Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: Pmg1c/66h0n797lm9+LeW86d9FwskxcPwz6ROp7kD9U=
Subject key identifier: BF:33:A7:B3:CA:66:4C:89:FB:0B:B6:9B:DD:A3:D8:D3:88:F0:BD:20
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6E5189432F28ED28E4C772C88BBEF4966853D739
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
Signing time: Mon 28 Apr 2025 07:30:07 +0000
ROA not before: Mon 28 Apr 2025 07:25:07 +0000
ROA not after: Mon 27 Apr 2026 07:30:07 +0000
asID: 6079
IP address blocks: 96.62.227.0/24 maxlen: 24
96.62.248.0/24 maxlen: 24
96.62.249.0/24 maxlen: 24
140.150.160.0/21 maxlen: 24
140.150.168.0/21 maxlen: 24
140.233.192.0/18 maxlen: 24
143.14.0.0/20 maxlen: 24
143.14.16.0/21 maxlen: 24
143.14.24.0/21 maxlen: 24
143.14.112.0/22 maxlen: 24
143.14.116.0/22 maxlen: 24
143.14.120.0/22 maxlen: 24
143.14.241.0/24 maxlen: 24
143.14.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:51:89:43:2f:28:ed:28:e4:c7:72:c8:8b:be:f4:96:68:53:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 28 07:25:07 2025 GMT
Not After : Apr 27 07:30:07 2026 GMT
Subject: CN=BF33A7B3CA664C89FB0BB69BDDA3D8D388F0BD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:7f:4d:e8:9f:e2:71:64:50:04:35:20:a2:
37:02:80:9e:c0:d6:d5:3d:69:24:e3:d8:50:ab:fa:
ee:2e:46:ae:87:75:fc:91:4e:9f:72:fe:93:00:8e:
d1:6d:21:b2:7a:4d:b6:7c:83:65:7e:3a:61:b4:c8:
bf:b5:37:49:e0:c0:f3:f6:4d:28:81:01:ad:e1:bd:
52:8e:23:0f:d3:a0:34:2b:35:5d:07:8c:00:be:99:
fc:0a:0b:de:ea:7f:a8:d0:4d:96:f8:83:40:a4:af:
b6:d7:3c:a5:df:ca:8f:cd:a4:e2:82:4b:d3:cd:cc:
79:4f:93:f2:7f:82:33:45:6b:7b:d5:bb:64:72:51:
9e:a0:86:56:48:26:42:1e:8d:83:62:9c:74:7c:94:
66:d8:04:a6:a0:e0:c1:cc:94:5b:e7:77:ed:32:bd:
70:ca:3c:41:e2:d9:c5:3d:67:cf:d8:8c:1e:fd:b0:
66:ce:d1:e3:70:3b:83:d1:1b:39:df:d6:42:f5:5a:
37:51:eb:86:ba:d3:a0:98:e3:f3:44:35:3d:31:a3:
05:94:5c:3d:dd:9b:44:b9:9d:63:6e:b6:1a:45:aa:
c0:4b:73:f2:a2:81:a0:b3:93:11:ad:e8:fb:24:dc:
01:37:c4:4f:e4:2d:b3:34:b8:ee:86:7c:e6:ea:04:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:A7:B3:CA:66:4C:89:FB:0B:B6:9B:DD:A3:D8:D3:88:F0:BD:20
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.227.0/24
96.62.248.0/23
140.150.160.0/20
140.233.192.0/18
143.14.0.0/19
143.14.112.0-143.14.123.255
143.14.241.0/24
143.14.255.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e4:27:59:03:ca:de:ac:c7:86:4d:43:fc:b9:a5:46:9d:6b:
f7:ff:4b:7c:34:03:f0:11:0b:1d:cc:62:06:a5:62:a2:14:78:
f1:4a:c5:19:76:ad:3b:ed:a9:78:f8:0b:d4:3d:38:16:d2:eb:
4d:aa:ea:3b:60:20:6e:09:ce:05:9d:27:c1:66:ce:ac:a7:b2:
a9:d7:96:6f:ce:74:85:5e:5b:29:0a:6b:f5:e3:d9:fb:92:8e:
74:2d:a2:84:a5:43:06:fd:c4:a5:0c:8e:e1:bb:d9:8a:5c:f6:
06:42:06:cf:37:de:f4:9e:1f:3c:4c:32:f3:6e:7e:16:dc:df:
99:79:e1:66:9e:f9:72:18:79:fa:03:5b:d9:ba:c3:ee:44:e8:
4e:17:b5:2c:d1:03:64:ac:0d:05:30:2a:89:86:37:cf:61:8f:
78:bf:04:1e:39:29:ed:47:fd:c6:9a:0b:16:fe:f3:c7:03:1f:
57:80:9f:2d:52:24:20:bd:89:2e:0d:31:84:b7:cd:19:b0:e6:
34:cd:d1:58:9b:02:d4:87:94:cf:8f:e4:e6:5f:b0:05:55:4c:
ad:d7:72:ee:97:06:97:27:f7:da:f4:f3:a2:ee:38:a1:70:1c:
d4:5c:d3:3c:8d:33:85:c4:af:0a:34:9d:b0:b8:a5:b7:5b:10:
93:b2:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:35:20 2025 by rpki-client