Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: EqOh2iK67dkDu/O4C184iqTq08uwrO3FOlcGsmgzIEw=
Subject key identifier: D4:D8:29:F1:3F:F5:FE:FE:43:82:04:75:DA:90:8C:15:F2:3B:3A:A0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 26C0C13905BFC1B26989B8F8A089CE4B6A3219E5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
Signing time: Sat 04 Jan 2025 00:01:55 +0000
ROA not before: Fri 03 Jan 2025 23:56:55 +0000
ROA not after: Sat 03 Jan 2026 00:01:55 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c0:c1:39:05:bf:c1:b2:69:89:b8:f8:a0:89:ce:4b:6a:32:19:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 3 23:56:55 2025 GMT
Not After : Jan 3 00:01:55 2026 GMT
Subject: CN=D4D829F13FF5FEFE43820475DA908C15F23B3AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:68:2e:77:b0:75:f4:27:d8:0d:c0:eb:97:
24:52:b3:06:53:96:89:0a:74:a3:75:07:c8:31:5a:
e9:5e:2a:77:43:b4:6f:4a:28:8c:33:7e:2c:08:cb:
3e:67:2a:99:8b:7d:69:eb:c2:c4:09:84:51:d7:6e:
27:3e:d0:5e:2c:57:06:cc:3d:66:63:d6:86:ec:07:
b5:90:52:99:c3:00:cb:53:03:6d:47:02:68:99:60:
f7:0c:5b:47:65:b3:9c:e6:1a:54:b3:b8:f7:b9:06:
cc:70:87:77:4a:d8:3a:c4:ce:6d:db:d1:35:bc:1a:
ef:1b:d7:84:95:8b:f2:66:55:ab:3a:d6:92:ca:9e:
8d:f5:74:12:0e:09:d4:61:d7:ff:ef:88:9b:69:12:
ef:99:b8:9f:0f:b8:9b:84:ba:5d:95:85:d3:95:99:
da:14:4b:57:42:c7:b2:d0:72:b2:c1:61:94:f4:08:
9c:c5:b0:37:ab:cb:fa:e2:00:ad:c8:20:02:4e:31:
10:e0:5a:8e:95:88:ba:39:13:24:cf:b3:6e:27:e3:
8d:c4:9e:5a:71:a5:a5:fa:7e:30:1b:20:46:cc:a9:
d1:90:f2:c5:11:09:03:82:ad:e2:af:3f:d2:98:5d:
55:b4:2b:84:83:4b:fa:54:6d:29:bb:97:77:c8:42:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:29:F1:3F:F5:FE:FE:43:82:04:75:DA:90:8C:15:F2:3B:3A:A0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4a:bc:a8:9c:23:b4:21:2b:12:fc:1c:48:ce:cf:3d:0b:28:
66:39:23:60:2c:f2:9b:ad:eb:8b:60:b0:d6:7f:58:f3:d2:88:
e9:33:97:e8:30:40:4f:f0:c0:4d:b9:61:88:4b:06:12:5d:3a:
c9:d5:74:9e:a3:4a:c6:b0:d4:8e:c1:bb:91:14:72:5e:04:4a:
21:dc:31:7a:98:60:36:e5:55:a2:f1:c7:b2:57:8f:fe:d8:6a:
13:d9:4b:69:b3:ac:2a:6f:e3:e5:d7:b0:96:f0:d6:6d:6a:47:
d9:41:bd:04:66:c4:21:4c:39:eb:91:e5:c0:3a:6b:03:73:c8:
7c:ef:d1:b8:03:32:0f:3a:c5:d1:2d:56:6c:b4:84:d5:6e:43:
b9:b2:9e:ae:f7:99:55:cd:e4:7a:27:b3:f7:bb:ca:cc:f1:e7:
36:b6:c5:7e:fe:0f:70:d2:df:c7:43:42:fc:01:e1:7f:43:02:
f4:f0:81:94:42:f2:d8:40:2c:d9:9d:40:69:2b:44:42:eb:11:
8e:af:8a:35:c9:83:b5:63:8c:c4:8d:39:dd:47:70:c3:8b:4d:
19:81:7b:a9:21:38:6a:a4:98:e0:10:bc:2b:5b:d8:48:e5:3b:
98:33:68:9f:03:fb:ea:17:d3:ac:a4:2e:06:83:be:78:a2:08:
fc:30:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:29 2025 by rpki-client