Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
File: AS6206.roa (raw, json)
Hash identifier: uNtboio2fjBuQrbuD5C2tlKGJJP/Rv1eHdbpUcHe0j4=
Subject key identifier: 49:5B:50:3A:A3:08:43:2F:41:A4:16:FC:DF:6B:AA:2E:39:AF:80:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7F2153AA183529F278C6EB56F0D143536AFC2A05
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
Signing time: Mon 05 May 2025 08:54:07 +0000
ROA not before: Mon 05 May 2025 08:49:07 +0000
ROA not after: Mon 04 May 2026 08:54:07 +0000
asID: 6206
IP address blocks: 45.133.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:21:53:aa:18:35:29:f2:78:c6:eb:56:f0:d1:43:53:6a:fc:2a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 5 08:49:07 2025 GMT
Not After : May 4 08:54:07 2026 GMT
Subject: CN=495B503AA308432F41A416FCDF6BAA2E39AF806A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:c8:56:03:bb:5a:d2:97:ac:1e:3e:1c:0d:
b5:fe:33:d5:02:44:23:71:4c:d3:d6:07:1d:90:e1:
09:a0:7a:97:88:3a:f1:53:a9:b4:78:39:4c:09:db:
37:50:e3:25:13:9b:2b:74:89:b9:ce:54:a4:a3:55:
0c:60:7d:29:7b:73:21:cf:7e:a7:0b:2c:6a:db:f0:
16:61:cc:d1:96:74:be:3f:a2:7d:09:55:3a:4b:b5:
d0:44:4d:99:d8:ca:20:f6:c0:97:0c:eb:3c:cb:93:
8e:b0:8f:ab:a6:ad:30:8d:6d:91:0e:c1:71:45:cf:
2b:da:00:7d:29:5d:55:d1:3b:85:23:0a:a1:65:bd:
ea:4e:5e:85:cd:be:bf:54:6d:e2:5a:a3:01:84:30:
10:69:1a:da:38:a5:1e:60:61:c3:5d:6a:3f:cd:d5:
30:44:6f:36:bd:b2:83:5e:da:73:be:5a:f6:5f:fd:
69:f0:9c:e6:3b:4a:3b:72:16:68:06:dd:e6:3b:d2:
1a:74:f5:63:c1:26:c1:bb:e4:05:c6:9b:db:26:51:
76:ac:e6:56:03:a8:82:a4:f4:f5:cc:7d:89:da:03:
76:e9:06:15:3a:2e:11:65:6a:f7:5f:3e:97:d4:c5:
e2:6b:cb:bf:48:e0:ba:23:af:f3:54:2d:fc:7e:33:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5B:50:3A:A3:08:43:2F:41:A4:16:FC:DF:6B:AA:2E:39:AF:80:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.174.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3c:61:34:1d:aa:71:92:21:87:84:5f:38:f4:06:2b:80:e0:
55:03:da:c8:8e:45:20:51:f6:f3:96:03:fc:72:31:e0:59:a8:
4b:18:7f:5c:b0:16:3c:b4:c8:93:1d:1e:22:72:31:54:b7:3b:
67:81:30:7c:c2:f1:9e:96:87:d2:9f:73:92:02:39:f6:83:d4:
6f:ce:77:d3:eb:dd:26:64:ab:e2:d1:1e:c4:1d:03:53:7b:9e:
45:ef:4d:72:e6:a2:68:7a:50:f3:32:df:0c:bd:12:fd:26:76:
64:f7:6c:e7:c7:c0:e0:42:6d:96:0d:ba:57:7f:55:9a:98:68:
d1:6f:03:36:f8:f1:e4:9a:e3:72:09:71:5b:bc:b5:e1:22:61:
a8:85:e2:44:4a:57:46:68:5b:3b:00:c2:12:b9:04:8f:fc:19:
af:ed:f1:52:69:00:19:6a:fd:b4:3a:9d:59:16:41:a1:08:7f:
d5:66:3a:2d:0d:bd:15:10:a5:db:07:bc:d2:76:ea:14:52:3d:
eb:d9:7e:16:db:a7:0b:fd:ea:30:ad:1e:ad:25:3f:46:55:6b:
c9:ec:0a:e0:36:90:c2:52:ca:62:2d:5d:b6:e2:71:f1:ed:ac:
59:c9:f3:58:07:3b:35:7e:96:c4:32:06:40:3d:90:97:33:d1:
3e:d2:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:24:21 2025 by rpki-client