Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: 871tqIykYSeTa0Su2leifnYk2Cv5z6/bnPr8LxlTieQ=
Subject key identifier: 41:01:39:60:CA:B0:8C:20:FA:73:C6:34:B1:4C:BE:E0:E5:69:09:C9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4AB6CF73AA1DC1C73D182322347CB15D9DA6C791
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200019.roa
Signing time: Fri 18 Apr 2025 00:54:02 +0000
ROA not before: Fri 18 Apr 2025 00:49:02 +0000
ROA not after: Fri 17 Apr 2026 00:54:02 +0000
asID: 200019
IP address blocks: 181.215.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b6:cf:73:aa:1d:c1:c7:3d:18:23:22:34:7c:b1:5d:9d:a6:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 18 00:49:02 2025 GMT
Not After : Apr 17 00:54:02 2026 GMT
Subject: CN=41013960CAB08C20FA73C634B14CBEE0E56909C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:ba:d7:bc:c4:be:0c:f6:54:e0:37:bf:ac:
dd:81:42:18:95:63:88:81:e3:5a:84:43:0a:5a:35:
3d:9e:2d:15:e1:44:69:d2:6b:38:87:fb:f7:c6:8d:
e4:8b:a4:c4:78:a1:a2:25:d9:44:8d:73:85:57:66:
39:3e:b1:97:11:b4:89:39:9b:82:58:ac:6a:0f:48:
21:0b:06:23:52:70:cd:3d:9c:be:51:17:f9:c6:1b:
ea:ba:32:98:dc:18:5e:6a:85:3b:1e:81:da:ad:a8:
6d:94:9a:04:1d:81:74:b7:7c:a7:07:dc:8d:50:f2:
04:e5:c0:05:20:60:ea:95:b8:29:5e:47:c5:43:2f:
8d:24:aa:87:95:54:e9:75:a4:94:4e:aa:e5:22:9e:
93:cb:f8:52:8a:02:9f:8f:83:3e:89:c2:56:20:88:
31:a3:5f:59:f4:c0:7e:0e:f8:07:17:1b:d6:bf:b8:
83:f4:1f:e6:e8:23:c5:2a:e6:4f:a0:51:71:d8:bc:
b7:7a:01:51:65:67:42:64:4b:56:0c:31:8b:9d:16:
f2:c5:b4:e2:8c:4d:dc:ef:46:0e:00:f3:a2:41:05:
19:8a:55:e5:73:7e:7e:b6:a3:64:d8:5c:41:1d:2c:
23:e1:28:44:37:8e:c6:68:c2:91:73:70:a7:b2:3c:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:39:60:CA:B0:8C:20:FA:73:C6:34:B1:4C:BE:E0:E5:69:09:C9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ed:81:34:20:4a:65:81:ea:5d:2a:5d:ee:36:df:32:29:7c:
ae:91:07:15:d1:1d:d3:25:5f:d5:b7:85:f7:cb:ee:8b:e6:5e:
13:db:06:8a:f3:dc:49:67:f1:7b:21:c3:21:ff:c4:06:98:2c:
7e:8a:7e:33:57:c8:e5:98:a0:5c:0e:65:68:c7:88:f9:7f:56:
74:da:75:3e:7c:aa:4e:21:36:b7:e8:cc:69:53:41:77:e9:e1:
99:40:3f:44:b5:4c:d0:67:a7:30:e2:5f:19:15:5b:b8:d2:88:
4b:69:f2:7b:c7:15:2f:3a:1a:07:80:2e:e0:da:62:3d:1b:40:
63:29:56:8e:69:cc:d5:61:99:8e:ee:43:40:91:54:0c:dd:80:
7b:4c:01:7f:ea:b9:8a:f8:a2:d5:e2:88:47:5e:38:a6:98:76:
0a:e1:87:a1:4e:b7:e2:e0:1b:7e:7a:fe:34:95:78:42:ad:1a:
df:78:07:69:17:5a:e2:f1:42:a3:ec:ff:57:a3:86:18:b5:16:
32:39:96:57:e7:a5:70:b8:e4:51:d1:f4:34:6a:79:44:4d:d3:
53:6b:44:4c:a8:cc:70:ca:0c:c1:58:4e:6f:97:e2:7d:4d:a9:
bf:35:6c:a4:ff:da:15:19:6c:25:84:55:40:01:20:d1:ad:37:
7f:3f:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:19:22 2025 by rpki-client