Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: JEanjkZWdILor8XV5YK7LBVcjCH2/pOsk5oMzqfx/ys=
Subject key identifier: 2B:0A:B1:A2:AD:65:1A:0B:8A:93:5C:D5:99:E2:37:01:C2:5A:FA:3D
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 18025C565023974CD9C77984A2419286D6F45938
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS21840.roa
Signing time: Mon 23 Jun 2025 09:17:21 +0000
ROA not before: Mon 23 Jun 2025 09:12:21 +0000
ROA not after: Mon 22 Jun 2026 09:17:21 +0000
asID: 21840
IP address blocks: 193.32.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:02:5c:56:50:23:97:4c:d9:c7:79:84:a2:41:92:86:d6:f4:59:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 23 09:12:21 2025 GMT
Not After : Jun 22 09:17:21 2026 GMT
Subject: CN=2B0AB1A2AD651A0B8A935CD599E23701C25AFA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:94:51:98:72:3b:94:40:e1:71:4e:02:2d:
a7:38:d7:57:74:62:48:07:0c:e1:bd:1f:64:2c:b1:
c0:5d:66:a2:2f:ac:71:37:0c:a2:fe:88:c8:2d:88:
2f:1b:0c:a7:ef:1c:3e:92:ae:b3:6b:1d:8a:da:04:
c5:2a:99:05:e1:e8:6a:08:11:d7:9f:ca:2b:7b:a6:
c5:0a:6f:f0:0a:cb:4f:7d:b7:5a:93:f0:51:8f:82:
e7:c2:1c:aa:f7:17:90:6d:13:a6:73:7f:4f:4b:bc:
60:7d:eb:e3:24:8a:aa:be:5d:ce:a0:5d:27:2e:ec:
65:9a:2c:52:4a:d3:cb:75:b3:df:20:9e:00:95:a7:
a0:cd:9c:a8:e8:c9:a4:ea:d0:29:4d:28:2b:ea:2d:
20:32:9d:10:50:f0:e2:27:dd:2b:c7:d3:73:92:d9:
83:e6:c3:bb:c5:17:dd:a3:ef:62:3c:41:b9:52:ee:
76:eb:d9:7a:1c:84:d8:b3:e6:c5:9d:c1:4b:96:99:
03:52:85:f1:90:1b:02:bd:8f:00:29:de:89:e0:37:
65:c6:bc:15:53:c0:6a:82:37:d0:7f:ed:88:4e:f9:
20:48:d3:c3:cc:fa:9f:79:2d:2d:47:fe:92:d5:76:
b9:8e:da:c2:af:08:99:2f:be:bd:be:8a:80:aa:d2:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:B1:A2:AD:65:1A:0B:8A:93:5C:D5:99:E2:37:01:C2:5A:FA:3D
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:06:55:fe:ec:21:d4:1d:f3:b4:99:b6:01:fc:bb:60:63:5b:
3a:62:a9:79:18:95:33:24:43:c2:46:3e:e1:39:4c:40:94:f5:
bc:bc:04:fb:90:ed:18:9e:79:45:1c:0a:7c:c3:9b:50:e2:a3:
e2:c5:bb:50:37:70:14:d3:a5:1c:e3:a1:93:3b:b1:27:a0:2d:
24:e3:9d:f6:fa:d4:63:af:bb:f1:02:9f:b7:56:15:35:ed:da:
2f:e3:cd:4f:80:34:e5:d1:fa:e3:78:52:a7:1c:e1:70:35:c7:
4a:99:0f:bc:52:7b:a5:f0:7c:2d:2a:6e:f0:7e:bb:d6:b8:35:
9e:9e:e5:f7:d9:f4:05:36:01:bf:d5:e8:58:61:24:5f:4c:a8:
7a:2e:d1:1f:3f:d6:27:71:7d:93:7d:4c:36:d0:f3:c4:13:7e:
1f:26:a4:71:2c:65:ba:3e:90:0b:39:20:f5:c4:a4:31:18:e3:
e7:c0:91:b0:b3:34:37:17:14:c2:1b:da:59:ce:56:de:1c:93:
40:b7:53:29:b1:ef:0f:6d:0e:28:72:71:67:7d:ed:e8:b1:4f:
e8:82:d7:54:b8:74:6e:9a:15:b8:64:57:b8:09:67:64:e4:78:
c7:90:6b:c1:d3:15:d5:29:7e:ae:d2:db:5f:21:82:2f:23:79:
4a:9f:fb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:00:27 2025 by rpki-client