Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: CdLiZEM8rAHggdUbke35RqOrj/IevYsApKSCs1UC4pw=
Subject key identifier: EB:3D:67:76:11:84:B8:0C:CC:B0:DA:9F:70:47:C0:99:DC:01:F9:BC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2BD29E3DDC389F16F3C70BC2003B28B3A90DDE86
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
Signing time: Wed 11 Jun 2025 08:43:14 +0000
ROA not before: Wed 11 Jun 2025 08:38:14 +0000
ROA not after: Wed 10 Jun 2026 08:43:14 +0000
asID: 206092
IP address blocks: 45.137.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d2:9e:3d:dc:38:9f:16:f3:c7:0b:c2:00:3b:28:b3:a9:0d:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 11 08:38:14 2025 GMT
Not After : Jun 10 08:43:14 2026 GMT
Subject: CN=EB3D67761184B80CCCB0DA9F7047C099DC01F9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:3d:0b:22:f6:3e:fd:e2:f8:fd:9b:27:3a:
da:c0:f0:21:41:72:93:03:cf:03:23:30:92:12:6c:
fa:e2:71:74:bf:43:3f:cc:a0:e9:72:c1:bc:94:5b:
aa:f8:a9:ae:e6:8b:4e:f9:02:ac:2e:bd:e8:dd:df:
5b:15:ff:71:a9:76:55:aa:5e:63:cd:61:a7:27:a3:
43:8d:47:4d:b5:b8:22:f6:d4:46:1e:d0:b9:38:94:
eb:19:d8:64:84:fa:0e:9f:58:27:0b:ec:fc:8e:a8:
31:23:42:6a:cb:44:a7:b2:8c:fc:e1:81:cb:0e:fd:
63:61:ae:3d:e9:5a:bb:1e:b7:ef:57:5f:7f:97:f6:
f6:3c:bc:09:81:ea:32:29:13:55:b4:6a:62:ab:3f:
b2:03:ad:6f:79:64:e5:95:cf:5c:93:3d:b9:f4:bc:
19:45:c6:1f:8d:b5:df:0f:bd:21:88:3c:e3:69:37:
38:f9:45:ab:17:ac:a6:d8:8b:b8:32:9c:dc:f5:8d:
48:24:6b:1b:06:3e:cd:63:b3:24:f5:ed:08:6e:0c:
77:85:af:ae:2c:89:bd:bd:fc:17:1a:fe:d6:a0:85:
80:72:0a:9e:ae:4d:c7:64:18:57:dd:0f:7e:b8:d0:
b7:bc:a1:71:bb:d7:a1:a1:5e:57:4c:e0:a5:90:b0:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:67:76:11:84:B8:0C:CC:B0:DA:9F:70:47:C0:99:DC:01:F9:BC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.124.0/24
Signature Algorithm: sha256WithRSAEncryption
47:eb:4a:18:01:53:3a:63:8e:1a:f1:09:bb:16:9b:40:ca:ad:
67:a1:6d:ff:34:1b:af:a9:d7:99:a0:4f:c9:47:2a:72:e8:ea:
a3:65:e3:53:e9:01:a7:64:c3:35:f0:e3:a0:fa:b8:94:f6:62:
65:2e:89:9c:58:e0:87:3b:b3:03:f9:1c:c5:8d:70:8c:20:91:
7d:bf:16:3a:59:51:db:4e:51:93:63:83:c7:fd:18:35:d0:60:
a3:74:f9:d2:57:2a:19:d0:d1:e9:2a:33:82:dc:c4:d8:be:54:
ea:79:ae:d1:b8:b5:03:1e:4f:ec:ec:ae:0d:c9:27:37:8d:1c:
75:b4:a3:ac:df:1d:07:1d:95:bc:ee:fb:82:2c:7e:04:59:d0:
1d:6b:4b:b4:1f:6f:89:4f:a5:71:28:84:d5:f5:bf:1d:9d:2d:
1d:7a:dd:27:1a:7e:ce:c2:76:17:75:02:a3:1a:2b:95:f7:9c:
fa:13:f7:77:88:bc:96:3b:82:b4:ea:20:6f:02:dc:52:28:90:
80:5f:72:22:ab:e5:66:9d:3b:69:de:0d:c0:62:46:3e:91:d5:
3c:8c:7a:2e:1b:7f:76:4f:bf:7c:4c:d8:5e:66:6e:82:e7:33:
c7:0b:9b:81:b0:50:36:a9:b9:93:ce:08:10:40:97:5c:b3:6a:
5b:76:20:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUK9KePdw4nxbzxwvCADsos6kN3oYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA2MTEwODM4MTRaFw0yNjA2MTAwODQzMTRaMDMxMTAvBgNV
BAMTKEVCM0Q2Nzc2MTE4NEI4MENDQ0IwREE5RjcwNDdDMDk5REMwMUY5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/j0LIvY+/eL4/ZsnOtrA8CFB
cpMDzwMjMJISbPricXS/Qz/MoOlywbyUW6r4qa7mi075Aqwuvejd31sV/3GpdlWq
XmPNYacno0ONR021uCL21EYe0Lk4lOsZ2GSE+g6fWCcL7PyOqDEjQmrLRKeyjPzh
gcsO/WNhrj3pWrset+9XX3+X9vY8vAmB6jIpE1W0amKrP7IDrW95ZOWVz1yTPbn0
vBlFxh+Ntd8PvSGIPONpNzj5RasXrKbYi7gynNz1jUgkaxsGPs1jsyT17QhuDHeF
r64sib29/Bca/taghYByCp6uTcdkGFfdD3640Le8oXG716GhXldM4KWQsK0/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6z1ndhGEuAzMsNqfcEfAmdwB+bwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA2MDkyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYl8
MA0GCSqGSIb3DQEBCwUAA4IBAQBH60oYAVM6Y44a8Qm7FptAyq1noW3/NBuvqdeZ
oE/JRypy6OqjZeNT6QGnZMM18OOg+riU9mJlLomcWOCHO7MD+RzFjXCMIJF9vxY6
WVHbTlGTY4PH/Rg10GCjdPnSVyoZ0NHpKjOC3MTYvlTqea7RuLUDHk/s7K4NySc3
jRx1tKOs3x0HHZW87vuCLH4EWdAda0u0H2+JT6VxKITV9b8dnS0det0nGn7OwnYX
dQKjGiuV95z6E/d3iLyWO4K06iBvAtxSKJCAX3Iiq+VmnTtp3g3AYkY+kdU8jHou
G392T798TNheZm6C5zPHC5uBsFA2qbmTzggQQJdcs2pbdiD0
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:50:36 2025 by rpki-client