Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
File: AS207994.roa (raw, json)
Hash identifier: VAZBZPO/Qvlkr+W5DDRiDXxOIdMazFHqV1hXOuZClTs=
Subject key identifier: 07:03:6A:F1:CD:DB:3A:56:F6:5D:41:BD:AB:18:38:E4:4E:37:73:B3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 32E524A73A4E2E95A2084243BDA371EAE54AA32A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
Signing time: Mon 10 Mar 2025 11:59:24 +0000
ROA not before: Mon 10 Mar 2025 11:54:24 +0000
ROA not after: Mon 09 Mar 2026 11:59:24 +0000
asID: 207994
IP address blocks: 146.103.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e5:24:a7:3a:4e:2e:95:a2:08:42:43:bd:a3:71:ea:e5:4a:a3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 10 11:54:24 2025 GMT
Not After : Mar 9 11:59:24 2026 GMT
Subject: CN=07036AF1CDDB3A56F65D41BDAB1838E44E3773B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:6b:82:15:61:9b:2e:19:e7:ad:18:39:74:
4b:ef:c8:52:40:76:b1:8a:4b:02:77:cb:98:e8:72:
48:a0:89:51:3e:f8:2c:dc:27:32:43:c2:de:16:b3:
e3:32:61:19:f3:58:70:3c:94:1a:4f:55:8c:f9:a9:
4d:73:bb:87:88:48:f7:a3:dc:d9:df:7d:b1:38:6a:
a9:82:80:54:ae:93:cb:09:ab:2e:33:39:03:7c:5f:
22:b0:01:bc:b6:18:46:e8:5f:c0:df:48:e0:71:df:
6f:ea:c6:15:9d:ac:c4:bf:e9:1a:af:6d:b6:06:6b:
8f:73:34:d3:20:6d:aa:80:16:79:da:bd:fb:16:de:
a9:c9:4a:d5:9a:88:b7:84:fe:24:ec:6e:77:8e:d8:
9f:6c:61:c1:74:91:0e:77:c7:f7:41:ff:b2:70:41:
9e:20:43:f6:9f:cb:05:cc:b8:e5:ce:6d:11:03:0c:
47:2d:71:15:a5:f9:5b:d6:4d:dc:0d:32:1d:49:b3:
6b:67:9c:84:ff:e9:1f:20:a8:91:a5:05:4b:a9:bf:
20:7b:bb:4d:7e:d4:09:52:ef:16:39:b6:c2:16:b9:
46:1e:ac:c2:ac:ff:23:a5:df:a6:a0:a4:a6:72:d1:
b5:52:77:54:af:a9:09:de:15:56:e8:cc:94:e8:b7:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:03:6A:F1:CD:DB:3A:56:F6:5D:41:BD:AB:18:38:E4:4E:37:73:B3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1d:17:e8:03:0e:2a:4b:4b:eb:0f:2b:a9:3e:0c:c1:a5:88:
27:76:75:fa:58:8a:cb:cc:9d:34:b4:86:a5:a9:d9:5e:16:2d:
7d:b2:72:39:2e:ab:a2:84:6d:66:79:34:e1:d8:e4:c2:87:a2:
1a:db:c2:fc:d1:79:b0:6f:95:cd:8a:97:6b:a8:8b:f9:c2:07:
44:0e:72:45:8c:b1:17:71:ac:5b:c0:7d:bc:6a:eb:51:32:80:
70:ba:b6:24:06:d7:6b:9c:c2:1b:5c:73:7b:26:bb:8c:ca:69:
42:5f:17:23:bc:10:a9:4a:9e:c1:a2:bb:83:8b:68:9c:a3:14:
63:7e:99:c9:79:f3:14:ab:b9:8d:d3:c7:8d:75:33:de:2a:30:
a8:21:9f:0f:38:16:80:5f:77:e8:8f:9d:20:13:e9:2f:9c:ef:
23:4b:b4:61:37:10:3b:13:37:b1:f8:b0:34:aa:ca:21:e6:64:
c9:13:e9:8e:fb:be:98:a7:5a:87:13:63:66:1c:3b:e8:f6:01:
c6:dd:a0:0c:38:19:84:b3:49:aa:a9:17:55:91:db:4c:72:33:
2b:83:0a:68:0d:ad:32:1a:ac:a5:80:d7:e8:1d:7d:16:87:3a:
f2:ee:62:2b:f5:7b:41:43:6e:9a:7d:16:de:39:ce:a4:41:c1:
aa:b9:af:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:23 2025 by rpki-client