Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
File: AS199959.roa (raw, json)
Hash identifier: GR5eyGhNmhoT/JLA8c8An6iDPQ88Nn4EVp4ErKg6+xI=
Subject key identifier: B8:E6:7F:CB:D7:EA:4E:FF:A3:C9:D6:C8:50:B4:05:6B:A6:62:BE:FA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 693E4EE861C728F2E392875015AAFEF70BD3FA1A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
Signing time: Mon 27 Jan 2025 13:57:23 +0000
ROA not before: Mon 27 Jan 2025 13:52:23 +0000
ROA not after: Mon 26 Jan 2026 13:57:23 +0000
asID: 199959
IP address blocks: 91.124.145.0/24 maxlen: 24
91.124.178.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
91.124.216.0/24 maxlen: 24
91.124.219.0/24 maxlen: 24
91.124.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 04:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3e:4e:e8:61:c7:28:f2:e3:92:87:50:15:aa:fe:f7:0b:d3:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 27 13:52:23 2025 GMT
Not After : Jan 26 13:57:23 2026 GMT
Subject: CN=B8E67FCBD7EA4EFFA3C9D6C850B4056BA662BEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:d5:f1:15:46:bc:a4:b5:1e:03:8c:dc:76:
f5:16:6f:46:2b:27:ea:d1:4c:50:6d:33:85:ea:91:
bc:6f:63:3a:ca:63:7d:2d:30:8b:24:19:35:70:03:
1b:19:ff:d9:00:fe:8c:f4:6e:a3:0d:01:ed:f0:07:
61:f7:13:0b:6f:ea:03:4c:7a:1a:8c:c2:26:8b:20:
2c:fb:d0:46:bf:58:9b:f0:a1:2c:35:b7:19:c4:9c:
67:0b:df:cd:03:30:fb:83:9c:53:55:ba:89:a1:f7:
73:14:0e:fa:a9:f0:00:6f:31:45:4d:4b:e0:ee:19:
1e:b6:5a:ea:c0:bc:44:64:0e:0e:00:fe:7b:50:99:
18:e7:cc:31:a9:39:d0:6f:1d:5c:5b:43:81:f5:59:
92:55:3a:8a:7f:d4:c6:1a:86:35:3d:be:e6:55:2e:
80:98:ba:eb:14:6c:02:c3:27:63:bc:2a:05:dc:40:
d3:4d:4f:73:c3:1e:f2:7d:e3:1a:af:7a:51:fe:fb:
99:56:4d:ff:72:c8:bd:8a:5c:ca:77:cf:c4:6c:54:
22:8f:f7:f1:34:4f:5e:40:29:1b:20:68:a8:75:00:
28:b0:a9:99:08:f5:ee:4d:b3:2d:24:57:30:e1:bb:
b8:9d:96:5a:2f:22:57:68:31:06:71:eb:c0:d2:9f:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:7F:CB:D7:EA:4E:FF:A3:C9:D6:C8:50:B4:05:6B:A6:62:BE:FA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.145.0/24
91.124.178.0/23
91.124.216.0/24
91.124.219.0/24
91.124.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c7:3a:af:4a:79:b3:b4:28:a2:10:86:e7:4a:be:c8:fa:a0:
50:b6:51:a1:1e:ae:08:e1:b2:49:0f:0f:a3:9e:13:85:3f:7c:
a7:dd:a6:31:35:ea:b6:dd:29:46:ed:e3:09:de:9b:6e:ed:46:
8b:f0:4b:90:b2:a4:46:54:da:5b:1f:4c:58:6d:6b:6f:90:1c:
e1:e7:a6:9e:01:90:33:80:8e:1c:4a:0c:41:59:97:8c:2e:a3:
70:d9:f1:08:2a:48:8a:0d:f5:48:e8:69:93:95:74:55:ff:fc:
b5:ab:6d:97:1b:8c:d4:94:d1:da:5c:35:d1:f6:96:c3:e0:bf:
de:fe:d3:62:87:c5:6d:e5:e4:5b:72:23:19:d3:d9:a6:29:8b:
59:30:a6:03:dc:38:4f:0a:69:b4:2f:7a:7d:b2:6c:d1:01:99:
6a:e0:fb:ce:d4:83:d3:d2:0d:1c:3a:7f:7c:8b:06:e4:d5:9f:
5b:1a:fb:cd:64:93:23:37:dc:fc:d8:63:6d:b9:f8:76:3f:3f:
7e:df:ba:79:17:df:d5:47:80:97:23:7c:8c:ff:4b:63:79:c6:
e4:bf:34:f8:bf:89:46:e5:97:de:49:f5:03:79:f0:77:9d:dd:
02:e3:de:0a:28:f4:99:4d:ba:42:69:49:3d:bb:2e:95:ff:d3:
49:97:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:45:15 2025 by rpki-client