Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
File: AS199959.roa (raw, json)
Hash identifier: yc4V68sMRWAu80yU29WXFYq7Rdh76bKv3+/gOHKhCbg=
Subject key identifier: 37:6E:06:E0:B2:B0:00:A5:DE:1D:85:F4:85:23:81:B0:0F:FC:E2:B2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 51B0EB9AE41096F52BE16BEE53D4273139A14405
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
Signing time: Wed 28 May 2025 00:00:09 +0000
ROA not before: Tue 27 May 2025 23:55:09 +0000
ROA not after: Wed 27 May 2026 00:00:09 +0000
asID: 199959
IP address blocks: 91.124.178.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
91.124.216.0/24 maxlen: 24
91.124.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:eb:9a:e4:10:96:f5:2b:e1:6b:ee:53:d4:27:31:39:a1:44:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 27 23:55:09 2025 GMT
Not After : May 27 00:00:09 2026 GMT
Subject: CN=376E06E0B2B000A5DE1D85F4852381B00FFCE2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:d1:59:ff:32:3c:2a:87:a5:24:c7:ec:09:
f9:14:69:c0:96:c6:e4:3b:3a:09:91:0c:1f:d2:72:
87:49:be:b3:35:e9:f8:f6:a1:5c:ef:c9:f3:8c:60:
38:02:fb:01:bb:4d:c8:66:9f:d3:39:29:03:d7:35:
89:30:dc:a9:43:0e:de:0c:44:3e:b0:7d:d8:c7:cf:
4d:a1:5a:98:71:b9:b9:45:cf:74:cf:58:73:00:fc:
d0:6c:c3:33:18:13:ed:d2:8b:a8:ad:87:5b:b1:ea:
33:22:18:23:61:5e:df:73:2d:15:4f:7c:7a:fa:35:
1b:ed:c5:67:22:1d:84:18:f1:a7:b8:f1:8b:c9:3a:
a9:4e:a8:d5:f4:c1:af:cb:4b:2e:b0:ae:5c:38:f9:
c9:71:00:53:d4:07:f4:32:ae:30:70:ac:28:84:2a:
68:df:81:e6:85:13:c6:58:34:40:a8:64:d1:b4:e4:
1c:e4:fe:86:5a:45:cc:a8:3e:d0:77:8d:72:7e:c4:
91:e6:5b:45:28:4d:60:a7:18:d8:65:89:a7:1b:dd:
0e:b4:71:82:44:3e:4c:ed:c0:19:7e:86:f2:66:20:
02:2b:2a:2e:2e:47:61:d9:5a:35:bb:7c:29:d6:93:
88:1d:ce:2d:61:83:2e:79:c1:4b:38:f6:42:eb:be:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6E:06:E0:B2:B0:00:A5:DE:1D:85:F4:85:23:81:B0:0F:FC:E2:B2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.178.0/23
91.124.216.0/24
91.124.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ff:ee:48:23:2a:e0:fe:5b:3d:0a:94:48:7a:29:8f:26:f1:
71:cd:43:6c:5e:c8:57:76:1d:62:8a:f7:55:9a:7a:51:f1:d4:
0e:8b:d0:ac:1c:7d:11:c1:4d:93:4b:da:ca:4a:6b:a5:24:3e:
9e:0a:47:96:61:7f:fc:ea:c8:af:c9:93:d9:dc:6b:50:d6:29:
a2:2f:15:f4:74:5b:12:66:e8:d3:82:f5:d4:47:b7:a0:fd:3f:
85:29:39:8b:8a:f7:f9:01:38:db:a6:94:1e:fc:a4:0c:41:fb:
07:c1:48:d5:16:93:89:b4:04:55:63:0c:c0:84:82:af:b5:3d:
56:1b:de:09:df:ee:9c:03:e7:e6:66:91:07:b6:23:47:08:59:
45:be:7d:7b:67:0d:a0:54:f4:6a:7b:83:7f:02:b7:ed:ad:ae:
74:57:8e:8d:fa:c2:8d:68:4f:31:8d:c5:4b:de:b4:b0:49:6c:
b8:df:27:36:27:2c:89:72:8b:88:1a:5e:90:7a:81:c7:cc:9e:
32:6d:16:65:54:07:6d:32:51:4e:e1:04:49:c2:aa:a7:f8:0c:
51:4d:2c:93:f2:20:d1:f1:a7:54:e9:05:36:43:05:0b:2f:ea:
1a:d1:ed:83:39:88:3b:8c:2e:0b:da:c9:51:b0:1b:7b:3c:2c:
70:0c:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:14:30 2025 by rpki-client