Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: NrqtnVOqVDjm1WfNHiurRROfd/7hVc57MCPMJlP4naU=
Subject key identifier: 3E:C1:B5:64:10:1A:A5:16:24:24:7B:00:78:EC:89:4C:A9:17:A1:B0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 183D5E2D4E2255DB415634A20A859B709AC5EAB7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Thu 24 Apr 2025 22:48:26 +0000
ROA not before: Thu 24 Apr 2025 22:43:26 +0000
ROA not after: Thu 23 Apr 2026 22:48:26 +0000
asID: 6079
IP address blocks: 46.203.173.0/24 maxlen: 24
91.124.180.0/23 maxlen: 24
91.124.182.0/23 maxlen: 24
91.124.188.0/23 maxlen: 24
91.124.190.0/23 maxlen: 24
92.113.248.0/22 maxlen: 24
95.134.48.0/21 maxlen: 24
95.134.64.0/21 maxlen: 24
95.134.96.0/21 maxlen: 24
95.134.164.0/22 maxlen: 24
95.134.168.0/22 maxlen: 24
95.134.172.0/22 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/24 maxlen: 24
95.135.141.0/24 maxlen: 24
95.135.173.0/24 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.179.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3d:5e:2d:4e:22:55:db:41:56:34:a2:0a:85:9b:70:9a:c5:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 24 22:43:26 2025 GMT
Not After : Apr 23 22:48:26 2026 GMT
Subject: CN=3EC1B564101AA51624247B0078EC894CA917A1B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:69:41:c9:5a:01:01:6f:42:ee:10:bd:62:
e0:29:fe:8f:47:9c:ff:ef:7c:1d:df:e3:05:f3:9b:
4c:1e:7b:08:b2:03:7b:71:8a:00:e3:2e:c8:a2:c5:
26:c2:7a:62:b2:22:42:e3:f2:80:2b:39:ee:f8:e9:
11:9d:e2:c6:b7:ef:f5:f7:40:05:9d:81:3f:21:aa:
5a:d4:15:21:5a:fc:71:f6:a5:9c:d4:20:70:16:53:
4f:68:2e:42:52:ab:06:f9:81:20:ab:71:4a:bd:6c:
92:2d:4a:d1:39:d3:6b:a1:7d:01:df:9b:40:85:60:
ec:00:2b:fb:df:e3:af:6e:d8:d8:5a:82:96:5f:d2:
8a:e9:fd:96:b4:76:8a:b8:b4:14:f5:e1:ec:22:f9:
97:d1:d0:83:c8:3f:49:48:a7:28:b6:2f:81:a3:08:
3b:58:8a:2b:8e:d8:61:96:e3:aa:64:1c:ce:99:a6:
52:31:53:2a:4d:d4:57:f1:e3:14:bb:73:a3:17:57:
6b:ef:9b:88:ab:be:5e:f5:f7:c4:76:08:ab:66:fb:
a6:eb:07:24:85:64:bc:d4:11:8c:f3:b6:05:78:cf:
1b:49:aa:7d:e1:7c:5f:cd:87:ae:d7:70:e9:4d:98:
cf:16:df:e7:ed:79:c4:0a:6b:9b:f8:b3:13:0f:6d:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:B5:64:10:1A:A5:16:24:24:7B:00:78:EC:89:4C:A9:17:A1:B0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.173.0/24
91.124.180.0/22
91.124.188.0/22
92.113.248.0/22
95.134.48.0/21
95.134.64.0/21
95.134.96.0/21
95.134.164.0-95.134.175.255
95.135.134.0/24
95.135.139.0-95.135.141.255
95.135.173.0/24
95.135.178.0/23
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
95.135.233.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a4:f4:66:44:e1:46:98:df:da:e4:13:b0:ad:6e:77:0e:74:
48:50:55:6a:3e:44:68:3d:66:d0:36:a8:03:fd:50:4f:19:ba:
f3:c8:9e:d1:2c:f0:8b:50:eb:bb:aa:ed:2c:24:29:a8:df:c7:
9b:06:5c:8b:b1:3f:3b:98:af:55:d0:1e:9d:dd:df:0f:46:7e:
74:9b:e7:10:68:c8:c1:36:6a:0a:73:48:00:fc:70:be:ec:a6:
be:b9:71:94:af:f9:8c:a2:c2:de:d5:37:f0:16:fa:60:d9:6e:
0c:c9:21:6d:51:a4:2b:98:88:75:f4:89:90:6d:e1:bb:34:d3:
92:19:27:1d:40:9a:0e:e7:48:a1:0d:97:fc:04:c9:af:c7:42:
a4:98:ca:68:de:37:da:f8:79:3f:45:fb:f2:d3:fa:bc:18:1b:
22:8b:e6:23:85:2f:14:fc:f9:8c:38:a8:b4:d5:df:7f:85:1d:
b7:8a:9f:fd:c7:d2:c2:6f:dd:7b:78:5b:42:1f:ca:92:bd:0f:
b5:3e:e1:59:f5:af:29:86:99:95:a1:b2:60:f9:e1:c9:62:8f:
4a:4f:88:2d:04:32:45:51:34:38:d0:b8:41:0f:9c:07:dc:10:
c0:0a:b6:08:c0:2e:26:43:74:d4:d3:1c:51:ab:42:e1:1f:3e:
d3:96:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:49:12 2025 by rpki-client