Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
File: AS206921.roa (raw, json)
Hash identifier: mpTu7Utftol4o9gduOffqgX53nqYve2DM8+uw9SBueA=
Subject key identifier: C4:B2:79:00:79:0D:44:06:BB:36:2E:4F:8B:47:A4:EE:C3:13:3E:FC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: A91EC99C344929A2C872F18BF2B928CAC8832E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
Signing time: Mon 16 Jun 2025 17:14:45 +0000
ROA not before: Mon 16 Jun 2025 17:09:45 +0000
ROA not after: Mon 15 Jun 2026 17:14:45 +0000
asID: 206921
IP address blocks: 2a0f:85c1:c68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a9:1e:c9:9c:34:49:29:a2:c8:72:f1:8b:f2:b9:28:ca:c8:83:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 16 17:09:45 2025 GMT
Not After : Jun 15 17:14:45 2026 GMT
Subject: CN=C4B27900790D4406BB362E4F8B47A4EEC3133EFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:98:7d:0e:92:00:6b:b0:ec:df:07:d4:64:09:
c5:ee:32:c6:eb:88:12:34:19:13:27:4b:49:33:d9:
41:f5:8c:39:c5:8e:5d:40:5d:9a:9b:aa:63:fc:9d:
48:f0:d9:76:db:53:92:7d:e5:24:b9:8d:47:f5:2a:
d9:de:0d:9f:9b:56:42:3a:fd:a0:4c:a5:80:86:5c:
e8:cd:87:81:f7:3a:4f:fb:84:6a:d6:0d:18:97:73:
b4:0a:c4:04:88:f2:fb:87:8d:09:3d:f4:3d:98:09:
7a:6d:ed:30:b5:f4:3c:9c:a3:ab:8c:a2:a6:c9:4e:
6a:10:6b:6e:25:29:67:1d:cb:5a:4f:1e:02:7f:22:
53:c9:b6:67:81:05:e2:38:20:9b:57:03:c4:08:c4:
9d:28:a0:8a:69:aa:b2:91:99:19:0b:52:6b:d1:db:
f1:1b:3b:24:bf:61:60:d0:c2:02:23:81:d3:2c:9e:
14:6d:21:28:98:b9:60:a7:c8:03:bd:66:73:7c:6b:
04:79:5e:7f:e3:3f:34:39:d6:67:9f:0a:23:e0:47:
d2:06:70:c8:ca:8a:05:79:30:52:77:b6:1f:74:74:
1a:d8:54:77:42:d4:2a:c0:14:7c:f5:0d:86:6e:d7:
3c:82:24:12:80:d1:82:f6:ef:35:cd:34:76:4d:85:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:79:00:79:0D:44:06:BB:36:2E:4F:8B:47:A4:EE:C3:13:3E:FC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c68::/48
Signature Algorithm: sha256WithRSAEncryption
6d:f1:25:09:90:2d:2e:39:bf:14:ac:cc:54:b5:99:94:fe:8f:
24:e5:ae:9e:2f:d2:89:84:94:17:55:39:34:5a:b4:78:67:12:
4b:68:05:fe:fc:8d:a1:1b:64:3c:a0:46:d2:42:ad:b5:a5:67:
3d:fc:b6:d4:06:04:d4:0a:e4:1c:c6:ed:4b:2c:88:bc:88:44:
d7:42:87:e3:0c:1b:b2:87:e1:bf:0b:23:0b:d3:4d:ec:83:58:
0a:60:4a:61:b3:ea:2f:76:36:6c:a9:58:7f:aa:df:0e:4f:44:
fa:ae:68:b9:ed:60:ae:c1:9b:c1:0e:c4:b4:13:67:68:38:74:
26:a4:39:e5:fd:79:1c:9b:72:a5:69:60:f8:3c:91:b2:bb:53:
31:48:5d:7c:35:61:2c:29:a6:2a:04:1a:02:d8:6e:0d:69:cb:
10:d3:27:5f:ba:c6:8d:0f:f3:f2:b1:e7:69:e9:f2:56:28:19:
5f:7b:7a:ac:fe:79:29:ee:f5:0f:0e:90:70:a4:e3:2d:bf:07:
d6:13:8d:b1:1d:2e:e3:b0:55:ab:30:ef:0b:89:7b:4d:0c:5c:
59:d1:be:e7:8a:d9:94:d2:d1:de:b4:bc:ab:a7:3a:1a:a7:a5:
82:de:bb:13:35:fe:55:a8:e2:cf:a5:a5:43:e7:3a:a7:a0:94:
7c:97:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:15:08 2025 by rpki-client