Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61003.roa
File: AS61003.roa (raw, json)
Hash identifier: GBdprdq3jgPyEL+AAvJvztFf2bBykP+eA0jB3VMb5vs=
Subject key identifier: 2F:D9:0E:9C:E0:4A:BB:A9:F3:1F:70:F2:74:5D:7A:FB:64:93:D0:47
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E678B5A9063FFBBEEC4EBA5C13BF4601179B517
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61003.roa
Signing time: Sun 22 Jun 2025 08:17:02 +0000
ROA not before: Sun 22 Jun 2025 08:12:02 +0000
ROA not after: Sun 21 Jun 2026 08:17:02 +0000
asID: 61003
IP address blocks: 82.21.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:67:8b:5a:90:63:ff:bb:ee:c4:eb:a5:c1:3b:f4:60:11:79:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 22 08:12:02 2025 GMT
Not After : Jun 21 08:17:02 2026 GMT
Subject: CN=2FD90E9CE04ABBA9F31F70F2745D7AFB6493D047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:1a:97:4b:1a:6a:00:65:20:a1:f9:36:5c:
45:c6:15:a7:d3:63:3c:ac:a4:b9:e6:93:ba:f0:a1:
54:7f:6e:23:2f:fe:26:cd:68:1d:2d:6b:32:74:82:
43:15:5c:7d:c2:68:3c:10:92:b6:f9:4d:c4:c8:92:
84:99:af:e8:88:3d:94:26:c1:b0:5e:00:d9:ec:f2:
fb:b0:03:2b:0c:85:d6:5f:7d:18:ef:65:00:60:64:
1e:42:98:57:c3:07:e7:bc:64:1f:d3:ba:2b:00:fc:
28:11:3f:4c:dc:b8:a3:c9:f5:7d:d6:97:1e:9f:45:
ae:6f:f0:ef:13:37:5a:67:b4:3f:90:5c:44:24:06:
1b:d2:7e:36:13:cd:5a:d9:49:d2:2d:31:80:78:35:
4a:38:5e:c1:5f:6f:c9:8c:15:3c:8f:ff:d9:32:23:
37:a4:98:3b:4c:8c:42:bc:d8:15:07:b1:d0:b0:33:
0d:b8:da:97:4f:d6:ca:47:86:14:e7:45:cd:c9:36:
38:8d:0a:57:9b:74:ad:93:a3:1d:33:09:95:bf:0e:
e1:ac:e6:c4:1b:b2:81:7e:c7:4d:7f:a9:39:75:f7:
3d:72:8c:f6:df:be:cc:4f:69:10:c2:dc:79:91:57:
ea:83:5d:de:73:ca:70:f3:6c:0c:3c:98:f0:8e:e5:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:0E:9C:E0:4A:BB:A9:F3:1F:70:F2:74:5D:7A:FB:64:93:D0:47
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:65:dc:e4:1e:31:6d:ac:4b:56:a7:1f:74:db:4d:b3:fa:d7:
42:9d:18:cd:0d:a3:3b:fc:e2:a5:cd:db:5b:d9:a3:65:88:23:
eb:cc:f8:8b:85:84:30:a1:7f:8d:41:08:45:1f:03:7d:2e:a2:
85:8c:a9:7f:bf:dd:67:7f:f5:a6:19:9f:37:75:df:ba:6d:2d:
7e:52:db:b7:f1:d4:38:f5:a7:3b:37:b1:b1:29:be:43:90:dc:
71:0a:c6:aa:3a:d3:d5:1e:4b:97:89:05:d3:68:96:63:e6:e4:
0c:60:fe:05:00:35:30:25:e1:21:a6:6c:21:18:ad:6f:12:f9:
d7:8e:8f:e5:d7:e1:0e:76:83:69:36:b0:88:1e:f6:2c:ea:bc:
cd:c4:18:5b:44:d0:0d:fc:c5:49:71:0a:8b:59:47:7f:3e:46:
5f:d2:89:f8:f6:1a:94:12:6f:3e:ae:47:de:52:9c:5c:37:ff:
78:b1:c3:5e:e8:a6:cf:ea:38:19:92:e2:29:e4:70:d6:10:58:
4f:1a:9a:bf:93:ba:e4:dc:c9:d9:81:44:0b:c6:b4:d3:03:21:
8a:fa:4a:d3:61:6e:04:c7:b0:7e:b4:7b:46:46:fc:07:77:e4:
e8:80:30:16:24:0b:cd:41:21:47:47:54:41:2a:f4:85:92:a8:
ed:14:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:49:42 2025 by rpki-client