Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200950.roa
File: AS200950.roa (raw, json)
Hash identifier: 66G8p9Gpw1IBQ5DjDvlWjQAcpAOY9CQ987pvw6ahm8c=
Subject key identifier: D9:E1:82:6E:49:98:82:C4:D4:10:06:4F:E2:11:C2:B8:3E:63:2B:D3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 774B66F672AB03087FD7C7634358F5343149B69D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200950.roa
Signing time: Thu 05 Jun 2025 17:39:51 +0000
ROA not before: Thu 05 Jun 2025 17:34:51 +0000
ROA not after: Thu 04 Jun 2026 17:39:51 +0000
asID: 200950
IP address blocks: 143.20.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4b:66:f6:72:ab:03:08:7f:d7:c7:63:43:58:f5:34:31:49:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 5 17:34:51 2025 GMT
Not After : Jun 4 17:39:51 2026 GMT
Subject: CN=D9E1826E499882C4D410064FE211C2B83E632BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:a5:01:e2:fc:30:c0:9b:c8:31:1b:5d:6b:
ad:5f:27:ea:ca:a5:73:20:09:c9:94:4e:af:cf:f4:
b6:3e:9a:ed:d0:b5:f9:21:2c:6a:83:30:4a:ad:2d:
a3:93:db:48:4b:8a:2e:84:c4:53:17:30:c8:b6:b8:
5f:dc:f5:8c:ed:f9:8f:68:78:ea:7c:63:4c:be:c9:
0e:39:fa:32:d7:b5:7f:03:11:24:a0:46:5e:f5:8a:
3c:ef:94:c3:8d:b1:a8:68:1a:6d:ae:9b:da:aa:af:
63:61:fc:4d:a7:b5:fa:95:b3:51:77:25:ac:cb:0f:
28:c5:25:22:dc:15:59:fd:96:29:f0:46:4f:62:1d:
4a:30:6f:ae:84:57:71:c6:29:69:c7:a1:7f:a6:0c:
e2:c0:26:b4:fc:34:97:23:f1:1a:31:f7:a8:15:5c:
85:37:35:0b:bd:07:87:7d:c7:4a:54:3b:64:91:4c:
b2:22:62:8f:64:9b:a9:5f:11:c3:04:6b:05:09:b7:
c4:a8:8a:b5:00:2c:05:41:b9:fb:6c:00:c5:13:7e:
12:9d:2b:c3:8c:ce:c8:fa:3b:d8:06:8e:be:e7:e1:
ab:d1:8c:d0:a1:db:0b:fb:a8:48:f5:3d:78:e5:5c:
8a:f0:15:0c:b4:c1:8a:5b:aa:78:12:4b:24:14:67:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:82:6E:49:98:82:C4:D4:10:06:4F:E2:11:C2:B8:3E:63:2B:D3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5c:50:ec:65:cd:bb:13:35:6f:51:e2:66:59:8b:0f:da:72:
f0:de:dc:cf:36:57:c8:fd:c7:66:9b:a4:50:b1:12:25:49:66:
18:bb:82:87:32:97:bf:f0:a0:5a:24:8c:05:a3:42:5e:d3:f3:
01:bb:aa:06:f3:ea:db:43:3e:e9:06:a5:8a:d0:bd:dc:d3:21:
c2:6e:85:72:8a:f7:8a:fb:d2:92:1f:3b:d1:14:bf:04:7f:b3:
84:1e:ec:e4:1c:58:21:e3:b3:71:3d:4c:26:ed:86:e0:35:d7:
cf:ef:34:62:d5:4a:43:68:79:4e:bd:48:20:94:ae:2c:6d:57:
83:5b:d6:f6:eb:f3:6f:8a:a5:6a:56:36:bc:da:f7:a6:2c:79:
49:35:33:27:f0:a9:7f:d6:a8:53:cf:13:48:ca:7b:f5:4b:d5:
71:eb:99:46:45:8c:17:43:17:0b:21:76:39:1a:eb:2d:97:90:
02:82:61:be:dc:75:ce:17:9c:b4:ec:25:74:1f:60:d0:8f:fe:
31:a0:21:be:2c:72:78:8a:4c:84:c5:05:6f:a0:ae:7d:7e:b3:
22:d5:c6:e5:f4:90:4e:70:81:5f:4b:f5:90:93:ec:7a:7f:10:
4f:a1:b9:64:55:79:86:d0:23:c9:7d:c6:e8:89:e3:32:7d:5d:
85:5c:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:16 2025 by rpki-client