Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
File: AS206150.roa (raw, json)
Hash identifier: eAsypIAyA8Kdbn0XoaRDvgLYzH/AwQUCck6taoH8hnM=
Subject key identifier: 57:10:C0:5F:F1:12:E5:5E:A3:7C:0C:2B:12:8C:88:08:0E:79:4F:48
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 794CE8591747DBF628F37EC1383B276F6CC13C15
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
Signing time: Fri 28 Feb 2025 09:07:20 +0000
ROA not before: Fri 28 Feb 2025 09:02:20 +0000
ROA not after: Fri 27 Feb 2026 09:07:20 +0000
asID: 206150
IP address blocks: 193.32.184.0/23 maxlen: 23
193.32.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 01:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4c:e8:59:17:47:db:f6:28:f3:7e:c1:38:3b:27:6f:6c:c1:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Feb 28 09:02:20 2025 GMT
Not After : Feb 27 09:07:20 2026 GMT
Subject: CN=5710C05FF112E55EA37C0C2B128C88080E794F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:4f:84:52:6a:8e:0b:0c:df:e6:b7:d1:0d:
a6:5a:38:64:d1:0c:5b:b7:3a:26:ec:e9:be:79:45:
46:e0:9e:0c:16:6a:dc:ae:0c:93:52:73:e4:aa:a5:
80:bd:7f:22:bd:56:db:05:63:95:b9:de:16:0e:c1:
55:1d:8d:d8:71:af:d2:2b:56:30:ed:08:4e:45:b3:
78:07:3a:e1:4b:3e:ea:fb:01:04:0d:c6:93:c8:ad:
a9:d2:81:ae:7e:73:c2:22:c0:f0:28:85:3a:d7:ab:
6f:a0:ef:12:58:07:d7:c3:91:0f:ff:2a:0a:00:10:
20:e2:31:39:ac:27:91:03:05:b0:c1:b1:94:3d:cb:
48:14:06:28:62:56:e0:0a:c5:96:a1:cb:ba:4c:46:
89:92:50:ef:b7:5e:20:56:fd:89:cb:76:08:eb:5a:
c2:17:fd:c6:44:c5:24:24:a1:30:86:b0:7d:92:0a:
6f:a6:9a:74:30:13:35:8a:4a:a0:77:18:1a:53:9a:
47:85:51:03:a0:61:84:d5:19:58:5d:4a:ea:1f:2b:
e8:f2:07:e8:05:9d:19:bc:91:9d:34:36:cd:c3:eb:
f4:d3:71:88:a7:cc:a5:26:38:2f:94:f9:50:7e:9c:
71:89:08:6e:87:0b:ce:d5:24:12:08:2c:37:de:ba:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:C0:5F:F1:12:E5:5E:A3:7C:0C:2B:12:8C:88:08:0E:79:4F:48
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:8c:f9:73:7e:ba:38:4c:35:06:03:0f:e4:46:d9:31:05:dd:
f3:83:f5:09:ad:a9:7d:92:61:8d:6c:a3:c0:4a:c0:7c:ad:00:
be:a7:7c:72:38:dd:90:51:23:71:94:52:45:8e:bd:96:c5:5a:
34:b5:c6:35:9d:a2:e3:3f:ac:a7:62:24:55:b3:8f:63:a8:63:
2b:42:18:4d:ac:0a:a7:92:46:af:28:6b:ad:48:d3:9b:55:00:
93:db:98:7b:d0:7c:33:c8:78:c3:79:f4:01:4c:95:68:3a:fa:
2c:eb:99:5a:bf:20:31:84:bd:b7:30:11:e9:ff:25:74:93:bd:
34:21:5d:10:55:3f:43:05:23:a5:68:92:cb:72:a7:dd:77:50:
42:d0:e8:4c:b2:40:7a:5d:68:dc:bf:fb:59:fe:95:35:36:55:
05:a3:32:0a:ca:96:e7:27:92:b7:09:c5:e5:78:86:85:ad:30:
0c:ae:d3:06:f5:b6:cd:0b:51:bc:b9:80:fa:63:6b:c1:a4:6b:
03:09:b0:19:e9:7c:bd:1f:a5:78:d2:db:3a:99:f3:65:8c:56:
83:7f:ff:f6:49:95:7c:b6:38:eb:34:b9:e0:5f:a0:df:36:72:
33:80:e1:1c:d4:8f:f0:95:8f:a9:13:a2:59:38:42:b2:3f:b3:
e0:a1:44:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeUzoWRdH2/Yo837BODsnb2zBPBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTAyMjgwOTAyMjBaFw0yNjAyMjcwOTA3MjBaMDMxMTAvBgNV
BAMTKDU3MTBDMDVGRjExMkU1NUVBMzdDMEMyQjEyOEM4ODA4MEU3OTRGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxk+EUmqOCwzf5rfRDaZaOGTR
DFu3Oibs6b55RUbgngwWatyuDJNSc+SqpYC9fyK9VtsFY5W53hYOwVUdjdhxr9Ir
VjDtCE5Fs3gHOuFLPur7AQQNxpPIranSga5+c8IiwPAohTrXq2+g7xJYB9fDkQ//
KgoAECDiMTmsJ5EDBbDBsZQ9y0gUBihiVuAKxZahy7pMRomSUO+3XiBW/YnLdgjr
WsIX/cZExSQkoTCGsH2SCm+mmnQwEzWKSqB3GBpTmkeFUQOgYYTVGVhdSuofK+jy
B+gFnRm8kZ00Ns3D6/TTcYinzKUmOC+U+VB+nHGJCG6HC87VJBIILDfeun4/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUVxDAX/ES5V6jfAwrEoyICA55T0gwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjA2MTUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSC4
MA0GCSqGSIb3DQEBCwUAA4IBAQBqjPlzfro4TDUGAw/kRtkxBd3zg/UJral9kmGN
bKPASsB8rQC+p3xyON2QUSNxlFJFjr2WxVo0tcY1naLjP6ynYiRVs49jqGMrQhhN
rAqnkkavKGutSNObVQCT25h70HwzyHjDefQBTJVoOvos65lavyAxhL23MBHp/yV0
k700IV0QVT9DBSOlaJLLcqfdd1BC0OhMskB6XWjcv/tZ/pU1NlUFozIKypbnJ5K3
CcXleIaFrTAMrtMG9bbNC1G8uYD6Y2vBpGsDCbAZ6Xy9H6V40ts6mfNljFaDf//2
SZV8tjjrNLngX6DfNnIzgOEc1I/wlY+pE6JZOEKyP7PgoURX
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:36:22 2025 by rpki-client