2f:13:5f:67:1a:38:0b:f2:5f:77:39:52:
cb:51:84:32:84:83:d1:69:0b:1f:2f:89:9d:90:af:7d:74:f1:
a9:90:78:eb:19:7b:d1:dc:4c:95:cd:34:63:9d:4a:80:6c:72:
0c:06:69:94:b8:cb:10:02:19:fa:4b:cb:66:4d:33:be:27:d6:
cb:d1:e5:6e:e2:59:41:f9:be:2f:f6:e8:0c:b7:e7:d0:b7:a1:
89:01:1d:89:59:6d:62:7f:9b:53:ad:89:b4:ec:3f:7c:6e:8c:
57:00:1c:5e:29:ce:39:1e:1f:fa:79:fa:8a:76:91:e3:75:1c:
71:ad:28:45:c5:f4:8f:2d:d3:1f:7e:1f:a2:66:80:ce:2e:f8:
7b:d8:68:d4:63:91:72:ac:dc:71:99:b7:ba:f5:79:98:d2:3d:
3c:f8:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:50:02 2025 by rpki-client