Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: Q/tMypOx33dCusjqgbJ2Xrk6GmVwdzPholF2Ca0vMPU=
Subject key identifier: 7A:B4:83:B8:3F:A8:0E:7C:F5:83:AE:2B:D2:32:B0:84:80:A3:6E:CF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0FF2ED1BFF13E8CB6B90B78A87D83FE09676C59C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
Signing time: Tue 29 Apr 2025 00:00:09 +0000
ROA not before: Mon 28 Apr 2025 23:55:09 +0000
ROA not after: Tue 28 Apr 2026 00:00:09 +0000
asID: 6079
IP address blocks: 46.203.173.0/24 maxlen: 24
91.124.180.0/23 maxlen: 24
91.124.182.0/23 maxlen: 24
91.124.188.0/23 maxlen: 24
91.124.190.0/23 maxlen: 24
92.113.176.0/22 maxlen: 24
92.113.180.0/22 maxlen: 24
92.113.184.0/22 maxlen: 24
92.113.188.0/22 maxlen: 24
92.113.192.0/22 maxlen: 24
92.113.196.0/22 maxlen: 24
92.113.200.0/22 maxlen: 24
92.113.204.0/22 maxlen: 24
92.113.208.0/22 maxlen: 24
92.113.216.0/22 maxlen: 24
92.113.220.0/22 maxlen: 24
92.113.248.0/22 maxlen: 24
92.113.252.0/22 maxlen: 24
95.134.48.0/21 maxlen: 24
95.134.64.0/21 maxlen: 24
95.134.96.0/21 maxlen: 24
95.134.164.0/22 maxlen: 24
95.135.134.0/24 maxlen: 24
95.135.139.0/24 maxlen: 24
95.135.140.0/24 maxlen: 24
95.135.141.0/24 maxlen: 24
95.135.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f2:ed:1b:ff:13:e8:cb:6b:90:b7:8a:87:d8:3f:e0:96:76:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 28 23:55:09 2025 GMT
Not After : Apr 28 00:00:09 2026 GMT
Subject: CN=7AB483B83FA80E7CF583AE2BD232B08480A36ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:bf:5d:99:50:af:1b:dc:da:01:9b:ee:f2:
ef:bd:d4:51:41:2c:8d:97:81:b0:0d:b9:8e:05:17:
7c:fc:b8:61:6d:37:8a:24:c9:2f:09:39:ec:9e:da:
4f:64:ef:70:fa:b4:f9:b3:89:84:cd:13:5e:d9:17:
3f:b3:9c:e1:16:ea:bc:a6:73:fd:10:52:a6:4b:e3:
c4:36:a0:2c:a5:86:26:99:21:6f:3d:d8:57:a2:c0:
4d:27:57:81:86:0c:ad:6e:92:d6:8f:56:44:a1:4b:
9f:1e:ca:74:1e:c7:29:c7:2f:62:64:37:a8:56:ad:
22:d1:3c:fb:98:6f:b7:8d:05:33:1c:f1:9a:0a:91:
b5:aa:75:fc:20:87:cf:c2:83:ef:b9:d4:d4:46:8e:
a3:4d:2f:57:a7:3f:cd:e4:2b:38:57:57:d9:b9:6d:
27:49:d1:78:88:ef:09:bb:5d:f8:10:3d:29:1a:b5:
43:74:9c:bc:44:c2:ab:68:14:e3:3c:97:44:af:21:
2f:1a:56:cb:4f:2d:9b:26:4e:e7:8e:7a:68:80:49:
d6:1e:d4:b7:26:a6:b2:11:d4:fe:3a:23:0c:d9:5b:
9d:43:5f:5c:12:72:5e:ee:e2:6c:d7:43:77:54:a2:
86:49:41:56:0c:2d:3a:21:90:c1:49:73:cc:e7:62:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:83:B8:3F:A8:0E:7C:F5:83:AE:2B:D2:32:B0:84:80:A3:6E:CF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.173.0/24
91.124.180.0/22
91.124.188.0/22
92.113.176.0-92.113.211.255
92.113.216.0/21
92.113.248.0/21
95.134.48.0/21
95.134.64.0/21
95.134.96.0/21
95.134.164.0/22
95.135.134.0/24
95.135.139.0-95.135.141.255
95.135.233.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c3:aa:bc:78:b6:fb:f1:6f:b3:a1:bf:f0:bc:87:63:56:ee:
93:1f:da:46:e5:51:c9:12:1c:2e:5e:70:ee:e8:ef:c0:cd:e5:
43:b2:e6:de:86:55:0e:e9:a5:5e:86:a1:84:ac:13:c4:2b:46:
a7:83:fc:8c:63:d4:79:34:73:68:f1:af:0a:40:83:89:6e:ff:
3f:88:f5:da:58:3a:e1:83:49:36:21:1f:3c:5b:4f:32:dc:fa:
c8:f8:38:40:f3:eb:2f:6d:d4:2b:3e:3f:71:19:04:2f:e7:55:
ae:fd:ed:81:e0:d0:39:9b:19:8f:ff:6c:73:9f:fd:3d:27:db:
be:8c:4c:de:7d:f9:84:a6:20:ec:5b:ef:6e:60:a9:48:8a:93:
90:b9:14:9d:5d:3d:a6:b6:d8:a8:af:e7:fe:61:0c:ed:50:c6:
ce:f8:b5:d3:f8:6e:7b:5b:e0:2a:c5:31:cb:98:0f:50:3b:9b:
7a:49:02:3b:d3:ac:7a:ae:e9:b3:85:67:45:1c:22:d2:08:d9:
cd:04:22:01:15:bd:5f:d6:b8:01:cc:61:0d:34:f3:7d:a1:94:
74:f6:fb:85:04:9d:b0:0e:72:85:47:e6:78:e3:eb:18:c4:4f:
d5:c7:39:10:02:8c:ad:d0:88:7b:d7:d8:92:4a:c9:d1:c1:1f:
dd:93:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:01:02 2025 by rpki-client