Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204174.roa
File: AS204174.roa (raw, json)
Hash identifier: tvuBuql0ryC07J+F1Na55u5WQ62zc7JAMZHENcny4QU=
Subject key identifier: 23:91:A3:B6:78:ED:95:71:7E:7D:BD:81:7A:E4:7F:19:C3:FB:4A:52
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1C4EEEA91189DE39F7AF0A4E235AD147ACEF5406
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204174.roa
Signing time: Tue 14 Jan 2025 07:48:28 +0000
ROA not before: Tue 14 Jan 2025 07:43:28 +0000
ROA not after: Tue 13 Jan 2026 07:48:28 +0000
asID: 204174
IP address blocks: 92.112.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4e:ee:a9:11:89:de:39:f7:af:0a:4e:23:5a:d1:47:ac:ef:54:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 14 07:43:28 2025 GMT
Not After : Jan 13 07:48:28 2026 GMT
Subject: CN=2391A3B678ED95717E7DBD817AE47F19C3FB4A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:ca:ac:a3:a5:70:dc:ad:cb:0a:1d:43:9b:
13:29:aa:c9:0e:22:0b:34:22:76:d5:aa:e6:f6:f7:
6d:c1:fb:ca:fc:a9:0d:02:02:9a:9c:20:8d:73:26:
23:b0:34:7b:1c:0c:c8:79:c6:81:32:f5:97:08:19:
74:75:54:88:60:69:26:09:c2:ba:ec:ac:87:74:ca:
37:ce:f0:7e:3e:18:4e:5f:1f:02:72:3e:6b:38:d8:
82:9f:30:05:a6:80:df:82:a6:79:3d:89:91:9e:35:
28:df:f8:4a:3e:09:02:09:73:b9:3e:f8:f8:29:33:
56:4a:b7:cf:5d:9d:7e:af:22:29:75:e3:bf:5c:d6:
af:24:fb:56:e1:50:6c:69:93:23:d9:f3:f0:2a:0a:
30:79:df:49:a2:0d:58:d8:f4:4f:ae:55:16:ee:f8:
49:60:ee:07:ae:34:0d:ec:7a:91:23:2f:e2:31:df:
da:a6:aa:f1:af:e6:99:8e:8d:34:b4:81:1b:a4:ef:
94:f6:d8:9f:fb:ae:f0:54:0e:0c:c9:bc:53:85:79:
e8:85:df:e4:46:3d:2d:50:9a:84:7a:a6:23:e4:5d:
30:f1:99:ad:51:b8:cd:d1:a2:5d:28:4a:56:cb:35:
06:21:dc:2c:06:f9:32:89:0c:5d:43:d1:7c:0b:6e:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:A3:B6:78:ED:95:71:7E:7D:BD:81:7A:E4:7F:19:C3:FB:4A:52
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS204174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.124.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:56:d5:06:8e:fb:e9:d0:95:1e:37:88:01:d6:1a:a2:d1:7b:
a7:30:df:7c:4d:14:eb:23:0f:52:13:90:79:05:34:89:55:d2:
4d:bd:6d:99:dc:db:85:dd:b4:09:9e:0b:ab:ac:9e:22:54:02:
50:cf:96:94:0d:bd:43:df:fb:27:8c:41:9a:2e:71:09:1a:1c:
6d:91:da:5d:6b:3a:d5:1e:bf:18:ff:42:1e:eb:56:77:da:f3:
2c:f3:9e:9a:1d:b6:50:1d:bf:ea:bd:4b:ce:5d:97:72:61:2b:
8a:d5:b7:8c:5b:82:a4:8c:be:77:93:e6:d1:82:d3:89:9d:5a:
f5:a3:94:89:6d:b7:e4:e6:db:ac:e3:8e:77:0e:be:b6:1a:56:
75:d0:a7:cc:8e:12:27:1e:12:1d:cf:4e:e2:4f:ad:81:81:fd:
ad:1c:84:68:f5:5f:e3:27:ca:fb:0b:39:dd:b0:a6:3b:03:55:
de:97:d3:0a:44:8b:0a:29:ed:75:07:2e:ec:40:50:50:0b:2d:
46:81:fe:21:fd:4e:da:58:45:b6:98:82:f6:85:f6:5f:19:51:
16:70:90:24:d9:1b:2f:70:0c:fa:18:de:19:a2:70:ce:89:c8:
bb:41:a4:e2:bd:65:ad:d3:67:02:17:a7:70:59:ae:bc:4f:ee:
de:92:b4:29
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHE7uqRGJ3jn3rwpOI1rRR6zvVAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAxMTQwNzQzMjhaFw0yNjAxMTMwNzQ4MjhaMDMxMTAvBgNV
BAMTKDIzOTFBM0I2NzhFRDk1NzE3RTdEQkQ4MTdBRTQ3RjE5QzNGQjRBNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3cqso6Vw3K3LCh1DmxMpqskO
Igs0InbVqub2923B+8r8qQ0CApqcII1zJiOwNHscDMh5xoEy9ZcIGXR1VIhgaSYJ
wrrsrId0yjfO8H4+GE5fHwJyPms42IKfMAWmgN+Cpnk9iZGeNSjf+Eo+CQIJc7k+
+PgpM1ZKt89dnX6vIil1479c1q8k+1bhUGxpkyPZ8/AqCjB530miDVjY9E+uVRbu
+Elg7geuNA3sepEjL+Ix39qmqvGv5pmOjTS0gRuk75T22J/7rvBUDgzJvFOFeeiF
3+RGPS1QmoR6piPkXTDxma1RuM3Rol0oSlbLNQYh3CwG+TKJDF1D0XwLbuunAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUI5GjtnjtlXF+fb2BeuR/GcP7SlIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA0MTc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHB8
MA0GCSqGSIb3DQEBCwUAA4IBAQCqVtUGjvvp0JUeN4gB1hqi0XunMN98TRTrIw9S
E5B5BTSJVdJNvW2Z3NuF3bQJngurrJ4iVAJQz5aUDb1D3/snjEGaLnEJGhxtkdpd
azrVHr8Y/0Ie61Z32vMs856aHbZQHb/qvUvOXZdyYSuK1beMW4KkjL53k+bRgtOJ
nVr1o5SJbbfk5tus4453Dr62GlZ10KfMjhInHhIdz07iT62Bgf2tHIRo9V/jJ8r7
CzndsKY7A1Xel9MKRIsKKe11By7sQFBQCy1Ggf4h/U7aWEW2mIL2hfZfGVEWcJAk
2RsvcAz6GN4ZonDOici7QaTivWWt02cCF6dwWa68T+7ekrQp
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:58:08 2025 by rpki-client