Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: xojQ6pYQcVYFo2VYHqooaGaGue5Ig6D1xkEb5z9mSq0=
Subject key identifier: 75:90:C4:43:EA:31:B8:73:CF:A2:2E:AF:09:4D:3C:1D:AE:59:2D:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 157131B2562F0BBD02B1FC90C816CF3A0C4F7AF9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Mon 14 Apr 2025 04:54:01 +0000
ROA not before: Mon 14 Apr 2025 04:49:01 +0000
ROA not after: Mon 13 Apr 2026 04:54:01 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:71:31:b2:56:2f:0b:bd:02:b1:fc:90:c8:16:cf:3a:0c:4f:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 14 04:49:01 2025 GMT
Not After : Apr 13 04:54:01 2026 GMT
Subject: CN=7590C443EA31B873CFA22EAF094D3C1DAE592D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:af:0b:22:6b:d4:a3:08:93:00:10:c6:11:
8a:9e:6f:bc:a7:5d:16:82:a8:d7:64:a7:a6:80:37:
71:f8:41:7f:04:b9:0f:29:f8:db:76:b7:28:c4:54:
e9:f5:1d:97:52:db:2d:bd:67:cf:68:58:fc:72:31:
da:fb:33:a0:d2:3f:d9:f6:60:96:50:04:f9:9c:b0:
7b:98:4e:e2:53:a2:bf:1a:9e:d7:11:76:c3:24:fc:
7a:94:50:fd:5b:7a:e6:03:80:40:c5:d0:8a:05:58:
f6:32:d7:88:a5:2d:1f:12:f0:07:50:1c:f0:47:58:
ad:51:4b:74:33:d7:a0:77:12:17:65:e5:8c:a1:b8:
16:81:d1:69:3a:c6:21:95:48:0e:a1:df:97:10:81:
5f:c2:91:95:bf:28:da:48:59:1f:6d:3b:49:be:fd:
1e:5d:ae:ab:15:98:34:91:fd:2e:c5:5a:df:cb:ad:
70:52:f9:ac:85:6c:0e:70:8d:d0:f4:25:05:74:95:
c4:95:1e:05:79:23:94:14:e0:a1:82:e6:47:1c:af:
49:0b:4e:8b:b0:e0:35:50:00:83:a1:88:e0:22:d4:
79:75:21:8e:a7:d8:77:9b:01:7d:11:75:5f:6a:b7:
4f:51:4b:3f:65:2a:01:6f:ce:7c:f2:4c:7b:6c:d0:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:C4:43:EA:31:B8:73:CF:A2:2E:AF:09:4D:3C:1D:AE:59:2D:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:49:11:29:e9:ba:c9:43:98:62:8a:f9:2b:1f:f4:2b:f6:ad:
1c:1f:d4:49:19:73:3b:d9:bf:87:e1:32:10:48:0f:97:de:97:
67:0b:a0:b2:c6:b1:48:fc:91:37:7d:38:83:3e:d8:20:3f:7f:
d5:1a:4b:a8:fd:af:78:8e:83:cc:e4:94:2b:79:20:25:7a:26:
5a:ad:f1:57:0a:43:01:1c:61:75:9a:9f:73:bf:0a:58:53:2a:
1b:b8:4e:2c:36:45:0b:ff:8f:20:91:d6:09:bc:de:0d:2c:49:
bc:39:53:2c:06:99:63:b9:61:4f:12:65:a6:5c:f9:57:aa:51:
8c:d8:b5:d3:2b:39:f7:58:13:c8:42:72:bf:25:ae:67:ce:e7:
9c:a5:ec:e5:b0:e7:3f:04:04:ce:ff:78:35:9d:f5:eb:c9:2d:
bd:25:92:b1:9c:95:50:7f:70:23:36:8a:ba:fa:e6:c2:ca:59:
52:2f:89:7f:4a:16:37:5d:52:7d:60:57:f6:67:7f:8e:22:00:
d9:aa:0f:a9:e4:3b:7c:01:37:36:8a:4e:69:f0:92:0d:c4:90:
44:4f:c9:da:f1:3b:dd:a3:5f:ab:a3:15:3e:21:9a:8f:80:9e:
29:f5:30:97:22:78:a3:f1:24:ca:cf:6a:1d:ca:d7:cc:10:fb:
fe:a8:06:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:49 2025 by rpki-client