Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa
File: AS209043.roa (raw, json)
Hash identifier: UDHw5wLERYgxz2biPjD9ZvPlgJpydRD2XEWIyhMyIcQ=
Subject key identifier: DA:50:E6:D0:C8:C9:29:2A:00:E6:B9:C8:67:B0:70:3A:DD:DC:65:75
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0B4199A110086740571639BA972D19F5E3093610
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa
Signing time: Wed 19 Feb 2025 11:03:45 +0000
ROA not before: Wed 19 Feb 2025 10:58:45 +0000
ROA not after: Wed 18 Feb 2026 11:03:45 +0000
asID: 209043
IP address blocks: 141.11.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:41:99:a1:10:08:67:40:57:16:39:ba:97:2d:19:f5:e3:09:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 19 10:58:45 2025 GMT
Not After : Feb 18 11:03:45 2026 GMT
Subject: CN=DA50E6D0C8C9292A00E6B9C867B0703ADDDC6575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:87:c9:03:fa:19:97:ca:a9:f9:4e:c2:03:
4b:85:08:26:02:88:85:0f:2c:b3:07:73:8c:b3:c4:
80:9d:e5:9f:a0:23:cd:23:29:dd:39:60:ed:cc:3b:
65:0b:4c:9f:29:8c:8a:8f:4c:a7:8e:22:b9:a8:4b:
f2:30:09:ab:fd:68:3b:06:60:54:6f:f3:62:ba:dc:
42:2c:cf:1d:ea:21:78:9e:6a:d9:96:69:ce:5d:c8:
4b:53:41:be:94:ed:7d:9c:6d:b4:d1:67:64:85:6b:
bf:3d:32:89:dd:4a:51:ef:85:6a:a0:47:de:36:06:
81:3a:09:d3:e6:9d:78:97:09:9a:cd:d6:10:fe:d6:
b5:df:4e:6b:4a:c5:0a:c0:ff:5e:36:e3:c9:0a:e8:
1a:20:af:ac:a8:24:fd:d1:4e:37:c1:7d:18:88:5a:
ea:39:b6:49:7f:4f:02:9e:7f:93:e1:fa:5b:a7:09:
a6:bc:27:db:48:6c:e2:6a:58:16:5b:c9:7a:e7:18:
06:02:ff:dd:d0:97:af:d0:26:88:f7:dd:b2:f3:61:
c9:2b:d3:a4:34:5c:5f:98:48:0d:88:d0:cc:22:f8:
db:66:1c:16:15:e5:49:b6:03:db:b0:6e:fa:cc:ab:
ef:8c:71:4b:ae:59:47:bd:6c:f0:43:b6:a4:2e:62:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:50:E6:D0:C8:C9:29:2A:00:E6:B9:C8:67:B0:70:3A:DD:DC:65:75
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS209043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.125.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a2:ba:8b:1a:25:77:3d:cd:91:7e:fa:44:97:eb:1a:f1:9b:
d5:c3:e7:05:d7:5d:15:5c:00:a0:3f:6b:5f:df:15:6f:fb:01:
6c:d0:34:67:2a:d1:0d:79:a4:b1:d6:8a:36:c7:43:b4:29:0d:
85:4c:08:87:2c:4d:27:ad:be:86:6a:41:a9:b2:79:2a:27:42:
cb:ef:0c:71:ee:fb:47:a7:2d:bf:49:99:08:c3:80:e5:2c:79:
c8:76:b2:82:39:30:72:ef:ae:7c:4f:9e:31:20:9d:70:b8:d7:
e4:88:ac:38:5a:7b:f4:65:39:72:8d:2e:14:4d:39:77:af:fc:
6f:c5:de:e6:bd:fd:41:db:08:82:12:e6:b9:88:9d:39:0e:0f:
16:6c:55:22:2d:58:76:37:fa:5f:0c:1e:ef:9d:0b:29:22:e2:
e6:9f:18:f9:d5:d9:81:96:5f:41:b5:c2:0c:57:e7:e0:e9:76:
cd:cf:be:1c:71:8b:f2:e1:09:4f:de:cb:cc:f4:3a:72:f3:b8:
e5:0a:64:f4:21:02:6e:7a:f1:ed:d1:be:f5:b7:c2:97:80:cb:
74:91:e9:67:3a:d2:b6:b0:a8:6c:9c:a1:4d:2f:c3:28:2f:dc:
5d:3c:da:03:d7:81:39:78:a4:b7:91:c7:a6:3c:cc:8d:8b:a2:
b4:08:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:06 2025 by rpki-client