Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: wgEkx96ZjXbtI2ha1crmg5lxeKAuOAty2rj6zMZ7qvQ=
Subject key identifier: 70:EB:2E:00:4F:92:EC:15:E7:04:A7:5D:AB:F8:13:11:45:AC:FA:EC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 64BCF253B7084C64869695BF70994ADAC8D6727C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
Signing time: Mon 30 Jun 2025 16:49:55 +0000
ROA not before: Mon 30 Jun 2025 16:44:55 +0000
ROA not after: Mon 29 Jun 2026 16:49:55 +0000
asID: 206119
IP address blocks: 91.124.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bc:f2:53:b7:08:4c:64:86:96:95:bf:70:99:4a:da:c8:d6:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 30 16:44:55 2025 GMT
Not After : Jun 29 16:49:55 2026 GMT
Subject: CN=70EB2E004F92EC15E704A75DABF8131145ACFAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:ab:6c:97:ff:17:f9:e0:3f:a4:23:57:b4:
4d:94:61:de:8b:38:56:92:97:9b:69:2b:48:8f:6d:
53:02:36:ef:4a:da:e0:50:55:79:bc:d8:91:9a:f3:
4a:65:f2:b9:ef:41:bb:4c:75:84:d2:35:f5:23:9d:
d0:ca:e5:f3:e1:38:ec:30:06:91:cd:bd:37:24:80:
00:a3:54:11:72:43:ca:3b:fe:2d:2c:2c:90:23:b9:
c2:f0:a6:a8:58:91:51:2f:ab:9f:d7:e1:f9:bf:42:
f5:fe:51:fe:48:70:df:34:81:26:3b:78:6e:f4:e3:
51:7e:18:f2:b8:7e:41:de:a9:7c:a0:09:d2:13:d7:
28:a7:3a:48:5b:ce:cd:29:61:a2:08:76:84:2b:03:
27:28:6a:c9:7c:4f:32:c9:e1:00:c9:f5:05:ad:28:
05:94:03:ea:a7:75:9e:f8:b9:4e:0f:64:a8:5e:a0:
18:ad:82:b0:76:9b:99:dc:d6:ed:d8:b5:fa:cd:0e:
fa:43:11:42:72:b0:9a:5b:aa:dd:05:b1:27:01:82:
75:19:4a:79:3d:40:33:c7:6f:2f:f2:98:41:cb:2c:
46:b9:8e:08:d5:ea:0e:5c:d1:cb:45:11:20:ee:69:
65:4b:ea:8e:81:59:bd:69:5a:f3:aa:6f:51:eb:53:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:2E:00:4F:92:EC:15:E7:04:A7:5D:AB:F8:13:11:45:AC:FA:EC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.91.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3f:cb:9c:b8:f5:f7:e7:14:52:6e:30:5b:db:5c:cd:ea:24:
7e:5c:4a:7b:9f:3c:6c:25:bd:5a:10:71:42:fe:32:bd:0c:68:
98:f2:4a:7d:c9:35:7c:93:4e:0c:ed:b5:35:35:2f:f3:04:4f:
25:7a:5d:58:c6:ba:07:f0:63:7f:6b:17:dd:50:ca:7a:b9:9f:
6f:f3:fa:f2:0b:a5:e8:ee:2a:51:1a:54:27:23:f1:bd:98:05:
fb:f8:4e:e9:8b:19:fe:6f:c9:42:db:8b:a6:7c:f6:69:ac:f1:
da:a3:74:ce:0e:9a:d6:fa:04:0a:91:65:c0:d5:74:c4:bb:d0:
ed:29:cd:ef:39:dd:8e:e1:fe:2b:06:a8:ad:b0:53:38:6d:be:
f1:be:a7:27:3f:3e:84:52:d3:f5:96:af:7a:44:d9:96:fb:48:
62:c0:52:b8:a4:ed:44:ef:f6:9e:7a:bb:c0:38:c3:1f:11:bb:
dd:dd:4b:c7:0a:fb:ad:a8:70:0d:d5:94:fa:22:63:d7:c8:c2:
6a:83:f5:4e:b9:7a:b5:a3:17:47:99:50:0f:3b:d7:2b:91:7d:
20:8e:0c:a5:9e:54:97:91:7c:d4:8d:66:d6:73:1b:07:a4:2e:
58:37:e2:ab:6a:83:b1:7a:df:1f:b9:5d:23:8c:65:bf:10:15:
ec:b8:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:50:02 2025 by rpki-client