Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201079.roa
File: AS201079.roa (raw, json)
Hash identifier: drv8CrD91bsE1Qpf399z5fCoGRCG5+lSeQqGreVRQMs=
Subject key identifier: 13:09:DF:81:D9:F5:7E:FD:B9:A6:61:7A:93:6A:1B:53:C4:17:14:BF
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1F5776278F5786E1AE75B3E3AFF1B4AFD6DAF59D
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201079.roa
Signing time: Wed 11 Jun 2025 16:25:25 +0000
ROA not before: Wed 11 Jun 2025 16:20:25 +0000
ROA not after: Wed 10 Jun 2026 16:25:25 +0000
asID: 201079
IP address blocks: 185.254.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:57:76:27:8f:57:86:e1:ae:75:b3:e3:af:f1:b4:af:d6:da:f5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 11 16:20:25 2025 GMT
Not After : Jun 10 16:25:25 2026 GMT
Subject: CN=1309DF81D9F57EFDB9A6617A936A1B53C41714BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:0f:66:b2:cc:19:50:39:7d:b9:1f:8c:4d:
37:79:ea:9e:78:71:a4:50:23:c0:32:c9:c1:d8:ba:
95:54:7d:9b:d6:d1:5b:09:3c:b8:fb:ac:29:f0:24:
78:04:08:80:e7:e3:fe:8f:62:64:78:09:4c:87:7d:
aa:46:b5:f0:b9:ac:41:7e:55:b0:66:bf:fb:44:ee:
97:d3:05:6f:2c:25:d4:00:e2:c4:48:0b:11:d8:9c:
74:09:d4:2e:60:56:4d:46:f3:cd:7f:52:96:9b:c1:
f4:cb:17:b5:fb:fe:11:c4:2e:be:37:2b:1a:26:40:
a2:aa:9f:0f:f7:96:cc:48:a4:38:17:6b:5f:21:1b:
6d:98:39:10:bb:81:00:af:3a:39:62:56:ca:aa:41:
ed:1b:aa:92:c6:61:25:88:3b:5d:d9:8a:a4:7d:76:
98:f9:eb:0c:58:94:d4:c3:a9:e3:c8:92:f0:99:d0:
30:d7:a1:15:3c:1e:e4:b2:2c:bc:07:26:d1:d2:33:
16:ca:19:a7:4c:8d:7d:8a:ca:e7:c2:44:f7:ac:76:
f3:ba:d5:96:53:b8:f9:36:4f:66:39:90:3e:8f:ee:
5c:5b:99:f8:c2:0f:c4:24:04:c9:f7:30:31:19:ff:
ef:f3:3d:ed:22:2f:7d:63:34:e0:ae:d3:27:01:b9:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:DF:81:D9:F5:7E:FD:B9:A6:61:7A:93:6A:1B:53:C4:17:14:BF
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:91:1c:47:53:ee:4d:d0:7f:98:f5:52:0e:5f:e5:84:48:11:
2d:e2:e9:3b:a5:9c:74:c9:eb:72:7d:4a:4c:00:c8:49:68:10:
ff:e3:52:93:33:70:5f:62:3d:7a:09:d5:52:cd:4e:d0:93:41:
96:ef:24:a6:02:cd:e4:f5:bd:de:8c:95:db:6b:57:2b:26:69:
56:32:37:75:55:98:ef:ee:a1:26:0a:f5:01:71:42:72:b7:a6:
f2:99:95:11:e6:72:f1:da:03:b6:cb:2e:47:32:68:ac:1e:57:
a2:ce:3c:00:16:5c:20:b4:e2:c2:c3:ca:5d:b2:2c:0d:8b:4a:
51:e7:61:57:a7:dd:8c:89:af:23:c1:f4:94:01:fc:8d:d6:e6:
f9:f3:aa:39:dd:3e:05:a5:0e:6b:4d:41:35:25:cb:bb:24:18:
d3:0f:a4:15:c2:fa:61:73:c5:d2:d8:94:c1:af:f4:bb:28:f6:
5d:4e:fc:2f:2d:93:6e:c5:63:5c:78:60:c5:85:10:51:54:a9:
ff:e7:28:48:34:a1:2e:f6:ea:8f:7b:b6:ed:56:06:3c:b1:5f:
e2:72:09:44:1b:8f:33:bc:ed:74:69:32:20:7c:f5:f9:da:6d:
72:27:5e:e6:7d:7e:3a:53:ad:08:52:0c:7d:35:cf:d8:e3:3d:
7d:7c:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:38:22 2025 by rpki-client