Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200088.roa
File: AS200088.roa (raw, json)
Hash identifier: 3T9PrXaVdgSkPWM40lTANb9hh4tLQ6+988KnHlE/d8Q=
Subject key identifier: EB:A3:1E:50:67:DA:B1:7E:29:A3:6D:98:58:29:05:0F:4D:F4:B0:15
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5AE13D15FC9FC259FA152C829E20C73AD93CD0F9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200088.roa
Signing time: Thu 28 Nov 2024 14:35:58 +0000
ROA not before: Thu 28 Nov 2024 14:30:58 +0000
ROA not after: Thu 27 Nov 2025 14:35:58 +0000
asID: 200088
IP address blocks: 179.61.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e1:3d:15:fc:9f:c2:59:fa:15:2c:82:9e:20:c7:3a:d9:3c:d0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 28 14:30:58 2024 GMT
Not After : Nov 27 14:35:58 2025 GMT
Subject: CN=EBA31E5067DAB17E29A36D985829050F4DF4B015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:bd:1a:c1:1c:54:0c:6f:61:78:48:ea:e5:
b7:38:26:90:bb:ec:7f:ab:d7:bc:6b:7b:90:25:f4:
1b:f0:3f:7e:c7:c9:cd:99:77:0b:24:ff:39:13:2c:
62:bc:6d:90:a4:b3:f0:cc:e7:28:80:6b:30:68:b5:
77:01:ab:a5:f8:86:af:0f:ee:9a:68:da:50:c9:66:
76:22:8d:70:11:9a:9f:5e:e8:1a:93:7f:20:e5:f4:
5e:12:20:f3:a4:a2:bf:34:36:9f:2b:88:ca:7c:7f:
53:b0:f1:67:cf:b1:c4:ab:26:d4:df:fe:92:4c:11:
77:30:26:a9:bf:21:de:0f:8c:ca:9e:86:3e:60:3b:
f8:20:30:53:8e:da:5a:9f:25:b5:20:8e:03:36:86:
32:e9:ca:4c:2b:ca:43:1e:c6:41:46:47:c9:6b:cb:
31:bb:44:86:20:c4:3c:f0:2f:5a:47:e0:76:2a:33:
e0:84:8b:10:c8:f4:aa:d6:8f:ae:40:17:03:e4:60:
09:9f:5c:0d:19:50:9b:00:68:36:17:87:c1:78:50:
69:9e:cc:8b:1a:29:7c:04:34:65:c3:49:3b:df:7e:
bf:bd:78:7c:6f:1e:17:0a:1b:4a:06:ee:97:6a:d7:
a5:0e:01:0d:69:9d:ea:b9:fa:46:5e:bd:cd:bb:33:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:1E:50:67:DA:B1:7E:29:A3:6D:98:58:29:05:0F:4D:F4:B0:15
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.152.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ce:80:f0:20:2a:77:36:29:41:3b:e0:5c:ee:59:cf:a8:ed:
64:d4:06:6d:2a:35:10:b4:5e:fb:b2:09:18:d2:98:db:2e:89:
04:0b:35:c0:aa:8c:ed:1c:c5:16:42:ab:9d:d9:d5:59:ff:a1:
d6:bd:15:0f:a1:4f:6d:6a:dd:58:f4:bc:e9:0b:74:ba:91:3d:
ab:29:5b:c9:1a:ee:91:c6:2e:7b:13:28:1c:97:b9:68:a9:a7:
95:dd:51:c2:25:1d:b5:54:7b:8e:1c:b8:9c:01:34:21:10:5d:
c8:a5:3c:a7:2c:a1:bb:be:8e:a0:40:7a:15:e0:0e:26:9d:c9:
0b:0a:ed:ad:5e:47:b7:fb:d8:32:93:fc:a7:2b:44:ad:a8:7c:
fd:74:73:71:a3:d7:1b:9f:61:3a:27:75:f8:ec:02:7d:4a:3a:
a9:04:88:71:bf:71:74:dd:b3:6e:16:6a:ac:ef:ec:44:b6:ac:
ed:8f:9b:85:a4:c7:e6:05:52:ee:8e:1d:2c:df:e0:47:04:3b:
e9:95:aa:c5:98:4c:3f:95:dc:95:62:3d:2a:e3:62:f6:46:93:
5d:0c:e8:84:80:29:de:51:20:36:b3:7f:fa:9f:0e:9d:a6:d6:
81:d4:77:7c:43:bf:2d:8e:b3:11:d2:c3:2d:d4:38:a1:b0:21:
65:d5:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:00:30 2025 by rpki-client