Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
File: AS208483.roa (raw, json)
Hash identifier: PxkJsJcPmC/IQ4JlTHnYUwiqGSWMUsbORj3IUMsLD2g=
Subject key identifier: 40:08:A8:E0:3F:5C:70:76:F3:3E:15:6E:82:B5:18:E3:14:AD:6F:84
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 651B89DB08C092E6CDE66C0EAA2D49FA737CB57C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
Signing time: Thu 05 Jun 2025 17:39:51 +0000
ROA not before: Thu 05 Jun 2025 17:34:51 +0000
ROA not after: Thu 04 Jun 2026 17:39:51 +0000
asID: 208483
IP address blocks: 143.20.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1b:89:db:08:c0:92:e6:cd:e6:6c:0e:aa:2d:49:fa:73:7c:b5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 5 17:34:51 2025 GMT
Not After : Jun 4 17:39:51 2026 GMT
Subject: CN=4008A8E03F5C7076F33E156E82B518E314AD6F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:18:c4:5a:12:8c:d5:17:40:d1:78:eb:06:
e6:f4:9e:ff:0c:69:2b:87:df:b5:78:0f:7d:2a:c6:
ea:8f:aa:56:e9:28:12:ab:6b:82:8c:0a:96:05:f6:
44:f9:25:4f:24:30:f4:ea:e6:11:f5:dc:bb:18:89:
2b:b0:9c:08:f6:8f:17:03:e7:40:91:e3:ac:31:fa:
da:ce:b0:ab:d3:5a:dc:9e:e3:84:fb:32:6b:45:e5:
19:b6:fa:70:7e:08:da:4a:3e:ab:0c:b0:5d:b3:cf:
3a:bb:32:a9:50:19:50:3a:95:42:e5:28:78:ad:21:
b8:c4:18:f5:5a:33:b5:bc:15:2f:f7:d3:2e:2a:20:
a8:ce:84:40:fe:a5:6c:5d:30:5f:e9:f0:23:30:e0:
42:63:54:1a:c4:e9:51:6e:f6:ee:34:0e:20:63:8e:
ed:52:e3:f8:04:be:12:8c:d8:e5:fa:d1:02:86:d8:
48:e3:78:d0:68:db:ae:2a:8e:88:bc:38:00:a9:2f:
78:1b:74:46:c1:0b:de:8b:26:f8:a4:60:24:58:c1:
b5:c4:d8:ac:46:04:8f:03:25:f5:02:d5:48:8f:eb:
64:98:f7:c4:6b:71:a9:b3:24:c7:b0:22:c4:b5:d9:
41:71:77:ca:88:44:89:f2:c0:cb:92:26:92:92:dd:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:A8:E0:3F:5C:70:76:F3:3E:15:6E:82:B5:18:E3:14:AD:6F:84
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.20.0/24
Signature Algorithm: sha256WithRSAEncryption
93:13:55:51:42:7f:36:25:7b:6a:d7:ac:14:fe:b7:2a:f5:fc:
24:b3:e8:bc:6a:2a:fc:41:2c:d1:93:b6:1f:57:0b:4c:51:b4:
a1:c2:43:f5:3b:58:c8:a6:6b:c2:6d:d0:b1:86:47:20:77:2c:
27:48:21:fd:e8:2e:d0:aa:b8:9a:7f:70:21:c1:cf:46:2c:45:
b4:18:2f:c5:6e:83:fa:ec:52:fb:64:18:35:d7:85:6b:47:4e:
4a:b2:c2:28:c5:8d:e9:5b:3f:c6:17:e8:09:4c:40:a6:c3:a5:
a1:6c:f0:1c:9f:78:89:14:0a:c2:1d:ab:cb:30:b0:58:67:49:
c1:eb:5d:e1:fd:d2:81:31:70:5e:26:7c:48:d1:3b:79:dc:38:
cf:1d:26:7c:9b:bf:bd:ca:eb:73:be:ed:93:b1:33:70:72:d6:
a3:e0:58:e4:60:8a:62:a9:85:a8:87:db:40:ed:38:96:86:5a:
0c:f0:05:64:da:d6:88:75:ec:b0:ce:7c:b9:c5:e0:36:05:f5:
96:fb:aa:78:21:20:ee:73:23:d2:dc:df:ac:2e:29:d5:37:88:
c2:82:bb:fd:fd:b9:15:60:d0:1b:10:08:33:76:32:e5:cf:b9:
0f:16:b3:97:71:9d:3c:8d:76:d6:26:1e:c5:07:d4:0b:ac:c9:
6f:8b:18:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:11 2025 by rpki-client