Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207836.roa
File: AS207836.roa (raw, json)
Hash identifier: Zu/j7wK+Eso8Ym/Fe3wAtXw6cgWqb3rPWvGoYXoVzZo=
Subject key identifier: 97:48:DF:8A:26:1E:2F:F0:06:72:D4:45:54:F4:6A:30:96:DF:90:59
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 45A39EF2169B4A8FA637469D4DD93A0AA88BA679
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207836.roa
Signing time: Mon 26 May 2025 22:15:37 +0000
ROA not before: Mon 26 May 2025 22:10:37 +0000
ROA not after: Mon 25 May 2026 22:15:37 +0000
asID: 207836
IP address blocks: 2a0f:85c1:c4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a3:9e:f2:16:9b:4a:8f:a6:37:46:9d:4d:d9:3a:0a:a8:8b:a6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 26 22:10:37 2025 GMT
Not After : May 25 22:15:37 2026 GMT
Subject: CN=9748DF8A261E2FF00672D44554F46A3096DF9059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:03:6f:e8:69:33:08:ae:cd:c0:74:cf:8e:
19:5b:e1:24:c4:38:20:1b:5e:e4:4a:44:6d:e1:ee:
0e:53:f2:02:56:b3:6f:8a:90:9e:85:c9:d4:32:6a:
39:37:93:92:17:7b:a9:f9:46:bd:92:93:6f:a8:72:
0f:64:c9:2f:26:7d:39:f4:e2:db:9a:ff:5c:3e:f8:
ee:d1:dc:ce:0b:db:0a:04:26:84:68:27:6d:c0:e8:
a7:66:5e:4e:bc:a9:de:1a:f6:53:81:4b:0f:5d:cb:
0c:bc:e9:6d:3d:fb:db:d7:d3:55:08:f1:79:27:10:
1e:a1:3c:7e:7f:2d:8e:c8:7a:0d:75:b8:89:16:7e:
a2:12:01:a7:84:0a:bc:40:85:5f:ec:51:ef:3d:50:
35:2f:78:17:28:6d:69:c5:7d:37:a0:55:ce:5e:9c:
d6:5f:85:a5:ef:0e:c9:4f:2d:ce:7a:31:99:60:d4:
2f:dd:e6:54:83:89:3e:c7:6c:82:be:27:43:51:26:
7a:ca:6f:4e:ad:07:20:48:14:9f:1a:ea:df:89:fc:
11:f5:59:e8:1c:b1:1a:50:98:17:6c:e1:f9:4b:06:
83:08:0b:4a:42:7f:af:18:e1:d6:67:09:f7:ef:b4:
66:da:80:ce:8a:7f:4b:d2:52:8f:6e:78:95:85:63:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:DF:8A:26:1E:2F:F0:06:72:D4:45:54:F4:6A:30:96:DF:90:59
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c4b::/48
Signature Algorithm: sha256WithRSAEncryption
cc:b3:dc:0f:34:a2:26:fa:f9:55:a9:48:71:2c:fa:aa:48:2b:
40:df:3f:fe:71:15:9b:90:ad:fd:6a:1e:e5:16:ee:3b:68:f6:
3c:7b:c2:91:14:ec:45:63:f6:b5:15:31:bc:70:b1:d7:78:47:
29:fa:39:76:b6:cd:bd:7f:36:f1:f3:3c:ee:d9:8d:95:47:7e:
ba:a3:51:31:8a:54:d3:51:c8:5b:81:a4:aa:ac:6e:36:be:16:
51:c2:0d:0e:b5:16:74:37:0a:ca:de:69:42:d1:5b:33:8b:e5:
54:79:8d:54:5f:b3:f6:a3:ba:35:0d:59:e5:32:33:bc:03:d1:
05:9c:28:cf:54:0b:60:46:f8:e8:0f:3d:28:07:56:75:98:1c:
10:c7:3b:59:42:97:57:6e:3f:34:e7:72:6c:be:56:d8:54:4d:
4a:0f:51:c7:91:f7:f7:44:40:a4:e2:8f:6e:a7:a1:46:2e:fb:
b7:22:1e:23:ca:dd:58:03:2f:3b:3f:d6:53:5d:37:27:f3:5e:
ab:de:c2:ac:3a:58:cc:a4:c5:22:f6:0f:c9:8c:4b:23:a7:c7:
07:fe:d0:4a:f0:dc:ac:99:fe:c9:c9:f1:b0:45:7d:d2:cc:30:
1c:f1:fd:60:fe:f1:1c:fb:5a:6b:26:f2:df:33:73:3a:ad:83:
94:12:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:14:34 2025 by rpki-client