Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa
File: AS207338.roa (raw, json)
Hash identifier: wz4HlIWWSGhlFdhFlzslitp794hbep2Y+JIYM/De0Vs=
Subject key identifier: 55:A1:BE:4A:5A:45:71:2F:03:42:8B:FF:4B:D3:59:C9:07:5B:37:70
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5FB5DAA53089D60DAE88298730BAE3E024D74DB5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 207338
IP address blocks: 2a14:7581:f50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b5:da:a5:30:89:d6:0d:ae:88:29:87:30:ba:e3:e0:24:d7:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=55A1BE4A5A45712F03428BFF4BD359C9075B3770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:ab:61:bb:b0:2e:87:2e:cb:d3:ce:82:6c:
78:e9:77:2b:b7:9b:73:6e:58:87:a7:5d:ff:9e:35:
07:ff:68:b4:78:c4:9b:a6:29:16:4c:bc:16:ac:96:
9a:52:21:ea:12:ec:b4:2c:76:06:fa:71:70:f3:ab:
f9:89:a7:37:fe:5d:f3:1b:9c:f4:db:cb:3b:e8:75:
5e:b5:f5:32:47:24:b0:a2:5b:37:06:b6:13:57:0e:
4a:e0:84:14:7a:a4:e1:c4:e4:09:39:62:d0:f0:a3:
45:c3:b8:26:e1:65:33:90:14:2e:0c:f5:80:05:26:
63:f1:66:42:f3:c8:bc:ce:9f:f2:ee:c0:99:8d:d8:
29:b4:55:b9:bf:51:4e:64:3c:de:f6:92:c6:c9:e3:
3a:41:95:90:61:fd:a8:11:62:c9:92:f8:05:3c:45:
71:81:fa:35:f4:ef:28:08:d5:ba:ec:20:51:92:95:
6b:d1:0d:2b:ed:c1:09:b9:cd:4b:f0:8e:22:e5:d1:
17:b7:92:b6:0a:da:29:3b:6b:bb:02:d1:86:3e:88:
07:81:bf:e3:f9:6f:3b:c1:67:95:3a:21:b3:ab:70:
6a:85:24:04:b3:a3:1d:c4:14:ad:f4:12:d0:a2:81:
a5:c5:f4:a4:b2:87:51:99:ff:12:87:07:3e:91:e3:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A1:BE:4A:5A:45:71:2F:03:42:8B:FF:4B:D3:59:C9:07:5B:37:70
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f50::/44
Signature Algorithm: sha256WithRSAEncryption
39:03:9c:6f:d0:41:d7:ad:a7:27:b3:f0:61:e6:0b:a0:f4:df:
6d:c6:00:e6:4c:80:2b:7a:7c:93:67:96:6d:98:0c:c7:43:de:
8b:73:2e:37:38:b5:5a:f4:12:d9:de:49:0d:53:b7:8b:01:f6:
a3:7b:c8:96:ab:21:2e:bc:04:46:b3:5a:6d:8d:99:37:c2:74:
a2:b1:52:69:f0:e8:7f:06:3e:42:9b:30:69:d5:f4:b8:2d:58:
c0:0a:84:24:17:f8:e9:6f:0f:12:14:5b:94:d9:7f:15:a6:bb:
62:40:3c:6d:78:96:8f:06:10:5e:95:a7:28:e1:29:7e:1a:13:
40:c6:ed:61:2b:5c:1c:8c:a2:a3:7f:9a:fe:71:60:0f:d7:29:
40:f6:5d:49:38:1e:3b:30:b2:09:d8:05:9f:5f:e8:00:9e:fe:
9b:60:6c:34:bb:bb:08:5e:52:bf:68:d5:02:9a:18:c0:7a:8c:
54:fd:c8:ba:ed:2e:6c:10:7a:fd:81:69:34:f7:ff:01:a4:e2:
6f:67:d0:0f:29:3d:2f:fb:ad:1f:04:32:02:f5:3b:90:46:36:
b0:88:53:fa:f1:b1:8d:a5:9b:9a:34:be:75:44:9e:6d:50:d2:
38:58:85:c9:9b:1d:83:04:db:1e:2e:eb:7d:35:1a:0a:ab:b1:
d3:ed:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:56 2025 by rpki-client