Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20141.roa
File: AS20141.roa (raw, json)
Hash identifier: g67WZHA+QN2U6A3KRNLvhWKiGtgjCjXOtfYFddwyhGo=
Subject key identifier: 06:0C:4E:B9:97:71:76:BB:93:A5:86:DF:4E:73:D5:9B:93:F0:C9:42
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 66C17694002398D7C7ADE252C24CE43EE7BE6600
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20141.roa
Signing time: Tue 15 Apr 2025 17:54:01 +0000
ROA not before: Tue 15 Apr 2025 17:49:01 +0000
ROA not after: Tue 14 Apr 2026 17:54:01 +0000
asID: 20141
IP address blocks: 191.96.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c1:76:94:00:23:98:d7:c7:ad:e2:52:c2:4c:e4:3e:e7:be:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 15 17:49:01 2025 GMT
Not After : Apr 14 17:54:01 2026 GMT
Subject: CN=060C4EB9977176BB93A586DF4E73D59B93F0C942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:d6:96:c1:b9:c4:64:3d:4b:fa:b6:37:e9:
3b:91:33:92:e6:55:65:59:98:61:cf:d9:bf:a9:82:
50:0c:7f:fa:53:0f:aa:89:31:a9:84:f6:37:34:ca:
97:66:ef:7e:99:f5:f0:6d:1e:c0:47:4f:a1:68:65:
06:99:72:0f:d7:db:53:d8:40:7a:4a:df:33:84:00:
7b:65:ad:b3:19:13:39:cf:37:80:a6:c3:fc:30:b9:
83:3c:b7:b1:9a:81:aa:d9:04:2a:3a:5b:58:5a:53:
b8:7e:d9:5f:dd:86:61:f7:4b:1c:32:fa:32:5f:df:
88:1d:ce:be:d0:f7:c3:f2:a1:1a:7d:f3:cb:d4:b6:
a6:90:7a:1c:b6:c7:46:b4:4a:66:d8:26:d3:c7:06:
d0:b5:da:ad:05:07:22:99:c4:a0:c9:1b:fc:38:81:
bc:bf:14:8a:f5:b5:67:20:80:b9:7f:43:0b:40:aa:
ab:37:d9:fb:87:27:8a:ab:e2:9d:33:dc:8f:06:21:
b0:2a:45:e9:1b:b3:d0:c4:64:5a:85:2c:78:8d:af:
8d:92:d5:a6:bf:3a:30:da:a7:b4:36:29:7c:7e:09:
e8:34:14:04:92:2e:9d:33:ed:f0:cc:33:23:34:e7:
4a:d8:98:3b:ab:22:2f:b6:6a:15:14:67:20:08:b7:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:4E:B9:97:71:76:BB:93:A5:86:DF:4E:73:D5:9B:93:F0:C9:42
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS20141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ad:ee:93:ea:01:2f:2a:e4:5a:8f:c8:e5:6b:b8:99:1a:19:
54:9c:58:80:30:93:be:97:65:99:30:84:0d:12:4e:96:59:47:
03:4a:13:34:1c:c7:82:31:7d:e8:3c:69:1b:a8:de:b6:79:00:
f5:f6:d5:0d:b5:53:cf:0d:8c:0b:fc:ac:28:5c:1c:78:aa:3e:
6f:a3:8a:ba:82:dd:9b:93:bf:70:3a:e4:04:7b:8a:41:ec:ee:
06:60:6c:b3:c6:aa:82:fe:5e:4c:e3:96:40:44:33:25:58:dd:
c1:db:db:ff:88:79:cd:fb:5c:93:50:8c:36:07:97:e3:e2:93:
b4:d1:c5:83:f2:29:d2:36:17:06:15:fe:d2:51:53:ba:49:ee:
da:1c:32:e1:05:e0:b5:a5:c5:7c:89:29:96:16:6b:31:a8:78:
35:78:59:dc:57:74:b4:d8:74:71:8b:8d:2c:57:cf:23:ca:88:
02:ee:33:db:c4:9f:9b:5f:9f:20:8d:1e:77:24:bb:7a:ab:72:
0c:e7:43:0c:48:8b:e4:97:12:50:37:cb:e3:85:cb:55:df:71:
63:1f:13:0e:ed:f0:b6:16:d9:89:7c:e5:71:ea:79:c2:c9:7e:
e3:d2:dc:62:6f:04:42:cb:a0:2c:12:8c:cd:69:5a:bc:30:68:
77:e3:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:48:53 2025 by rpki-client