Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
File: AS209192.roa (raw, json)
Hash identifier: 9kFK9vZio2259iGz3dmf4RYR9hX7885MrV6AVGnzinA=
Subject key identifier: 42:9B:1F:7F:23:14:3A:79:A4:75:6A:18:8B:3A:56:78:35:22:60:7E
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5E0956AFD35E67AC90DBF07C5BA6D9A2A1D30857
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
Signing time: Fri 30 May 2025 07:44:53 +0000
ROA not before: Fri 30 May 2025 07:39:53 +0000
ROA not after: Fri 29 May 2026 07:44:53 +0000
asID: 209192
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:09:56:af:d3:5e:67:ac:90:db:f0:7c:5b:a6:d9:a2:a1:d3:08:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: May 30 07:39:53 2025 GMT
Not After : May 29 07:44:53 2026 GMT
Subject: CN=429B1F7F23143A79A4756A188B3A56783522607E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:28:a4:58:e2:d3:73:d8:01:90:8e:27:3a:
1b:b0:96:67:49:3e:24:ad:78:13:af:79:36:82:f1:
b0:f7:df:ee:5a:f2:c0:85:45:20:63:21:8f:37:91:
5f:64:3b:b9:00:54:93:b3:15:be:ba:b6:30:d0:31:
88:82:dc:07:15:cd:fd:12:72:a3:17:6e:1a:78:5d:
2e:c4:a4:7e:f0:5c:af:ef:e9:d7:07:67:ff:ea:fb:
86:7b:9d:75:ef:cd:41:65:eb:73:28:4b:82:f2:8a:
72:d8:c6:f3:78:a3:45:1b:ef:7c:b6:48:3f:54:78:
4b:53:28:0a:5a:26:08:c5:a3:03:89:ab:c7:84:60:
c2:2d:22:1f:6f:17:f1:48:8e:66:9b:e0:46:67:c8:
d6:9d:79:1a:87:bd:cc:87:f3:be:40:a7:f6:fc:7c:
d0:9f:6e:43:c6:3c:1d:88:66:3e:8d:e4:4e:2d:ad:
6c:08:e5:04:c1:aa:b0:17:cb:72:2a:09:5b:31:23:
75:23:20:13:c0:20:e2:ab:6f:8a:3b:5d:2d:fb:72:
4a:ff:0d:ba:42:69:33:17:e5:59:51:4c:23:2e:39:
7a:2b:cf:83:32:04:c9:af:77:86:30:cc:61:14:ea:
ee:a4:85:d2:73:d4:3e:b3:36:d2:66:23:4c:2e:54:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:1F:7F:23:14:3A:79:A4:75:6A:18:8B:3A:56:78:35:22:60:7E
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:6a:0b:e1:44:b0:0a:ae:cf:0d:06:12:aa:e0:97:97:9f:b9:
0b:dd:80:6d:07:22:40:33:34:80:83:34:cb:c4:a7:b0:5e:bb:
07:ca:62:34:d4:6e:e3:a2:6a:5e:e4:91:df:70:30:50:90:1b:
07:01:57:9e:de:6a:96:98:c5:dd:e1:63:99:7e:33:80:97:ea:
e5:f0:f2:18:4c:ae:03:15:d9:ea:f1:3c:5c:8d:03:2b:d5:b9:
38:fe:b7:19:0d:eb:d3:5d:13:42:09:b0:6c:17:5f:70:1f:f2:
84:57:1a:5b:69:a9:51:d0:bd:e7:25:9e:43:93:95:4d:96:32:
c5:18:e9:ad:ec:2c:4b:87:9c:a4:05:59:66:b0:9b:63:be:d7:
18:55:ac:c4:53:d6:b0:c9:77:1d:9a:61:d6:a4:c3:d3:20:d4:
4c:b0:a3:b8:6a:1f:16:24:10:8d:6a:48:14:ae:c3:b2:b9:2c:
c4:36:ec:97:e4:3c:0c:ff:6d:84:9a:e4:4d:7f:d1:00:12:54:
af:87:f9:25:71:0c:6d:26:83:5d:f1:e0:a0:ef:a3:96:5c:04:
77:c9:21:a7:36:3d:6b:0d:c8:d6:99:7c:f2:d1:81:a8:a1:c7:
13:eb:d2:09:51:8c:1a:35:e0:1c:8f:d1:0f:47:d4:d2:33:91:
0b:eb:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:18:49 2025 by rpki-client