Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: XyTma6oiRldXH5gdaNCExWGXZi+/I29GQdY44Z7BRs0=
Subject key identifier: 35:78:7F:7D:5A:7E:97:AB:91:13:E2:C7:12:F1:44:EC:75:70:04:4B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3872AF31F2DB647085AFACD12BC6DBD5F2AFD410
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
Signing time: Wed 05 Jun 2024 11:07:43 +0000
ROA not before: Wed 05 Jun 2024 11:02:43 +0000
ROA not after: Wed 04 Jun 2025 11:07:43 +0000
asID: 200017
IP address blocks: 141.11.10.0/24 maxlen: 24
141.11.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:72:af:31:f2:db:64:70:85:af:ac:d1:2b:c6:db:d5:f2:af:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 5 11:02:43 2024 GMT
Not After : Jun 4 11:07:43 2025 GMT
Subject: CN=35787F7D5A7E97AB9113E2C712F144EC7570044B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:d3:a8:38:8a:38:25:2a:a7:85:60:73:43:
38:9d:27:46:36:f1:48:11:63:bc:43:6b:de:9b:11:
cb:e0:02:fb:96:83:52:2f:02:b1:41:8e:7d:59:56:
e4:67:37:21:7e:54:b9:df:53:58:3d:ce:91:f5:64:
6e:44:23:1c:b9:a3:98:b3:3e:9d:05:0f:91:d1:92:
a7:53:75:65:53:28:bd:9e:d1:5d:85:64:75:15:76:
0a:bd:07:d4:b5:ba:10:5b:f1:c5:c6:08:4d:04:a0:
91:1e:44:f8:fe:f0:f5:a1:24:25:89:a0:93:c5:c5:
81:3e:bb:ba:b9:d7:dd:20:9a:e3:52:18:c3:d6:a3:
f4:7e:7b:7b:ce:18:83:09:f1:d6:3f:ee:48:e5:f6:
25:45:e1:bf:85:eb:36:0c:d3:01:26:4b:a4:c9:2f:
f0:ee:38:fc:a8:11:4a:83:ce:b5:ad:60:93:66:02:
ab:e8:7d:8e:8f:c7:cf:ce:6f:0d:03:9a:61:2f:fb:
f0:df:9c:42:e2:f3:e4:e2:f4:f3:96:ec:66:5d:b3:
51:7b:52:da:17:4a:c7:97:8a:fd:24:82:cc:cd:a2:
af:71:d3:6c:d1:67:e3:64:dd:c4:8f:b3:c3:cc:15:
19:71:ac:e4:17:de:f4:a2:c3:d4:ac:cf:54:76:31:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:7F:7D:5A:7E:97:AB:91:13:E2:C7:12:F1:44:EC:75:70:04:4B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.10.0/24
141.11.58.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7f:ba:16:c4:86:11:4c:55:ea:f5:a0:b0:99:89:b7:23:17:
3a:57:98:ae:d4:3b:ad:d8:c7:74:0f:c2:1e:8a:69:f1:40:61:
aa:64:72:6f:f6:2a:39:d9:de:a9:4a:7e:28:5a:12:60:d1:ea:
41:59:7f:27:63:df:4a:50:6d:43:91:36:8c:69:a1:12:84:77:
37:ca:1b:29:4d:ee:bf:e2:64:54:c3:eb:15:a4:3b:7d:61:e0:
35:ca:5d:c1:2e:5f:ed:b4:a3:ac:2b:f3:19:88:7a:95:86:b5:
18:26:8a:a6:79:fa:25:6a:48:ac:a4:85:ef:1c:56:87:a8:b5:
20:3f:8e:b9:43:e0:c3:3f:9b:4a:6c:16:d9:eb:ad:45:6f:01:
f6:6d:99:4f:46:2c:a5:9c:c1:94:f0:31:fd:0b:e1:e8:0d:17:
c4:a1:8c:bc:78:73:17:0d:cc:a1:2f:40:1a:21:cb:5c:8e:07:
3a:64:3a:ea:e0:38:15:66:b6:91:89:2e:9a:5e:42:33:98:8c:
c0:a9:c0:3e:77:77:cd:f3:dc:9b:a6:ce:8f:3d:71:a8:57:74:
30:51:d5:95:f2:8f:2a:a0:6b:80:7e:1b:9a:66:cf:15:65:a2:
41:c1:25:13:42:95:a3:54:8f:1c:f1:8d:0d:32:87:fd:2f:a9:
5f:8c:42:50
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUOHKvMfLbZHCFr6zRK8bb1fKv1BAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDA2MDUxMTAyNDNaFw0yNTA2MDQxMTA3NDNaMDMxMTAvBgNV
BAMTKDM1Nzg3RjdENUE3RTk3QUI5MTEzRTJDNzEyRjE0NEVDNzU3MDA0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAdOoOIo4JSqnhWBzQzidJ0Y2
8UgRY7xDa96bEcvgAvuWg1IvArFBjn1ZVuRnNyF+VLnfU1g9zpH1ZG5EIxy5o5iz
Pp0FD5HRkqdTdWVTKL2e0V2FZHUVdgq9B9S1uhBb8cXGCE0EoJEeRPj+8PWhJCWJ
oJPFxYE+u7q5190gmuNSGMPWo/R+e3vOGIMJ8dY/7kjl9iVF4b+F6zYM0wEmS6TJ
L/DuOPyoEUqDzrWtYJNmAqvofY6Px8/Obw0DmmEv+/DfnELi8+Ti9POW7GZds1F7
UtoXSseXiv0kgszNoq9x02zRZ+Nk3cSPs8PMFRlxrOQX3vSiw9Ssz1R2McDDAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUNXh/fVp+l6uRE+LHEvFE7HVwBEswHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAwMDE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjQsK
AwQAjQs6MA0GCSqGSIb3DQEBCwUAA4IBAQBDf7oWxIYRTFXq9aCwmYm3Ixc6V5iu
1Dut2Md0D8IeimnxQGGqZHJv9io52d6pSn4oWhJg0epBWX8nY99KUG1DkTaMaaES
hHc3yhspTe6/4mRUw+sVpDt9YeA1yl3BLl/ttKOsK/MZiHqVhrUYJoqmefolakis
pIXvHFaHqLUgP465Q+DDP5tKbBbZ661FbwH2bZlPRiylnMGU8DH9C+HoDRfEoYy8
eHMXDcyhL0AaIctcjgc6ZDrq4DgVZraRiS6aXkIzmIzAqcA+d3fN89ybps6PPXGo
V3QwUdWV8o8qoGuAfhuaZs8VZaJBwSUTQpWjVI8c8Y0NMof9L6lfjEJQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:15 2024 by rpki-client on console-ams.rpki-client.org