Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: HPvsl+hCaHlA7Ab69VnLGvfwIJgTTbqS/sdbrFOILTg=
Subject key identifier: 92:A9:4D:63:8E:E5:B1:B4:B7:E5:D8:B4:E7:D6:D2:08:87:C0:F4:03
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 492FC6A9716762EF8A8CCE90621F56338AB0F126
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
Signing time: Sat 31 May 2025 15:46:44 +0000
ROA not before: Sat 31 May 2025 15:41:44 +0000
ROA not after: Sat 30 May 2026 15:46:44 +0000
asID: 206119
IP address blocks: 2a13:9500:79::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2f:c6:a9:71:67:62:ef:8a:8c:ce:90:62:1f:56:33:8a:b0:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 31 15:41:44 2025 GMT
Not After : May 30 15:46:44 2026 GMT
Subject: CN=92A94D638EE5B1B4B7E5D8B4E7D6D20887C0F403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:2e:6b:49:56:5e:3f:5f:c7:fa:3e:3c:b8:
f4:1d:0a:ec:61:88:1c:3c:ce:6c:b9:b3:b9:e3:9c:
85:25:56:3d:5b:ca:fd:62:dd:ef:6b:91:f8:17:83:
02:e7:b0:08:ed:b8:33:76:34:91:d0:7e:74:86:6c:
89:dc:b8:bd:3d:84:2e:68:b6:8b:c7:1d:a7:3a:8e:
e9:da:38:71:c9:27:1f:76:19:b3:ff:21:50:cf:1c:
29:43:81:79:c8:fc:7d:c1:7a:d2:01:94:e5:49:e3:
3e:1c:c0:94:cd:b4:b0:85:0a:47:9f:76:a0:f7:95:
94:3c:da:6b:8d:d1:4a:02:43:51:03:b7:d7:6d:d8:
68:00:49:9c:d4:82:24:d9:f3:47:ac:1a:7a:45:ac:
cf:8c:a9:1b:71:b2:f2:ea:ff:65:58:77:bf:55:0e:
15:c6:3f:4c:d7:89:06:b0:96:c9:dc:26:ce:82:20:
cf:f4:b6:93:61:01:6d:ee:b6:dc:ba:4e:e9:52:7f:
75:80:f1:33:f7:7a:ce:a5:c0:b8:49:7f:03:45:83:
33:e7:1e:d4:16:fc:dd:39:7e:dd:56:ae:a6:fd:c6:
fc:a8:c5:7a:63:53:7a:61:06:ad:a9:d8:02:20:7a:
b1:ad:e8:67:f3:54:2e:d0:be:11:59:2c:9e:75:73:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:4D:63:8E:E5:B1:B4:B7:E5:D8:B4:E7:D6:D2:08:87:C0:F4:03
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:79::/48
Signature Algorithm: sha256WithRSAEncryption
22:c2:a6:7f:c8:dd:56:eb:af:c4:e1:b9:e4:77:d0:14:85:66:
ba:d7:b1:ac:23:0b:1b:cd:36:e3:bd:44:4b:1e:03:83:cf:df:
c5:7f:9e:5a:ff:ed:fb:38:12:03:fb:9c:62:01:e0:41:ca:0b:
09:12:c7:06:4b:49:a7:b0:50:c0:1a:8b:9d:17:da:6d:2e:04:
0e:cb:47:c8:13:1b:f7:98:33:cc:3b:d6:af:b6:5e:f4:5f:44:
43:6b:38:e8:25:a1:97:7d:ed:5c:cb:96:47:ce:89:be:a6:27:
30:e7:25:31:7f:c7:ca:46:a6:8b:a8:2e:53:2c:5d:58:2a:39:
4a:e0:67:21:a4:e6:5e:4d:58:4b:bd:80:6e:75:99:5f:94:29:
79:00:a3:32:71:60:ac:f4:0d:ef:0e:1a:41:bb:85:a9:8e:dd:
e2:f9:21:e0:14:c9:59:83:9c:21:af:68:9a:e5:35:25:23:31:
a0:41:57:80:72:54:49:61:b7:07:40:c4:89:7e:50:dc:5e:31:
66:ff:ab:78:31:62:10:f9:db:cf:3f:2f:b1:a8:0f:8c:f7:a7:
35:44:9c:a4:8a:d8:44:9f:8d:3b:5b:ce:f4:07:22:7e:e7:0a:
c9:b0:6e:10:5f:ec:8d:85:6c:21:82:ca:53:4f:b8:12:4d:9e:
f4:ff:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:56:28 2025 by rpki-client