Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
File: AS200260.roa (raw, json)
Hash identifier: icmikDds/qfeexF5o0cOf+JydU66vK1UJ+vdrFAnS7w=
Subject key identifier: F2:ED:1B:1F:9C:B2:E5:D2:AD:13:BF:51:46:10:C8:98:1C:42:D5:FB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 186BB01DFB2095EABD397167131B1528B6A921CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
Signing time: Thu 23 Jan 2025 11:22:57 +0000
ROA not before: Thu 23 Jan 2025 11:17:57 +0000
ROA not after: Thu 22 Jan 2026 11:22:57 +0000
asID: 200260
IP address blocks: 82.27.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6b:b0:1d:fb:20:95:ea:bd:39:71:67:13:1b:15:28:b6:a9:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 23 11:17:57 2025 GMT
Not After : Jan 22 11:22:57 2026 GMT
Subject: CN=F2ED1B1F9CB2E5D2AD13BF514610C8981C42D5FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:1d:3f:64:aa:68:68:26:97:7a:01:fe:00:
91:6e:4f:ba:27:36:88:57:e0:7a:39:fc:55:98:8f:
eb:94:a3:21:11:e0:fb:52:ce:9d:e3:bb:9c:19:06:
42:d5:da:ab:05:60:e1:27:77:1f:9c:84:bd:28:56:
27:5d:6d:63:10:96:31:87:31:78:ea:b7:35:9b:1e:
01:12:52:08:8c:b5:fe:5d:03:e6:c9:f2:db:0d:8e:
63:e9:e7:bf:6a:24:5c:72:ae:85:62:2b:58:4e:bc:
a8:ea:b9:bf:94:2a:68:c4:3a:6f:67:28:46:20:1e:
ef:fc:01:b5:a8:62:0d:d5:57:5b:23:52:94:ee:ea:
f2:01:ad:d8:ff:24:4b:a6:70:88:a7:55:1b:a1:47:
69:ae:13:e2:04:bb:51:8e:1a:28:30:ea:ba:b2:69:
3b:a6:dc:85:8c:f1:9e:f7:41:71:9c:7b:fd:96:bf:
d5:f8:d3:47:5f:62:ae:7c:c9:8f:a6:0d:1b:ee:3e:
09:38:12:c4:2e:22:13:53:e7:50:59:4a:78:1b:26:
3e:8d:b3:10:9f:57:96:99:a3:3e:7f:68:12:22:78:
57:b0:0d:fd:10:8b:ec:5e:dc:e1:c5:8d:8a:03:81:
05:59:08:e6:25:da:95:72:b5:02:c7:07:5f:b8:10:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:1B:1F:9C:B2:E5:D2:AD:13:BF:51:46:10:C8:98:1C:42:D5:FB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.23.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f4:2f:16:7c:2b:92:cd:41:fa:5f:2f:79:db:8e:7b:82:4b:
f5:a2:38:2e:fc:18:3b:a0:ba:eb:dc:d9:7e:1f:49:58:bd:87:
03:3f:2f:12:87:b8:bd:e2:54:e1:c9:16:2d:92:de:77:71:0c:
e0:42:e7:b1:dc:7c:98:7f:46:5f:8f:93:57:ab:b9:29:1f:2c:
57:47:f9:22:da:0a:be:a7:c9:0f:d9:10:99:6a:b8:bb:9e:34:
b2:02:f1:55:2b:e3:04:57:05:20:f7:17:3e:bc:03:24:3a:a5:
67:57:80:f7:d4:5c:fb:b7:13:97:36:a4:7b:48:dc:b2:42:1a:
13:be:44:97:2f:db:b1:5d:0e:11:68:b2:35:09:fd:03:1c:50:
84:bb:b8:62:65:5b:7d:e2:f1:e1:71:bc:ef:1b:ee:61:86:32:
7c:ce:f9:90:fb:d8:9f:93:04:4f:3f:b5:30:0b:05:77:2d:77:
1e:78:ed:87:41:06:85:dc:15:bd:dd:08:ef:12:99:d7:23:86:
71:17:a3:d9:e7:4f:bb:ae:ea:09:94:03:71:c3:7e:06:7c:93:
9b:5d:88:d1:01:44:4f:eb:01:7e:b5:e4:0e:47:b1:9f:ac:93:
4f:95:c0:0c:e0:f8:fe:f2:07:f9:ca:80:c2:d5:9e:59:20:fe:
0f:ab:70:55
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGGuwHfsgleq9OXFnExsVKLapIcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAxMjMxMTE3NTdaFw0yNjAxMjIxMTIyNTdaMDMxMTAvBgNV
BAMTKEYyRUQxQjFGOUNCMkU1RDJBRDEzQkY1MTQ2MTBDODk4MUM0MkQ1RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDth0/ZKpoaCaXegH+AJFuT7on
NohX4Ho5/FWYj+uUoyER4PtSzp3ju5wZBkLV2qsFYOEndx+chL0oViddbWMQljGH
MXjqtzWbHgESUgiMtf5dA+bJ8tsNjmPp579qJFxyroViK1hOvKjqub+UKmjEOm9n
KEYgHu/8AbWoYg3VV1sjUpTu6vIBrdj/JEumcIinVRuhR2muE+IEu1GOGigw6rqy
aTum3IWM8Z73QXGce/2Wv9X400dfYq58yY+mDRvuPgk4EsQuIhNT51BZSngbJj6N
sxCfV5aZoz5/aBIieFewDf0Qi+xe3OHFjYoDgQVZCOYl2pVytQLHB1+4ELADAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8u0bH5yy5dKtE79RRhDImBxC1fswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwMjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhsX
MA0GCSqGSIb3DQEBCwUAA4IBAQAx9C8WfCuSzUH6Xy952457gkv1ojgu/Bg7oLrr
3Nl+H0lYvYcDPy8Sh7i94lThyRYtkt53cQzgQuex3HyYf0Zfj5NXq7kpHyxXR/ki
2gq+p8kP2RCZari7njSyAvFVK+MEVwUg9xc+vAMkOqVnV4D31Fz7txOXNqR7SNyy
QhoTvkSXL9uxXQ4RaLI1Cf0DHFCEu7hiZVt94vHhcbzvG+5hhjJ8zvmQ+9ifkwRP
P7UwCwV3LXceeO2HQQaF3BW93QjvEpnXI4ZxF6PZ50+7ruoJlANxw34GfJObXYjR
AURP6wF+teQOR7GfrJNPlcAM4Pj+8gf5yoDC1Z5ZIP4Pq3BV
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:53 2025 by rpki-client