Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199925.roa
File: AS199925.roa (raw, json)
Hash identifier: Uj+D9NmbOeYnznHF9wJSj4P1GFEVWqMBT/9cPwlbuSM=
Subject key identifier: F7:B6:C7:AF:D0:B2:46:77:88:98:8A:F0:E0:98:52:94:CA:56:B9:56
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7981E42E11F685160E98CE9B47A4F33AF56AF432
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199925.roa
Signing time: Tue 06 May 2025 03:54:07 +0000
ROA not before: Tue 06 May 2025 03:49:07 +0000
ROA not after: Tue 05 May 2026 03:54:07 +0000
asID: 199925
IP address blocks: 141.11.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:81:e4:2e:11:f6:85:16:0e:98:ce:9b:47:a4:f3:3a:f5:6a:f4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 6 03:49:07 2025 GMT
Not After : May 5 03:54:07 2026 GMT
Subject: CN=F7B6C7AFD0B2467788988AF0E0985294CA56B956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:c7:4f:92:e4:33:6b:79:17:0a:c1:3f:8d:
e1:55:11:cc:88:85:36:47:12:c4:88:08:6a:f0:38:
9b:1b:81:ee:cb:a7:ed:0c:41:16:9a:5d:26:97:e9:
ef:5c:bb:b7:e1:db:38:21:ef:86:17:3c:85:73:fa:
0a:4c:32:95:b1:4f:1f:f3:32:79:cd:1e:f2:2d:90:
46:90:ec:56:9c:21:64:0d:e7:89:b5:20:03:f4:46:
8b:d6:82:54:8d:ab:55:56:5b:ba:89:6e:74:1c:18:
70:42:69:9c:98:1b:cb:e0:96:94:f8:6e:e0:61:30:
ba:26:8d:d2:fa:14:39:0a:6e:64:d8:e0:26:bc:db:
08:0a:cf:81:e9:1b:68:9a:b1:24:29:d1:c6:f4:25:
d9:27:9a:e5:0a:8e:2f:b1:17:f5:d6:5a:9c:d9:c9:
f2:01:fd:1a:0d:87:46:5c:10:5a:6c:d1:44:b2:84:
f4:a1:9a:9d:2b:da:77:64:87:e2:27:42:23:57:9f:
dc:46:8f:d8:71:a0:ba:0b:d8:ff:21:fe:54:7e:90:
36:46:42:f5:56:2f:84:1c:36:cb:51:dd:fd:5e:3b:
88:88:1a:1f:4c:77:c5:a9:1e:e7:e1:99:5d:2f:cb:
8d:f5:21:cb:c9:36:e7:e6:fa:fe:07:f3:c3:10:9b:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:C7:AF:D0:B2:46:77:88:98:8A:F0:E0:98:52:94:CA:56:B9:56
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.47.0/24
Signature Algorithm: sha256WithRSAEncryption
79:18:65:a6:c9:2e:dd:6c:5a:28:41:c1:3e:bc:b1:b2:52:fb:
28:ff:61:4e:33:e9:fe:95:74:61:84:fe:af:80:16:65:8f:13:
a7:95:33:cd:54:25:e7:4e:2d:db:ca:71:e7:b9:f2:69:a7:e7:
ad:5f:83:a8:74:cc:22:98:e7:81:b8:ba:69:de:d6:23:09:e8:
b9:85:30:21:60:a4:a7:68:bc:38:09:db:94:e8:8c:93:ef:58:
47:19:4f:f1:02:a7:9c:01:63:b1:ad:86:24:b7:51:9c:7e:69:
37:95:d3:5a:cf:17:54:22:e0:3d:e7:85:e3:3e:c7:31:a4:81:
83:b4:3d:7a:20:d1:6f:83:e8:63:2d:09:6d:db:9d:c7:27:99:
ad:34:9c:b9:8c:cb:8f:76:e2:e2:54:6c:a2:8b:9b:d0:23:3c:
16:9a:27:2c:8a:be:35:20:25:26:59:35:b2:f8:b5:c4:ae:19:
cd:d8:c6:1c:14:04:05:41:4f:cd:28:a3:ac:8d:60:60:40:72:
dc:97:14:e7:32:5f:6f:8c:7e:fc:61:6f:e5:b7:75:84:b7:8a:
49:a7:58:e6:ab:06:f9:e3:3d:9f:e1:ab:a4:d9:b2:bd:67:69:
fc:e1:b4:5b:ff:76:9f:1e:ce:82:a8:5d:23:63:e6:f9:3d:48:
9a:a1:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:55:18 2025 by rpki-client