Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 3WhX4PNviJJmBRMFOiutamo45RuSe+34CDqudgZz2KI=
Subject key identifier: F9:4C:D3:5E:E9:E0:B2:B1:78:56:92:74:50:C8:42:C1:ED:C1:80:78
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 49098D21652D16400C8C87C6C80A296B0309E142
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Thu 10 Jul 2025 05:19:40 +0000
ROA not before: Thu 10 Jul 2025 05:14:40 +0000
ROA not after: Thu 09 Jul 2026 05:19:40 +0000
asID: 9304
IP address blocks: 91.206.2.0/24 maxlen: 24
147.78.121.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:09:8d:21:65:2d:16:40:0c:8c:87:c6:c8:0a:29:6b:03:09:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 10 05:14:40 2025 GMT
Not After : Jul 9 05:19:40 2026 GMT
Subject: CN=F94CD35EE9E0B2B17856927450C842C1EDC18078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:7c:0e:16:d4:5d:08:fc:72:a5:a5:28:8c:
47:fc:a2:bb:51:3c:72:c7:db:97:18:17:34:37:f8:
dd:15:19:6a:8c:ba:f8:0d:9e:dc:66:97:91:3c:41:
22:fd:87:bc:ad:35:70:a4:70:22:78:a1:17:73:b8:
11:ac:c9:8c:2a:34:4b:c2:ff:fb:79:81:f3:3c:8b:
5b:a9:84:c2:2f:ef:bc:7e:bf:be:73:c0:0d:c1:08:
3e:9d:78:69:3a:37:12:61:f1:ac:ef:0d:52:49:7c:
ee:ef:98:41:46:60:47:59:5d:c8:34:18:50:a8:40:
a2:97:fd:43:bc:0d:a8:29:28:df:b6:ef:d5:77:1f:
50:a9:ef:dc:ca:bf:fd:eb:c7:93:20:4f:8a:86:b2:
9c:09:50:22:85:44:4e:5d:30:b7:1e:a4:d8:de:a4:
05:38:ee:07:c2:44:2e:ee:2b:63:39:fc:ca:9b:b5:
dc:c9:88:04:21:93:41:94:49:ee:d3:ef:15:92:47:
1b:77:ec:a2:b8:b8:ed:c8:80:2f:d7:be:be:f8:44:
49:f4:36:2f:e1:f1:b9:f1:ec:8e:69:91:04:ef:2b:
76:0e:5b:08:ec:92:dd:83:5d:16:af:bd:b1:ef:02:
14:0c:ed:19:59:59:2f:9c:98:92:76:84:aa:d3:e2:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:D3:5E:E9:E0:B2:B1:78:56:92:74:50:C8:42:C1:ED:C1:80:78
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
147.78.121.0/24
194.5.147.0/24
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ab:dc:1f:41:c2:9b:e0:bf:2a:77:10:16:e6:2b:10:de:18:
a7:ab:0e:45:fd:42:c4:b6:9f:5a:69:c0:ee:aa:3d:c6:3d:bb:
b5:e5:a0:b0:9e:26:98:8c:e7:e2:5c:24:76:60:c1:7c:93:5c:
d8:51:ae:67:7a:94:4f:2a:97:41:a9:b5:c9:87:3e:c2:2f:08:
24:70:ff:47:a5:c4:9a:42:b5:e1:6f:fb:2d:36:07:0f:c9:62:
92:a4:d5:b5:e3:02:7e:99:74:d3:fa:c0:d4:90:11:4f:73:72:
6e:1d:a8:c0:0d:4e:6a:50:ec:f8:dc:08:0e:c6:84:79:b5:7c:
ff:03:7a:02:93:ee:d9:6d:c3:17:5a:b9:aa:de:1d:53:15:83:
a5:6f:75:fd:35:24:08:53:b1:15:9c:ad:58:d3:a5:52:cd:54:
7d:1c:eb:55:bf:be:37:8b:3b:65:5a:0e:30:7f:10:db:e5:e3:
d1:13:85:ec:47:ec:f7:33:b2:cc:35:d2:32:9a:46:22:7e:6f:
a3:e2:31:f6:35:1c:db:d7:14:b7:73:a8:8d:e1:dd:c2:50:00:
87:58:f9:5d:04:bd:54:70:9a:b8:36:a7:38:81:36:79:27:bf:
40:a6:fc:24:82:7a:90:02:45:d5:70:a0:f4:25:0f:89:56:6f:
44:ea:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:55:32 2025 by rpki-client