Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209371.roa
File: AS209371.roa (raw, json)
Hash identifier: fs+t+F9sJvJlpCvynYVeHHb0Zyu/TO0P+jOvMvlLUWo=
Subject key identifier: C6:D9:C1:F8:24:ED:33:EB:35:B8:85:17:D1:EB:32:1B:6C:5F:64:A5
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 194AF1ED2DE5CA9F68C8F69BAB373050EBE2DC8B
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209371.roa
Signing time: Wed 15 Jan 2025 17:15:39 +0000
ROA not before: Wed 15 Jan 2025 17:10:39 +0000
ROA not after: Wed 14 Jan 2026 17:15:39 +0000
asID: 209371
IP address blocks: 93.190.9.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4a:f1:ed:2d:e5:ca:9f:68:c8:f6:9b:ab:37:30:50:eb:e2:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 17:10:39 2025 GMT
Not After : Jan 14 17:15:39 2026 GMT
Subject: CN=C6D9C1F824ED33EB35B88517D1EB321B6C5F64A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:35:69:0f:65:12:04:29:92:21:3f:f7:22:
a2:1f:5f:89:4a:8c:fb:05:3d:41:da:7d:a1:4c:95:
fe:36:c8:1c:73:a4:5f:e4:38:2f:3d:d7:0c:96:4b:
e5:9d:7b:be:0b:2a:c3:a1:3b:20:60:0e:c7:c6:94:
ef:71:b5:b9:08:8d:01:9c:41:e6:c7:af:58:96:ff:
b2:42:6b:58:7c:3a:db:02:ef:83:61:2f:99:54:6d:
ab:71:8e:ae:17:01:27:87:23:27:68:f1:e9:d2:99:
84:c9:8f:8f:65:cf:8f:e4:9f:9b:fb:54:03:93:78:
19:8c:02:8f:9c:66:dc:85:78:47:6d:24:8b:c6:a1:
bd:6c:ca:6d:a1:3b:9c:09:98:0c:12:68:16:9f:db:
46:e3:15:c7:4e:c2:9c:57:c0:6a:b0:4a:2c:21:f6:
c9:83:ad:b1:0f:02:90:8b:24:33:9a:4e:4a:95:75:
34:75:9c:fb:d6:11:ae:43:1e:47:06:2f:c1:87:12:
4f:22:66:25:48:b4:56:2f:c4:ce:09:5d:79:8c:95:
0b:d9:66:79:d4:e8:84:83:72:da:6e:cd:8b:82:54:
98:80:00:d6:1a:eb:38:5c:92:37:5a:8d:f5:dd:7c:
fa:4d:f7:ef:e9:33:e6:22:ec:19:11:91:93:92:5a:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:C1:F8:24:ED:33:EB:35:B8:85:17:D1:EB:32:1B:6C:5F:64:A5
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS209371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.9.0/24
93.190.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:48:3e:17:68:64:7a:11:4d:f5:87:81:85:75:a5:98:0c:b3:
b5:94:84:07:c5:ce:2e:6b:37:b4:a0:e8:76:22:d3:f3:b7:e3:
1d:44:bd:21:25:74:dd:74:10:ca:1f:99:20:39:14:f8:11:59:
36:ba:f3:9f:5c:e9:bc:4c:00:e6:cb:a7:17:ee:8b:3f:e9:79:
9a:13:4e:2d:3e:17:46:a8:99:92:eb:f0:f6:2b:7f:5a:db:bc:
6a:ab:87:d0:7d:f6:fe:ce:88:78:2a:33:29:ab:78:23:48:00:
44:9d:f8:a3:42:e4:17:fc:6d:d9:77:72:34:59:71:32:62:75:
e8:ab:99:47:38:fd:fc:6c:d8:12:7f:eb:ef:07:0c:1c:19:f4:
17:8c:95:a5:01:5f:f9:ae:54:56:1a:9a:7b:07:01:3a:c2:be:
f5:b4:7f:ec:c2:29:87:ed:b6:3c:03:d7:ce:d8:62:38:d9:d4:
46:57:ef:e7:6c:ec:5f:53:cd:31:20:7b:0e:2b:2c:0a:0b:8c:
90:c2:c3:97:f1:e3:78:6d:6e:a6:4e:18:22:fc:b6:94:4d:ba:
28:80:84:da:c6:e7:8f:70:77:f5:20:d4:66:12:9d:4f:cd:8a:
7d:ec:b1:c5:a8:b0:81:56:3e:bf:df:1e:ec:77:57:c5:ad:1e:
1e:a5:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:17 2025 by rpki-client