Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
File: AS6206.roa (raw, json)
Hash identifier: /UpFkWjQM8AFOiuy71NItXl6mRt3fMF7hXQFaF8ANco=
Subject key identifier: 7F:94:E9:86:89:75:24:A7:0D:62:4E:33:E1:3B:3E:43:BC:E6:72:21
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 33118CFAA3EFB3A2F0DCECDB956F21EA7CE6F1B2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
Signing time: Mon 03 Jun 2024 08:33:04 +0000
ROA not before: Mon 03 Jun 2024 08:28:04 +0000
ROA not after: Mon 02 Jun 2025 08:33:04 +0000
asID: 6206
IP address blocks: 45.133.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:11:8c:fa:a3:ef:b3:a2:f0:dc:ec:db:95:6f:21:ea:7c:e6:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 3 08:28:04 2024 GMT
Not After : Jun 2 08:33:04 2025 GMT
Subject: CN=7F94E986897524A70D624E33E13B3E43BCE67221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:ea:61:a9:37:67:91:39:f8:df:4f:29:52:
7f:65:46:40:f5:e4:dc:be:d5:8a:f6:e8:5a:b4:f2:
a6:dc:d3:67:e7:bb:e7:8b:7c:97:f5:b3:13:51:c8:
47:2b:e1:c0:e8:7f:26:02:73:01:07:1c:b2:39:52:
8b:46:df:32:d8:28:04:31:03:b1:e7:04:44:bc:ec:
82:a1:d1:91:dc:fe:f0:c1:68:58:60:07:4a:c6:a7:
c4:eb:b3:34:02:7a:4e:a2:b8:0b:7e:3d:73:6c:0b:
f0:32:21:ba:a9:75:5c:00:40:6c:e4:9f:19:ce:93:
af:70:4b:88:af:75:5f:4c:49:ef:80:60:41:c8:f4:
54:e2:b2:df:f9:00:81:0b:5e:67:50:ae:0e:65:ac:
4b:a7:62:8e:d8:1d:dc:6b:52:a6:ab:01:ce:2b:98:
34:1a:a6:60:13:db:b3:17:67:ba:ed:a3:f8:45:3b:
eb:b9:d7:e4:59:d8:e7:8c:de:51:30:12:5e:fa:b7:
a2:6d:a5:52:2d:ec:1b:c5:96:4d:0e:5a:8e:9d:98:
f4:a0:62:82:54:d1:0a:e1:1c:0b:1c:5d:97:c4:bd:
dd:9f:27:c0:40:8e:a0:67:d2:8b:d4:7f:fe:9a:36:
cc:22:a7:ac:b8:cd:fe:34:ed:77:0b:92:af:4b:53:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:E9:86:89:75:24:A7:0D:62:4E:33:E1:3B:3E:43:BC:E6:72:21
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:48:72:af:47:6a:06:c1:04:22:db:c8:74:d5:f3:76:b6:f8:
bb:6a:d9:3e:b9:97:38:89:4c:e3:9d:7d:e7:69:db:fc:4b:4b:
97:54:3a:d0:2e:e6:f7:8e:e3:64:4e:47:81:42:d0:62:3b:27:
c4:38:01:6f:e4:72:85:26:d3:f8:3f:83:f4:07:dc:17:e8:28:
4f:ad:51:5e:5c:9f:b8:e1:12:a5:ca:2f:cf:2b:59:28:5e:a9:
fd:3b:7e:70:87:66:09:4b:d2:e9:f1:e5:ce:cc:47:d7:da:41:
bf:18:2f:80:6f:34:1c:f9:e9:d4:24:50:9e:e5:b1:c9:64:fb:
ef:e6:0b:7a:7b:2d:1a:e6:76:b4:f1:91:bf:d1:a5:07:e0:cb:
77:e1:f6:b2:f0:3a:2a:23:ff:45:0d:41:3b:d2:9d:5d:39:9f:
00:a4:d0:5b:9a:f7:71:43:d7:85:6f:54:65:87:ce:2a:81:d3:
d9:37:47:e6:cc:b1:fc:cb:c0:39:b3:2e:fb:9f:86:9b:fb:df:
ba:73:44:be:74:9e:4b:ad:a0:ae:a1:66:4e:14:0d:a7:0a:27:
19:c4:f6:45:28:21:33:08:87:3e:6c:b8:14:fd:ac:42:ea:d8:
63:dd:28:bc:8d:89:13:1f:35:c8:65:ad:77:b6:fb:28:c9:6c:
35:f9:4b:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUMxGM+qPvs6Lw3OzblW8h6nzm8bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA2MDMwODI4MDRaFw0yNTA2MDIwODMzMDRaMDMxMTAvBgNV
BAMTKDdGOTRFOTg2ODk3NTI0QTcwRDYyNEUzM0UxM0IzRTQzQkNFNjcyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHvephqTdnkTn4308pUn9lRkD1
5Ny+1Yr26Fq08qbc02fnu+eLfJf1sxNRyEcr4cDofyYCcwEHHLI5UotG3zLYKAQx
A7HnBES87IKh0ZHc/vDBaFhgB0rGp8TrszQCek6iuAt+PXNsC/AyIbqpdVwAQGzk
nxnOk69wS4ivdV9MSe+AYEHI9FTist/5AIELXmdQrg5lrEunYo7YHdxrUqarAc4r
mDQapmAT27MXZ7rto/hFO+u51+RZ2OeM3lEwEl76t6JtpVIt7BvFlk0OWo6dmPSg
YoJU0QrhHAscXZfEvd2fJ8BAjqBn0ovUf/6aNswip6y4zf407XcLkq9LUwNxAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUf5Tphol1JKcNYk4z4Ts+Q7zmciEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjIwNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2FrjAN
BgkqhkiG9w0BAQsFAAOCAQEAnkhyr0dqBsEEItvIdNXzdrb4u2rZPrmXOIlM4519
52nb/EtLl1Q60C7m947jZE5HgULQYjsnxDgBb+RyhSbT+D+D9AfcF+goT61RXlyf
uOESpcovzytZKF6p/Tt+cIdmCUvS6fHlzsxH19pBvxgvgG80HPnp1CRQnuWxyWT7
7+YLenstGuZ2tPGRv9GlB+DLd+H2svA6KiP/RQ1BO9KdXTmfAKTQW5r3cUPXhW9U
ZYfOKoHT2TdH5syx/MvAObMu+5+Gm/vfunNEvnSeS62grqFmThQNpwonGcT2RSgh
MwiHPmy4FP2sQurYY90ovI2JEx81yGWtd7b7KMlsNflLDg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:59 2024 by rpki-client on console-ams.rpki-client.org