Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
File: AS202678.roa (raw, json)
Hash identifier: KzBqll8lFRdAX6/I/xLSyP/5skj7ZqXkiUnWG4jIKqc=
Subject key identifier: AA:4E:3F:9A:54:99:B2:FE:C4:1D:44:D2:A4:BD:BA:89:2B:7B:AB:BC
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 4E8FA061D9077C69E4218963B812A7C23E6AF7E2
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
Signing time: Thu 01 May 2025 07:49:39 +0000
ROA not before: Thu 01 May 2025 07:44:39 +0000
ROA not after: Thu 30 Apr 2026 07:49:39 +0000
asID: 202678
IP address blocks: 37.221.76.0/24 maxlen: 24
62.182.32.0/24 maxlen: 24
62.182.33.0/24 maxlen: 24
62.182.34.0/24 maxlen: 24
62.182.35.0/24 maxlen: 24
212.115.100.0/24 maxlen: 24
212.115.101.0/24 maxlen: 24
212.115.102.0/24 maxlen: 24
212.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8f:a0:61:d9:07:7c:69:e4:21:89:63:b8:12:a7:c2:3e:6a:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 1 07:44:39 2025 GMT
Not After : Apr 30 07:49:39 2026 GMT
Subject: CN=AA4E3F9A5499B2FEC41D44D2A4BDBA892B7BABBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:8a:0d:c6:fe:0f:6a:9e:6f:e2:a8:df:6d:
1a:d1:b7:0f:82:5b:42:20:8c:66:6e:d2:f3:13:af:
d3:87:f5:c7:db:64:d6:3e:9a:78:42:b2:4f:e8:86:
c4:d5:ed:3e:5b:ae:0b:1a:50:87:90:24:0a:3a:60:
c0:6e:43:87:39:da:f4:3a:53:61:f9:52:3a:4c:24:
f0:20:14:60:d4:e9:69:69:8a:03:8f:e3:e2:d8:ed:
c0:8b:17:15:fe:cf:66:a8:81:a0:2a:f2:b8:cc:d5:
75:ba:45:c6:75:1f:dd:da:c8:e7:52:24:99:bd:07:
ea:c0:b9:4b:01:4d:8a:85:9e:99:74:1c:77:66:c1:
e3:fa:78:36:42:31:66:52:1c:74:6e:da:a9:ea:ad:
9e:ea:e9:e5:a1:42:ff:33:5c:61:81:be:fe:a6:7e:
d9:8e:2b:1c:19:1c:75:d5:2a:4a:e5:88:59:d5:7c:
2a:c8:7f:f6:fb:a9:1a:40:77:2f:17:9e:b4:8f:8f:
4e:08:eb:e6:f8:78:0c:24:4e:2e:ae:47:43:19:be:
82:fe:30:77:52:bd:57:07:26:cf:0d:69:f2:90:4c:
51:20:e8:e7:15:1a:37:09:92:bc:a1:25:98:61:72:
97:66:75:6a:84:f4:31:14:16:77:66:0c:36:ea:29:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:3F:9A:54:99:B2:FE:C4:1D:44:D2:A4:BD:BA:89:2B:7B:AB:BC
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
62.182.32.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
93:05:7e:e0:8a:16:d7:a5:b4:81:41:b3:c3:4b:76:fe:b2:0b:
b3:4a:32:88:66:8e:e0:ba:ca:c7:34:0a:cf:21:f7:d0:46:7c:
c8:77:bf:b7:88:4f:de:58:63:25:17:1f:18:22:61:c5:69:8e:
2d:df:22:d2:47:ce:00:77:50:3d:b5:7a:b5:87:8d:0d:f1:dc:
0d:43:d9:33:05:07:e9:a7:34:42:b2:85:d8:39:07:0b:14:83:
0a:6f:b4:21:cd:9d:ba:cb:bc:56:da:20:a5:8d:de:f6:67:55:
e2:db:3f:a2:5d:84:4e:b0:c2:41:ab:90:52:72:62:ad:89:e7:
3f:f3:84:ed:91:4a:1a:70:28:88:41:1c:57:c0:d4:78:f4:f8:
26:74:b8:dd:56:18:bc:94:ff:f3:b2:75:96:6a:83:4f:89:8d:
69:6d:4b:99:f4:6f:ab:f9:11:80:7c:c7:8a:70:ce:0f:a8:61:
f4:58:2a:5e:7f:8c:29:e2:65:65:c2:78:c3:ab:e7:ae:95:c8:
04:0d:b3:72:ae:5a:c9:ae:94:0f:da:04:53:32:bf:5d:0b:a9:
02:82:f6:0e:42:6c:ff:0f:b4:94:a2:46:2a:e7:04:ad:96:46:
5f:58:a7:0e:f8:0a:2b:8d:9e:50:38:7f:24:ed:22:b4:9d:81:
e4:0c:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:01:57 2025 by rpki-client