Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: uLr+dlCMMEorsWQlDk83mpcUOFWw91WSsgMUMG0wmJA=
Subject key identifier: DD:75:BD:84:07:4A:21:4D:65:1C:A0:55:4D:6D:83:20:CD:54:DA:13
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6FA9BA6CDE7D35E02E7E50817FA358614EAC9F00
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
Signing time: Fri 19 Apr 2024 07:05:16 +0000
ROA not before: Fri 19 Apr 2024 07:00:16 +0000
ROA not after: Fri 18 Apr 2025 07:05:16 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a9:ba:6c:de:7d:35:e0:2e:7e:50:81:7f:a3:58:61:4e:ac:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 19 07:00:16 2024 GMT
Not After : Apr 18 07:05:16 2025 GMT
Subject: CN=DD75BD84074A214D651CA0554D6D8320CD54DA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:dc:e0:d3:00:d1:40:29:56:4e:08:a9:4b:
92:2e:69:0a:6a:03:fb:59:3e:9b:10:31:f5:b8:0c:
a5:e6:5b:8d:83:7d:64:ae:98:4f:6d:d3:b5:0e:10:
d4:95:90:68:26:ae:21:ef:e4:4c:41:43:22:72:1c:
1f:6c:3f:42:08:c8:cc:df:61:e2:0a:d3:72:b2:56:
91:ad:98:a2:f1:38:4c:ad:ba:f5:8a:32:9c:39:f0:
5f:6b:b9:6b:04:53:ca:cf:07:8e:f5:99:f2:8a:82:
65:ad:26:b3:de:04:4a:a6:92:d9:9d:e4:33:a1:a5:
a1:bb:1a:9e:9d:02:31:d1:51:a1:dd:f2:3b:88:e9:
be:58:cb:f4:ba:e8:9a:8e:3d:cb:7c:90:48:94:89:
0a:77:e7:ad:ed:33:f9:38:b4:19:f8:22:d4:ab:3d:
dc:6b:66:97:16:ac:4b:86:eb:51:17:ec:c5:35:93:
b8:15:27:5c:05:96:67:e1:3f:04:e3:82:ca:d8:71:
17:04:56:fc:91:df:db:ed:5f:0f:0c:fb:85:f4:1b:
16:ab:3f:cd:d6:fc:80:b9:1b:bf:71:15:20:c1:8e:
66:56:a1:c7:78:de:bb:9c:27:a4:34:07:b7:88:48:
e4:9c:f0:5b:bf:54:ab:58:a0:6a:65:30:54:b6:b3:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:75:BD:84:07:4A:21:4D:65:1C:A0:55:4D:6D:83:20:CD:54:DA:13
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5c:d0:ce:eb:38:d2:df:fd:b6:84:94:4b:20:11:1e:26:82:
dd:39:82:db:ba:df:8a:52:ff:eb:52:17:20:f0:6a:43:d8:f1:
9c:4c:b7:ad:0d:fa:be:b6:ca:63:2c:40:72:57:73:42:95:4c:
5c:a1:90:63:9d:28:98:09:13:d0:ea:2e:bb:a4:6d:00:ad:49:
af:da:0a:66:ca:9a:8f:92:5b:3d:80:f7:25:89:31:dd:8e:b5:
02:bb:dc:3c:e9:2a:4c:2e:bf:cd:f0:af:8b:da:e4:77:54:ff:
f9:cb:33:6e:b1:1e:64:17:d4:56:41:54:bf:c2:64:65:5d:a3:
d9:24:22:42:cf:64:8f:65:29:39:d3:f0:e4:27:fd:1d:28:b2:
db:f1:3c:ce:d1:21:d7:8e:2e:df:99:c8:98:26:cc:9e:95:34:
94:8a:5a:de:7a:e0:63:28:ef:83:b5:e1:a4:52:46:83:a6:e3:
43:d6:d0:c8:f4:45:eb:e9:3a:56:3b:ff:e3:0e:3a:32:20:e2:
2f:d2:d0:27:af:f6:d8:a3:ae:aa:3f:15:31:1e:38:48:98:7f:
ac:82:b2:65:d0:21:18:2c:2e:90:58:21:40:09:10:02:d7:73:
87:3c:c0:62:75:e9:a1:48:e9:35:45:02:8b:9d:7c:a0:2c:f7:
e4:b0:84:cf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUb6m6bN59NeAuflCBf6NYYU6snwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDA0MTkwNzAwMTZaFw0yNTA0MTgwNzA1MTZaMDMxMTAvBgNV
BAMTKERENzVCRDg0MDc0QTIxNEQ2NTFDQTA1NTRENkQ4MzIwQ0Q1NERBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcktzg0wDRQClWTgipS5IuaQpq
A/tZPpsQMfW4DKXmW42DfWSumE9t07UOENSVkGgmriHv5ExBQyJyHB9sP0IIyMzf
YeIK03KyVpGtmKLxOEytuvWKMpw58F9ruWsEU8rPB471mfKKgmWtJrPeBEqmktmd
5DOhpaG7Gp6dAjHRUaHd8juI6b5Yy/S66JqOPct8kEiUiQp3563tM/k4tBn4ItSr
PdxrZpcWrEuG61EX7MU1k7gVJ1wFlmfhPwTjgsrYcRcEVvyR39vtXw8M+4X0Gxar
P83W/IC5G79xFSDBjmZWocd43rucJ6Q0B7eISOSc8Fu/VKtYoGplMFS2sw5lAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU3XW9hAdKIU1lHKBVTW2DIM1U2hMwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAwMDE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuy
MA0GCSqGSIb3DQEBCwUAA4IBAQDNXNDO6zjS3/22hJRLIBEeJoLdOYLbut+KUv/r
Uhcg8GpD2PGcTLetDfq+tspjLEByV3NClUxcoZBjnSiYCRPQ6i67pG0ArUmv2gpm
ypqPkls9gPcliTHdjrUCu9w86SpMLr/N8K+L2uR3VP/5yzNusR5kF9RWQVS/wmRl
XaPZJCJCz2SPZSk50/DkJ/0dKLLb8TzO0SHXji7fmciYJsyelTSUilreeuBjKO+D
teGkUkaDpuND1tDI9EXr6TpWO//jDjoyIOIv0tAnr/bYo66qPxUxHjhImH+sgrJl
0CEYLC6QWCFACRAC13OHPMBidemhSOk1RQKLnXygLPfksITP
-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org