Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: 2EuaSti4Fo94NFNQn47MnQStC+DcT0Olk3HzxDg70FU=
Subject key identifier: DF:45:EA:0C:91:06:BE:77:AD:DB:69:61:25:1A:FB:5F:DE:E2:66:CC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5567293E5A3437C6602B9314D952C8FD2946EEDE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
Signing time: Fri 21 Feb 2025 20:39:20 +0000
ROA not before: Fri 21 Feb 2025 20:34:20 +0000
ROA not after: Fri 20 Feb 2026 20:39:20 +0000
asID: 200636
IP address blocks: 82.24.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:67:29:3e:5a:34:37:c6:60:2b:93:14:d9:52:c8:fd:29:46:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 21 20:34:20 2025 GMT
Not After : Feb 20 20:39:20 2026 GMT
Subject: CN=DF45EA0C9106BE77ADDB6961251AFB5FDEE266CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:00:09:d7:4f:f1:65:f2:e5:92:47:9a:f5:
39:44:26:63:4e:c9:b9:fc:7c:f0:64:04:3f:27:9d:
01:5a:0f:e1:44:27:94:46:46:e1:98:49:06:99:05:
f7:9f:c3:56:d0:1b:76:6e:28:fb:6c:64:15:9f:57:
2a:94:50:2f:dc:8a:86:89:d6:e8:2d:9f:a1:79:e3:
18:f3:5e:60:f0:cd:d6:87:38:4d:35:1d:88:c6:0b:
20:b9:98:78:a5:f7:c7:ca:24:de:e9:ab:f1:55:29:
81:43:60:4b:95:ef:1a:1f:5e:b7:6a:9d:37:c3:86:
dd:0b:c9:17:63:64:c2:ad:30:13:15:12:46:1b:a6:
a0:89:cc:c5:19:76:de:61:87:b6:0a:fb:09:9e:73:
9f:2a:ff:da:c0:df:06:e4:4d:3d:93:55:e1:1a:e1:
96:bc:48:19:2c:9a:d0:c8:79:d9:7f:d0:a7:29:1d:
41:17:d5:a4:60:d1:bb:e8:c1:fc:e9:ad:52:34:42:
2a:35:98:24:b5:9a:96:6f:1b:25:c9:98:64:0a:06:
ef:dc:82:ab:cd:be:7e:36:98:09:85:71:64:be:9d:
47:08:dc:ec:2c:85:a2:f0:b3:1c:9b:6f:47:70:2e:
d6:63:a0:24:99:fe:c3:d6:e3:05:b2:c2:bf:10:66:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:EA:0C:91:06:BE:77:AD:DB:69:61:25:1A:FB:5F:DE:E2:66:CC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a4:a9:fb:df:17:2d:bc:4f:74:eb:93:1b:8e:6b:1d:a7:b1:
2f:6d:81:d9:3a:80:bc:1f:27:db:7d:83:7c:e8:a0:0c:5e:14:
14:93:ca:43:b2:9f:bb:93:d9:2a:8b:13:f1:e8:d9:75:df:77:
aa:d7:c7:03:6c:22:a8:a4:d9:4e:18:f4:47:24:44:bf:0b:c4:
86:05:27:8b:e0:3c:74:80:75:2e:2d:fc:65:83:03:f0:67:00:
9d:9f:95:a2:fc:69:a4:7c:71:03:b2:ee:5e:0c:e6:3b:05:58:
14:26:8d:41:25:76:33:64:b9:bc:21:78:31:5e:8a:2b:6b:4c:
67:e9:16:11:5d:49:69:6c:97:50:56:b4:04:42:6b:a3:4f:77:
99:64:79:37:ad:a7:6f:39:5c:67:0e:8d:06:09:18:ae:7c:5b:
7e:7f:9e:07:56:94:a5:e4:41:4e:88:2e:4c:35:df:e4:9b:14:
d3:3b:5e:38:8d:76:fa:5c:3e:cd:b5:f7:28:f8:fd:75:7c:f7:
c5:4c:ab:99:0f:5e:1c:69:22:58:d0:37:99:46:2f:b5:e1:1c:
31:2d:d9:de:39:77:28:00:76:72:c7:ee:ae:fa:9e:37:89:cf:
ce:87:f9:88:06:50:8a:51:44:84:22:2f:2a:a4:b2:05:ef:18:
cb:e5:db:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVWcpPlo0N8ZgK5MU2VLI/SlG7t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTAyMjEyMDM0MjBaFw0yNjAyMjAyMDM5MjBaMDMxMTAvBgNV
BAMTKERGNDVFQTBDOTEwNkJFNzdBRERCNjk2MTI1MUFGQjVGREVFMjY2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV4wAJ10/xZfLlkkea9TlEJmNO
ybn8fPBkBD8nnQFaD+FEJ5RGRuGYSQaZBfefw1bQG3ZuKPtsZBWfVyqUUC/cioaJ
1ugtn6F54xjzXmDwzdaHOE01HYjGCyC5mHil98fKJN7pq/FVKYFDYEuV7xofXrdq
nTfDht0LyRdjZMKtMBMVEkYbpqCJzMUZdt5hh7YK+wmec58q/9rA3wbkTT2TVeEa
4Za8SBksmtDIedl/0KcpHUEX1aRg0bvowfzprVI0Qio1mCS1mpZvGyXJmGQKBu/c
gqvNvn42mAmFcWS+nUcI3OwshaLwsxybb0dwLtZjoCSZ/sPW4wWywr8QZrS/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU30XqDJEGvnet22lhJRr7X97iZswwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhhV
MA0GCSqGSIb3DQEBCwUAA4IBAQA9pKn73xctvE9065Mbjmsdp7EvbYHZOoC8Hyfb
fYN86KAMXhQUk8pDsp+7k9kqixPx6Nl133eq18cDbCKopNlOGPRHJES/C8SGBSeL
4Dx0gHUuLfxlgwPwZwCdn5Wi/GmkfHEDsu5eDOY7BVgUJo1BJXYzZLm8IXgxXoor
a0xn6RYRXUlpbJdQVrQEQmujT3eZZHk3radvOVxnDo0GCRiufFt+f54HVpSl5EFO
iC5MNd/kmxTTO144jXb6XD7Ntfco+P11fPfFTKuZD14caSJY0DeZRi+14RwxLdne
OXcoAHZyx+6u+p43ic/Oh/mIBlCKUUSEIi8qpLIF7xjL5dsf
-----END CERTIFICATE-----
Generated at Tue Apr 15 23:19:52 2025 by rpki-client