Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa
File: AS209474.roa (raw, json)
Hash identifier: lECEQc+5XuoLEmDrEM23WterlE/YHXzs/3EKZDVEacs=
Subject key identifier: D6:73:65:02:18:19:0C:91:59:05:96:DC:E7:0C:48:F2:DA:F5:6C:60
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6AD29DFA5000D46EEB13EACE87551C5B4B791710
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa
Signing time: Mon 13 Jan 2025 20:31:44 +0000
ROA not before: Mon 13 Jan 2025 20:26:44 +0000
ROA not after: Mon 12 Jan 2026 20:31:44 +0000
asID: 209474
IP address blocks: 194.113.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d2:9d:fa:50:00:d4:6e:eb:13:ea:ce:87:55:1c:5b:4b:79:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 13 20:26:44 2025 GMT
Not After : Jan 12 20:31:44 2026 GMT
Subject: CN=D673650218190C91590596DCE70C48F2DAF56C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:0e:75:c2:d7:1e:a9:a5:8f:7c:a3:f2:ce:
9d:11:31:a2:da:16:9f:a5:53:1f:88:76:3f:98:70:
d3:93:85:ba:50:a4:0b:bf:b9:16:31:1f:c9:71:68:
7f:75:0f:19:66:c5:8f:6e:33:b3:ec:44:a7:b9:a9:
07:35:68:db:18:d0:57:f5:22:10:24:e6:f1:12:15:
42:94:25:22:29:68:32:a6:47:a0:28:c9:b6:1b:84:
1d:36:82:fe:27:c0:35:ea:cf:03:08:a0:83:44:63:
0c:92:b7:a1:a4:e0:4c:61:45:53:56:37:20:7d:2e:
49:d6:ee:72:f1:90:29:4b:b2:ce:7a:7a:e3:2d:7a:
0b:c6:62:22:9c:d6:d1:9e:54:58:98:5e:d4:e6:84:
64:65:38:64:5e:06:3c:75:19:af:39:94:96:64:38:
ab:19:12:d6:20:f5:a2:8d:fa:a3:75:de:62:7b:6e:
81:18:a9:b9:73:2e:34:bd:67:a4:89:f3:d4:45:b0:
c7:a5:2c:a4:f1:7c:f8:e8:ac:d6:91:55:aa:e9:83:
98:97:91:52:dd:bf:e3:40:98:91:52:e9:a5:32:3a:
0b:f7:e8:d8:c1:e3:40:c3:d2:4d:be:98:f7:43:dd:
fd:a8:2b:ab:b2:4e:2c:78:ec:99:54:57:92:f6:2b:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:73:65:02:18:19:0C:91:59:05:96:DC:E7:0C:48:F2:DA:F5:6C:60
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0e:2b:45:d7:e7:04:d9:0b:5d:3f:08:97:f8:82:0e:1f:05:
27:48:36:ef:d3:37:27:4d:e9:10:3a:14:db:5f:26:8d:01:af:
c8:da:b0:7f:db:b5:54:33:a8:0c:65:7e:17:61:c5:dd:de:8e:
38:08:e1:af:06:b3:98:78:d1:78:95:96:87:ad:37:7d:a2:86:
69:62:da:6d:69:d7:a1:39:4c:c0:b0:98:ae:cf:f8:92:7e:31:
86:0d:64:a9:b3:9f:06:00:f2:0a:d3:2c:bd:61:68:84:5d:44:
59:1a:64:fa:25:62:d1:a3:bf:b9:7a:e4:de:9f:b2:a1:55:b8:
d8:46:92:77:4d:3a:d4:ff:d9:97:11:92:a4:8f:8b:d4:9a:9c:
4f:2d:1a:83:9e:26:a4:22:29:f2:c0:06:7c:12:f1:b7:83:c8:
6e:5f:00:ce:81:bb:1c:5f:f2:2c:59:65:46:11:09:3f:4f:f4:
2d:6c:b5:c8:f8:c6:73:7d:bc:b7:3e:9f:1e:ae:08:c2:36:26:
3a:cc:61:b9:5c:eb:05:d3:6d:bc:b4:97:82:5d:07:6c:d4:76:
c4:2d:3b:11:f7:23:da:e7:5a:d6:c9:df:75:d3:20:10:2f:72:
42:73:17:ac:40:f1:8e:ba:af:a6:4c:d0:26:59:76:bf:0e:c8:
1d:75:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:29 2025 by rpki-client