Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
File: AS22427.roa (raw, json)
Hash identifier: lLF2GpQC3qEJ7BummrJyYT6jFwGzyVOxdSt62416pkE=
Subject key identifier: E7:2A:68:3D:AC:F2:03:CF:2A:19:AD:52:3C:BE:31:13:C7:7B:92:64
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1584F460329AF52259C791F220E0232F44730C1E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
Signing time: Mon 16 Jun 2025 03:25:43 +0000
ROA not before: Mon 16 Jun 2025 03:20:43 +0000
ROA not after: Mon 15 Jun 2026 03:25:43 +0000
asID: 22427
IP address blocks: 82.22.195.0/24 maxlen: 24
82.26.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:84:f4:60:32:9a:f5:22:59:c7:91:f2:20:e0:23:2f:44:73:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 16 03:20:43 2025 GMT
Not After : Jun 15 03:25:43 2026 GMT
Subject: CN=E72A683DACF203CF2A19AD523CBE3113C77B9264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:db:9e:bc:19:c0:ee:ec:6b:d8:5e:37:dc:
1c:c4:e4:10:e3:fa:97:45:79:3e:68:7a:f7:cf:5e:
82:da:58:e1:b6:e9:1b:03:71:56:23:d4:81:16:66:
88:9b:33:5b:bb:55:8a:f3:31:7b:73:df:b1:20:5a:
6d:cf:ad:94:e2:f9:4c:0d:2d:74:e7:d1:72:86:58:
b5:47:97:87:b0:f5:61:9d:bd:62:d9:51:2c:9f:df:
92:17:3d:b9:53:4c:97:c7:2d:eb:1e:0f:0c:1e:41:
06:e9:52:2b:10:66:ac:75:15:5d:24:33:29:47:86:
30:b4:fd:59:ba:b9:4a:3d:51:52:63:59:3e:77:d2:
ae:d9:9c:d9:ee:9c:a6:2c:89:fd:c6:4c:80:69:ab:
f3:c8:19:20:b1:a4:e3:23:a7:e6:2a:42:82:a3:52:
8b:5b:50:f6:62:1f:71:44:0b:ee:4c:12:63:93:e3:
5d:5d:fe:79:0d:77:c8:6f:1b:9d:ef:40:eb:aa:0e:
21:df:94:47:f8:f5:24:0e:29:6e:d1:b0:7a:d4:1e:
75:f8:3d:b3:25:ef:25:1a:81:ae:1c:13:1b:89:a2:
e2:f0:be:a0:bf:b5:09:d5:91:ac:8b:7c:ad:00:f4:
cd:78:ed:8f:61:aa:27:89:29:ac:76:19:2e:42:bd:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2A:68:3D:AC:F2:03:CF:2A:19:AD:52:3C:BE:31:13:C7:7B:92:64
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS22427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.195.0/24
82.26.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a0:32:0c:1c:3a:47:7c:f6:f2:91:fb:5a:a6:bb:ad:ca:41:
58:e4:3d:d1:8b:80:3f:b5:b9:fc:d8:28:64:79:15:19:af:50:
36:1c:cb:12:10:7b:85:75:35:c0:b6:7e:54:6f:34:6b:c7:b8:
9a:21:6e:46:1b:63:53:45:0a:d3:14:3b:b6:e8:13:12:40:c2:
5b:da:75:17:1e:a0:1f:c4:d1:ac:80:37:e9:9c:3a:82:04:c9:
b9:dc:39:89:76:3e:f5:f4:bd:a5:5b:c6:01:0c:6c:20:86:a0:
56:80:17:41:2a:0b:74:b1:2f:d2:c9:78:d3:a6:f1:ef:f0:9d:
6e:93:6c:1b:6d:00:a5:3d:1b:2a:b1:76:0c:59:d4:ad:fb:1e:
0c:5a:a9:25:81:5a:0b:52:b6:e4:60:26:00:87:c8:25:59:7e:
50:0f:c8:bf:38:03:84:89:1d:c8:9a:32:eb:46:6b:c6:5d:86:
11:bf:de:95:16:20:ea:b7:df:1d:68:f9:93:f0:91:bb:66:7e:
d2:dc:32:8f:1e:73:32:54:f1:63:45:da:13:8f:14:93:34:62:
cb:b8:ed:ed:59:74:a9:d3:08:5d:a3:9c:36:3a:5e:8e:f0:c1:
f1:37:37:63:10:5f:dd:ba:d0:dc:c3:1b:4f:50:e0:f9:00:17:
04:07:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:48:37 2025 by rpki-client