Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: 9d9SSVyciRKfbwAW3dePa5t9teJNa9NDPmPQ185BPzU=
Subject key identifier: DF:C0:74:95:9A:3F:1C:CE:4E:36:3B:C9:FD:9B:7D:BE:1D:B8:16:62
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 09C3A32BFB8581A0580876E31EED47DF01FB63A4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
Signing time: Tue 25 Feb 2025 10:51:40 +0000
ROA not before: Tue 25 Feb 2025 10:46:40 +0000
ROA not after: Tue 24 Feb 2026 10:51:40 +0000
asID: 200017
IP address blocks: 150.241.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c3:a3:2b:fb:85:81:a0:58:08:76:e3:1e:ed:47:df:01:fb:63:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 25 10:46:40 2025 GMT
Not After : Feb 24 10:51:40 2026 GMT
Subject: CN=DFC074959A3F1CCE4E363BC9FD9B7DBE1DB81662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:67:87:ac:93:a2:b1:fd:21:a7:27:96:82:
62:54:a4:35:df:b6:8e:cd:4a:63:d8:63:0a:39:a9:
6b:82:08:25:c6:cb:4d:ab:63:ef:eb:b0:41:08:7a:
b0:2e:e4:8f:49:19:ac:f9:97:74:3e:4a:80:b8:f2:
75:5f:f0:7d:24:03:1e:41:38:95:1c:42:f8:a1:db:
7e:b1:86:1c:bd:bc:58:59:ba:79:e3:c9:96:aa:04:
0d:b7:70:86:25:77:b8:9b:e3:33:6e:b8:e0:d1:ba:
44:16:eb:d8:ed:c9:ac:26:0f:87:96:16:e7:ee:be:
55:dc:5f:ff:e1:f1:11:3d:f9:71:fa:93:68:ef:a2:
62:69:08:f1:dd:04:c9:8f:61:79:a4:08:fa:80:a0:
88:f2:b6:9c:0a:ec:c8:49:15:a4:2f:e1:bb:77:c8:
94:31:a5:12:ef:0b:36:39:40:d0:66:cb:82:b3:ac:
6d:bc:52:43:bf:25:8a:aa:7e:51:6b:00:50:9a:f6:
ce:a5:f8:03:c1:ef:6c:de:33:0a:9f:b1:9e:54:13:
b6:95:47:7e:3b:27:d2:06:0f:bb:1c:56:51:75:ea:
c6:55:4b:6c:ea:f5:fd:3a:a8:ec:74:29:e9:7b:87:
ad:4f:74:e6:bb:1d:28:ac:40:4a:11:bd:af:f9:1f:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:74:95:9A:3F:1C:CE:4E:36:3B:C9:FD:9B:7D:BE:1D:B8:16:62
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:32:6f:3e:7d:81:4e:93:4a:91:c4:0d:77:93:a1:ff:55:49:
db:5a:86:f1:d6:53:ea:b8:29:67:1e:cc:52:71:9f:60:8e:e7:
0c:d2:3b:b0:e0:3d:2d:3f:73:f1:37:49:59:47:79:fa:19:2f:
f7:19:5a:50:b2:91:e6:d6:39:0b:54:f5:69:8b:2f:fe:e7:6e:
ab:a0:57:19:86:5f:9c:1c:b2:70:19:a5:0d:a5:a8:01:c6:a8:
fd:65:c2:92:12:5d:6b:07:fa:9f:65:fc:89:a6:02:4d:01:f1:
0c:9f:b5:22:a2:b3:b2:9d:cc:7a:ba:eb:f3:ef:24:ed:a9:de:
3e:52:6e:23:6b:6b:e1:78:b2:7c:39:fd:e3:7d:33:04:2d:b6:
8c:8a:3b:d0:5e:0f:5e:2e:84:83:c2:5e:3e:2b:98:ef:11:25:
dd:3d:fa:38:ee:23:3f:5a:b1:65:58:d2:d3:37:a6:c7:a9:a7:
c0:98:b8:90:f2:d6:8d:79:81:4c:e0:50:e2:0f:16:7f:c8:96:
a0:58:32:88:8a:a5:b4:f3:c8:cc:0b:3e:0c:12:19:c3:db:e3:
b6:4b:67:fb:90:03:30:71:fd:da:e6:e8:4c:89:32:48:9f:7c:
7c:70:1d:92:12:86:ab:81:ad:c1:e1:1a:b8:81:24:f0:6b:4b:
2d:c3:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:17 2025 by rpki-client