Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
File: AS206150.roa (raw, json)
Hash identifier: irD5gFqOVm6jpesk/PlZLRVRvd0e8LcSV4fIRA8/Flc=
Subject key identifier: 8C:00:FC:D2:86:2E:ED:4A:5D:B7:C7:B1:C3:8C:B2:52:B6:85:DF:0E
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 31AE254D7689E56BAA1FABC72E9AABC68769CD21
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
Signing time: Wed 15 Jan 2025 16:37:17 +0000
ROA not before: Wed 15 Jan 2025 16:32:17 +0000
ROA not after: Wed 14 Jan 2026 16:37:17 +0000
asID: 206150
IP address blocks: 193.32.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ae:25:4d:76:89:e5:6b:aa:1f:ab:c7:2e:9a:ab:c6:87:69:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 16:32:17 2025 GMT
Not After : Jan 14 16:37:17 2026 GMT
Subject: CN=8C00FCD2862EED4A5DB7C7B1C38CB252B685DF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:14:e3:fb:15:db:65:4e:8a:22:b5:2d:24:
43:53:d1:70:41:f9:84:1c:69:40:56:fe:66:36:3c:
60:74:6b:49:f0:1b:04:67:5b:d8:ae:cb:0e:a6:af:
23:73:53:f5:53:4c:ac:06:fa:0b:00:56:92:96:9d:
14:9b:07:fa:64:61:bc:c5:67:fe:06:70:d4:f6:a0:
5e:b9:ba:22:21:54:1a:45:1a:84:d6:be:a2:f6:58:
37:d9:90:ba:66:f0:25:29:a8:ac:58:ba:de:6f:c1:
cc:e9:dd:eb:93:fd:30:21:7d:8d:7d:af:05:df:ea:
1e:b7:f3:35:99:2c:eb:30:08:43:26:a2:6d:4f:5c:
37:46:d8:6c:0f:2e:7f:8d:0c:ae:fd:a5:93:38:4f:
e4:e5:b9:1f:c8:e3:e4:c3:74:48:07:57:1a:4a:fd:
7d:c3:87:f6:27:6f:6c:bb:35:d0:16:b2:21:05:be:
c4:13:69:fc:a6:d4:9a:1f:9d:78:2f:9f:65:24:69:
b7:be:e0:31:5a:1d:19:b0:8c:52:a4:58:2d:65:91:
73:22:0f:4c:58:65:ba:93:40:3a:c2:86:73:b0:92:
96:22:cf:4a:af:3c:c1:af:3b:2b:af:4d:ea:6d:55:
10:0f:ec:98:13:ec:d0:de:63:ae:2b:cb:44:dd:7b:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:00:FC:D2:86:2E:ED:4A:5D:B7:C7:B1:C3:8C:B2:52:B6:85:DF:0E
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.184.0/23
Signature Algorithm: sha256WithRSAEncryption
35:6d:eb:cd:97:7d:7f:79:8f:7a:7a:aa:9f:07:f8:25:97:c0:
fb:e2:41:25:a3:0b:d3:7c:86:af:3b:e1:02:a3:47:29:d3:9a:
48:ad:26:45:41:af:f1:1d:02:46:cd:cc:7d:a5:a3:d8:48:2f:
b4:39:c1:c9:3d:c3:6e:d6:fb:ca:c7:59:e6:b6:40:b5:10:b8:
e7:a0:83:63:10:cc:32:b8:0c:65:dd:ad:f3:dd:c8:3d:12:3a:
42:95:15:bb:47:20:04:12:a8:a4:24:ec:35:00:a1:d1:a4:5d:
3a:29:90:fd:6b:0b:93:28:32:be:8d:d7:d0:62:dd:99:75:61:
42:dd:e6:46:8f:11:e9:40:03:59:4b:0a:cc:15:2a:59:8e:42:
34:65:19:04:f2:a3:7e:64:ca:8a:a6:de:2e:88:ad:c5:59:40:
96:ce:c2:9b:0c:ae:df:7d:99:17:6f:61:c3:66:df:ab:8a:31:
0e:d1:35:11:43:bc:83:b3:c8:d5:a0:2a:c5:91:3a:7a:18:17:
b5:8b:4a:50:d6:6a:08:6d:31:2d:99:68:f5:d0:dc:ab:35:89:
6e:b5:b2:2f:60:a3:e6:4b:9d:06:b1:12:9f:b3:9c:66:09:4c:
d6:52:68:ad:e6:40:6f:9b:f6:2b:6c:72:93:3d:fc:81:39:18:
fa:2c:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:18 2025 by rpki-client