Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS207459.roa
File: AS207459.roa (raw, json)
Hash identifier: TZLAvChQYDR49yKza6UMaCuDO3CHmXNlmvNMz12j6DM=
Subject key identifier: 66:EE:DA:AE:74:C9:A6:62:7D:17:3A:85:3D:BC:46:AB:DB:BB:3F:0B
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 3600714E0A56594A6837BAC628957524EB2CA860
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS207459.roa
Signing time: Fri 11 Jul 2025 15:39:23 +0000
ROA not before: Fri 11 Jul 2025 15:34:23 +0000
ROA not after: Fri 10 Jul 2026 15:39:23 +0000
asID: 207459
IP address blocks: 85.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:00:71:4e:0a:56:59:4a:68:37:ba:c6:28:95:75:24:eb:2c:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 11 15:34:23 2025 GMT
Not After : Jul 10 15:39:23 2026 GMT
Subject: CN=66EEDAAE74C9A6627D173A853DBC46ABDBBB3F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:47:63:21:d4:01:40:94:18:d7:6d:45:c5:
c7:a9:dd:8b:e9:e4:2d:56:bd:16:75:61:dd:ee:f2:
a4:c6:36:71:bb:a0:2b:67:d5:7d:6f:4a:61:3d:82:
bb:e9:9e:4d:bd:54:a8:79:6e:f3:b7:11:25:e3:c9:
75:9b:09:6b:8d:ba:8e:f3:01:c8:0b:3a:21:ec:9a:
a8:16:9b:1c:a9:e4:85:70:b1:a4:b8:50:d2:5e:2d:
c2:94:60:d4:10:23:d4:9e:e1:2e:4f:d5:9b:4c:46:
ad:4e:b9:f3:0a:1c:65:a6:96:79:80:56:1d:22:4a:
e8:cc:cd:e4:4b:85:45:18:ec:79:eb:d5:cf:9b:fc:
74:bf:82:2c:7c:23:db:42:97:07:3d:f1:88:26:ee:
30:a8:3f:6c:5c:d0:e5:32:56:bb:f0:10:f6:9e:c3:
ec:a3:0a:09:76:0c:7f:60:3a:6a:38:e1:3d:aa:37:
b5:3e:18:bc:f9:40:58:ac:d2:9c:e9:df:9f:fd:47:
17:5a:17:90:f2:b6:b7:aa:4c:95:57:c7:ec:33:e6:
24:ee:ee:9b:2d:f5:be:5a:d7:b8:61:31:80:48:f7:
e9:16:83:61:9e:e5:87:9a:34:9a:06:e3:c0:de:43:
67:06:ba:35:dc:a1:6e:ea:5a:d8:ed:85:ab:e4:d5:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:DA:AE:74:C9:A6:62:7D:17:3A:85:3D:BC:46:AB:DB:BB:3F:0B
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS207459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d8:4c:66:a8:ec:f0:42:7b:da:ce:f8:c6:32:d8:c2:bc:00:
9f:05:b8:88:19:2c:3a:21:92:9a:ed:6e:56:11:8b:6f:dc:74:
21:74:cf:9e:c2:8c:19:fc:2c:5d:9d:a7:80:48:44:8e:8c:21:
6d:7b:6d:f6:ca:86:9d:71:c7:a6:e1:39:90:d8:13:8e:13:f7:
ad:cf:08:93:74:88:99:c2:69:84:d0:35:53:d4:eb:c2:eb:8e:
78:8c:88:bd:54:02:df:2d:e5:58:5b:cb:06:12:de:d3:59:f4:
96:96:c3:c6:3f:9e:0e:ce:0c:94:81:2c:34:76:f8:63:7b:d9:
f4:00:0c:df:dd:11:cc:a2:50:82:26:bc:f5:41:07:0e:a5:fa:
0f:df:58:b4:8f:d0:1b:dd:aa:6d:64:36:ae:bf:92:e8:b4:53:
72:bf:32:b0:2c:72:8f:da:a2:a6:e8:cd:96:f2:e3:5c:3c:99:
dd:93:2b:75:2f:92:a9:7b:66:27:7b:b1:b5:13:93:ce:11:30:
fc:9d:87:8a:ac:e4:ed:01:df:bb:84:c5:96:13:13:1a:62:f1:
e7:83:9c:e2:c6:79:f4:c4:ac:df:f1:7b:d7:d3:ea:bb:65:d3:
7d:ef:73:e0:26:04:ef:35:f6:56:90:8f:0a:e2:50:ec:c1:05:
73:b7:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:23 2025 by rpki-client