Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
File: AS199737.roa (raw, json)
Hash identifier: votVIHESxQDhupxt6WTGtF6nKqBQ0t9tYHzeweljHD0=
Subject key identifier: EB:EF:5C:D0:76:89:21:C0:34:14:D5:BE:A6:CE:21:70:69:1F:37:ED
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2B5C12623F537A20FC726632A461F299214D65C9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
Signing time: Fri 25 Aug 2023 15:19:02 +0000
ROA not before: Fri 25 Aug 2023 15:14:02 +0000
ROA not after: Fri 23 Aug 2024 15:19:02 +0000
asID: 199737
IP address blocks: 141.11.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5c:12:62:3f:53:7a:20:fc:72:66:32:a4:61:f2:99:21:4d:65:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 25 15:14:02 2023 GMT
Not After : Aug 23 15:19:02 2024 GMT
Subject: CN=EBEF5CD0768921C03414D5BEA6CE2170691F37ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:6b:52:6d:37:b8:18:77:f3:82:44:1b:17:
91:35:ab:b0:bd:66:9b:71:b8:a2:3f:75:83:b7:c0:
f1:d4:8d:34:60:0d:e2:3d:a3:9d:14:29:cb:c9:77:
9b:64:37:86:46:29:5b:dc:8f:cf:62:0c:19:38:3f:
7c:bc:55:d0:f5:92:39:d1:12:bf:14:cb:a2:cb:2f:
d9:02:df:dd:07:ac:bf:5e:14:aa:14:16:fc:22:de:
24:3e:28:1e:ac:38:42:dc:2a:b2:91:e8:ea:c0:8f:
90:58:2d:f7:15:61:8e:90:a9:25:a9:7f:2b:35:c8:
1d:72:77:8e:7a:3a:0d:d0:04:51:c0:ff:9b:ee:47:
78:a1:a0:1e:a7:98:7e:bd:38:48:2f:08:8a:fc:59:
c2:96:b3:46:b6:9c:c3:76:b0:aa:c4:3a:55:06:e4:
37:a4:66:c5:2a:a3:81:55:f1:d6:35:92:32:10:ed:
3f:da:ff:eb:38:2b:3b:e8:c8:13:48:57:26:db:83:
dd:bb:e2:a9:19:84:5a:13:cd:91:55:30:42:1f:fd:
da:8b:62:dd:6f:22:f4:b4:03:15:db:6b:8f:e2:d5:
71:f1:0f:66:35:17:5d:f4:d7:a9:25:5c:bb:52:d8:
71:8b:ec:c7:5f:86:c5:fa:ab:3a:f4:30:95:92:30:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:5C:D0:76:89:21:C0:34:14:D5:BE:A6:CE:21:70:69:1F:37:ED
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bc:6c:8e:98:6c:07:49:53:33:b7:c8:81:82:c6:6e:4d:9a:
29:4e:fe:b7:8f:fa:fe:fb:54:3d:11:fb:d1:df:83:44:bf:8a:
36:1f:e1:e2:82:00:d5:c7:21:e9:d9:4e:13:e7:75:79:52:05:
77:3d:28:4a:71:5e:20:99:7c:83:41:1e:5c:49:5b:d5:96:d1:
f8:8b:42:ae:fe:5e:dc:11:93:e2:3a:59:cf:ee:8e:ab:27:89:
ab:c1:1f:13:cf:5d:85:38:a3:98:ca:c0:ff:6f:34:90:65:bc:
a7:36:00:48:c4:fe:e4:34:db:52:b2:10:30:10:89:35:ed:70:
48:0c:50:dc:92:03:34:bb:d3:85:e2:dd:63:45:8e:0e:b6:9e:
41:9d:59:cb:be:55:55:87:b9:cf:12:61:f4:59:9a:8f:90:22:
d5:5e:39:7b:44:76:67:f2:76:b2:88:85:5f:5f:0a:19:3c:8a:
4d:af:46:ef:4b:10:09:4c:ab:da:63:e6:bf:9f:9e:e1:a6:15:
f6:88:d3:aa:b6:d9:3a:02:b5:ba:69:75:5f:49:c3:e9:44:2e:
98:ab:c8:97:22:ee:2d:7f:14:11:11:fa:31:06:ff:c1:97:ff:
4a:3a:79:80:ef:83:13:f2:4d:0d:f5:fb:18:11:e6:ac:ad:a5:
bd:e7:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:35 2024 by rpki-client on console-fra.rpki-client.org