Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207388.roa
File: AS207388.roa (raw, json)
Hash identifier: A5/7cpXI6uKWlO2eHsd2wyt6/9u/+E5nJ7G2VTnHQxY=
Subject key identifier: EA:A6:8D:8A:04:B1:A0:E3:A7:FB:84:CB:DA:3D:AB:3E:C1:63:0C:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 63842785B88C32DE0678AAD8DA1B56CA7FBC7245
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207388.roa
Signing time: Wed 01 Jan 2025 20:22:50 +0000
ROA not before: Wed 01 Jan 2025 20:17:50 +0000
ROA not after: Wed 31 Dec 2025 20:22:50 +0000
asID: 207388
IP address blocks: 150.241.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:84:27:85:b8:8c:32:de:06:78:aa:d8:da:1b:56:ca:7f:bc:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 1 20:17:50 2025 GMT
Not After : Dec 31 20:22:50 2025 GMT
Subject: CN=EAA68D8A04B1A0E3A7FB84CBDA3DAB3EC1630CE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:fc:5c:cb:3a:59:2c:47:12:c4:c5:56:4b:
f1:a8:77:2c:14:a0:62:f5:90:f9:25:d2:5d:05:08:
2a:31:fc:c1:bb:77:af:a8:e9:87:86:a8:cc:ec:e5:
0d:41:2b:12:a1:c9:a9:10:b8:03:05:b6:03:d5:23:
09:72:1c:05:77:88:3e:6b:3a:25:74:25:c1:30:49:
a0:6d:22:c2:3d:a7:91:89:48:94:be:af:5c:b0:32:
78:ea:36:19:63:ce:b3:fb:8b:98:91:a1:db:2a:e1:
3a:4f:1f:c2:0a:bd:2f:74:4f:09:6a:9a:9d:2d:c9:
ab:0f:fd:9b:90:d0:7e:8b:49:8e:d5:e7:bf:22:81:
24:b3:67:68:be:70:ac:9d:84:f3:88:34:0c:b8:6b:
2e:86:36:2f:23:32:fd:ae:a4:ab:c4:3b:b5:f1:65:
9f:f9:27:37:37:d2:c0:06:41:dc:ef:12:15:fd:90:
7f:f9:c1:9c:02:ca:a7:a8:34:b0:a9:b1:18:c9:10:
00:b9:74:ea:14:d7:57:a3:b3:ac:a4:25:18:f1:93:
cb:fb:3a:10:94:65:e8:f7:1e:9b:8d:bf:85:bd:1f:
1d:e5:7e:86:32:19:6f:9c:8e:1a:17:68:5e:93:a9:
e5:a0:08:12:74:5f:58:bd:73:19:ef:48:3b:79:68:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:8D:8A:04:B1:A0:E3:A7:FB:84:CB:DA:3D:AB:3E:C1:63:0C:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207388.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.198.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9a:d5:09:d8:73:93:83:0b:2f:5f:ce:aa:b2:63:51:cd:bc:
f5:ea:b2:db:75:71:cc:7e:08:5f:bb:7c:88:fd:20:a1:c1:49:
23:51:d3:e7:94:63:32:17:22:ab:90:0b:1a:09:1a:28:72:d5:
20:92:01:90:e1:8f:07:47:d3:84:00:13:f9:1b:6e:31:6f:04:
ee:98:7b:26:99:3b:ff:b6:2b:33:69:60:2d:48:3e:dd:b9:be:
b3:48:09:55:14:0d:a2:37:b1:d4:0a:02:26:34:dc:a8:38:a5:
34:89:1b:6b:8f:75:11:26:31:58:67:c2:4a:f0:7b:eb:19:52:
71:d4:a6:81:67:51:60:84:b9:a2:ce:3a:15:44:42:40:84:0f:
99:1b:3f:47:74:2b:09:d9:f5:10:a5:7c:98:13:e1:dc:c8:d8:
99:e6:11:b7:f4:68:67:df:84:1d:76:6d:0c:8f:99:52:a3:2c:
65:5f:58:c5:fd:fa:9d:94:2c:c9:55:51:0c:9f:d0:ba:35:41:
ed:d8:23:b3:3c:50:1e:4d:b1:4f:5c:72:a7:ba:df:bd:90:7e:
81:41:62:29:52:1d:f3:88:18:97:e0:a0:ae:9f:1e:52:08:b8:
c5:19:2e:60:8d:c8:2a:f5:83:62:4e:07:1e:94:e6:72:1d:37:
2c:8e:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:26 2025 by rpki-client