Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
File: AS201364.roa (raw, json)
Hash identifier: wJ48CAwRRdA+o2wp/Rvzq9K7twVTMTsOV+yjKna2uvI=
Subject key identifier: 35:73:11:9A:28:FE:AA:41:48:7E:19:E1:62:A3:77:EA:47:58:D3:87
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3428194273D136970B1B3886ABEF1FE55A888AC4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
Signing time: Mon 10 Mar 2025 22:21:11 +0000
ROA not before: Mon 10 Mar 2025 22:16:11 +0000
ROA not after: Mon 09 Mar 2026 22:21:11 +0000
asID: 201364
IP address blocks: 2a0f:85c1:8ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:28:19:42:73:d1:36:97:0b:1b:38:86:ab:ef:1f:e5:5a:88:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 10 22:16:11 2025 GMT
Not After : Mar 9 22:21:11 2026 GMT
Subject: CN=3573119A28FEAA41487E19E162A377EA4758D387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:98:7f:27:ca:c5:1c:ae:cb:b4:e3:61:b2:
d1:7c:5b:bd:87:84:62:23:ac:5d:63:6c:33:b7:63:
e8:b9:30:cd:88:a5:9e:77:9c:80:5f:3f:14:82:cc:
75:f9:0c:8a:0c:1e:a8:b0:b5:f8:4c:5d:74:37:df:
e8:49:ba:74:b1:73:05:9a:7c:1a:ae:c4:c5:c3:0a:
d5:13:4d:c7:97:25:cb:0f:ef:5b:42:aa:96:a7:1c:
51:c7:f4:62:b6:41:54:0a:e5:0d:21:a9:c3:ce:3b:
97:74:1c:a0:93:9c:4b:5e:c6:d8:77:d5:fb:23:16:
56:17:9d:74:29:a8:1b:58:1e:2d:5c:a2:7b:a6:15:
e1:cf:ff:42:b1:8f:00:bf:6a:01:cd:68:02:66:d9:
9b:05:ba:5b:66:64:ec:61:52:e2:d5:ad:69:ce:ba:
6b:c2:99:04:83:30:01:b6:33:4a:5e:d0:ee:86:f0:
f8:f8:94:74:78:ad:37:ba:6b:7a:fc:79:8c:f4:9e:
de:c1:b8:94:aa:65:f3:7d:39:a0:74:0f:3b:c5:1b:
5c:37:11:cc:ec:10:c6:9c:b6:70:bc:95:e8:66:04:
9f:dd:de:d4:94:51:7d:e3:c1:6b:b1:c0:af:e6:b5:
9f:c2:e2:5f:5e:11:87:db:62:bc:8e:a9:18:b3:f5:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:73:11:9A:28:FE:AA:41:48:7E:19:E1:62:A3:77:EA:47:58:D3:87
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS201364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8ce::/48
Signature Algorithm: sha256WithRSAEncryption
13:63:49:0c:7f:7e:da:72:54:08:61:1f:a8:e0:2f:4f:d1:75:
55:d0:03:56:45:53:0d:30:19:a6:1b:9b:20:a1:75:ae:41:e3:
4b:57:42:62:35:82:ac:bc:0f:1f:99:8b:cd:98:00:4b:07:5b:
b2:a7:de:23:9b:48:76:29:45:ac:db:52:89:af:63:d4:01:c6:
56:31:71:30:8d:ea:9b:06:5a:6c:c2:41:c0:ad:0a:4c:b5:9f:
c4:27:39:a5:a5:bb:fb:88:8c:f3:f9:2e:cf:8f:79:d0:f8:e1:
2c:cc:2c:e9:df:22:ae:b2:5e:6b:66:a3:ac:18:4a:5b:72:88:
60:d2:08:08:e9:78:f8:12:ce:b1:58:08:a7:fe:9e:fb:0d:32:
3e:4b:ea:db:5d:bd:12:21:b9:59:a0:9b:2d:d0:33:1d:fd:9f:
24:92:ae:ad:03:ad:69:2e:3a:d5:80:3b:0a:17:93:f4:56:9a:
fb:de:4c:d7:87:5e:97:9a:35:eb:b8:b1:8e:51:42:15:de:4f:
e6:52:fe:8a:53:aa:38:16:7c:77:27:c5:a2:91:be:23:bc:19:
7e:98:1c:2f:35:4b:2e:3b:5c:91:ae:7e:be:44:a8:da:11:31:
a7:b2:e3:a6:30:24:60:ff:69:f4:37:1f:b0:5e:eb:99:34:85:
5b:c8:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:14 2025 by rpki-client