Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
File: AS209858.roa (raw, json)
Hash identifier: BxzNoFkoq/PeV9QgNgsyiDz8k7/px8ccoa0I0LRWBe4=
Subject key identifier: BE:AC:6F:FF:E5:8F:0A:4E:E9:CC:8A:06:05:48:F4:0C:7F:E7:83:B8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 26C7A6221F3B78AE3EEAC8C6CD8668BCD653664E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
Signing time: Mon 28 Apr 2025 13:40:08 +0000
ROA not before: Mon 28 Apr 2025 13:35:08 +0000
ROA not after: Mon 27 Apr 2026 13:40:08 +0000
asID: 209858
IP address blocks: 2a14:7581:fef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 11:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:c7:a6:22:1f:3b:78:ae:3e:ea:c8:c6:cd:86:68:bc:d6:53:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 28 13:35:08 2025 GMT
Not After : Apr 27 13:40:08 2026 GMT
Subject: CN=BEAC6FFFE58F0A4EE9CC8A060548F40C7FE783B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:61:71:bf:46:82:16:fa:74:79:a6:f5:ff:
0d:f3:81:d7:51:43:76:0b:3a:07:88:67:15:6f:43:
b4:5b:78:61:18:24:63:16:b3:47:70:bc:e7:00:82:
58:7f:19:7e:0b:ee:e7:88:d0:9d:45:f6:02:27:aa:
53:d6:eb:2a:c3:6e:ed:d6:d9:b9:34:83:ae:c1:88:
bf:50:ad:a1:55:0a:4d:96:41:5a:b9:e4:e2:96:0a:
2b:c7:09:ca:db:fb:5b:28:d3:00:3e:08:4b:bc:0d:
71:b6:e9:d6:97:c9:db:2b:f7:29:c7:67:c0:df:80:
2f:3e:88:24:42:7b:cc:d0:ee:67:cb:bb:16:95:ef:
02:d3:51:c5:33:5d:7b:36:90:e0:12:b5:fb:18:bf:
e5:cd:3d:ad:dd:01:a1:6d:36:7b:c2:50:d8:c6:3d:
89:71:67:7b:2d:1e:56:87:69:cc:f9:e9:6c:e6:e1:
c7:b1:b6:93:3b:f2:25:2c:86:c2:04:39:78:d6:aa:
2f:cb:1b:0a:ad:d0:85:2a:86:ec:5d:4b:ec:0e:8b:
1b:9f:0a:60:37:0d:94:b9:d4:4a:cd:43:a8:d3:04:
80:b4:26:fb:98:0d:e1:4c:14:e4:ee:6b:35:89:a8:
26:ad:53:cc:ec:d2:33:31:ed:34:e2:e8:17:8a:a7:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:6F:FF:E5:8F:0A:4E:E9:CC:8A:06:05:48:F4:0C:7F:E7:83:B8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fef::/48
Signature Algorithm: sha256WithRSAEncryption
0e:00:72:f0:fc:f5:69:a8:33:1e:8c:05:ff:b1:d9:fe:2d:05:
45:d2:39:ff:99:68:ab:2f:91:38:5c:b3:8f:82:ff:0f:8b:b4:
9f:42:bf:2c:0c:fa:9b:42:da:c0:74:4f:16:4c:7c:e2:f4:89:
fb:9a:14:20:f2:fe:d0:30:10:d0:ef:4e:5d:9f:f4:94:32:6a:
17:5a:eb:98:b9:f3:99:50:cd:e4:1e:75:d4:03:eb:d1:f0:15:
fe:88:5a:e9:a2:9b:b8:fe:04:5e:84:a3:6d:b6:96:a6:45:05:
6a:ba:fe:83:8f:ea:8a:d3:e3:40:75:a2:40:df:60:dd:f0:69:
bf:94:0b:de:79:6c:0b:35:f7:64:01:f3:5e:cb:9a:90:fe:ff:
dc:72:fd:2e:af:3f:13:ea:2d:53:5d:bd:3a:c2:7f:4c:67:ee:
cd:eb:d1:52:b6:86:7c:f8:d9:c2:c7:b4:fd:c7:23:c4:46:c2:
08:0a:35:03:13:32:a3:2a:93:42:d8:a9:92:db:05:00:db:db:
c1:62:39:0d:60:4d:d1:b1:c0:d8:7e:43:57:45:8c:ed:25:ec:
f0:56:18:8d:c0:93:79:3a:d5:bd:7e:c1:43:0c:20:20:da:ff:
13:2f:65:9b:9f:71:a2:68:3f:ce:91:a0:cf:77:0d:ea:f0:84:
54:59:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:34:35 2025 by rpki-client