Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: E0/SovH7SWxSJYJdldUIbO5b4I6ZKMmPjJxoXNK9Xe8=
Subject key identifier: D7:2E:46:2D:EA:76:73:22:58:E4:7B:2F:9B:A5:A2:5C:74:85:E0:57
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 7B12B136830768FA1435359043D78BD4A170F968
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
Signing time: Mon 14 Jul 2025 13:01:49 +0000
ROA not before: Mon 14 Jul 2025 12:56:49 +0000
ROA not after: Mon 13 Jul 2026 13:01:49 +0000
asID: 9304
IP address blocks: 193.32.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 03:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:12:b1:36:83:07:68:fa:14:35:35:90:43:d7:8b:d4:a1:70:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 14 12:56:49 2025 GMT
Not After : Jul 13 13:01:49 2026 GMT
Subject: CN=D72E462DEA76732258E47B2F9BA5A25C7485E057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:4b:00:f3:e2:db:07:c6:a0:8b:c6:49:03:
23:4e:9f:ed:d8:b3:5b:e0:75:7d:4b:fc:54:de:29:
41:a1:10:72:37:4c:09:9c:da:af:a2:45:45:a8:b2:
bd:fd:d6:a0:9e:1c:0e:72:69:ae:25:f2:a4:a4:e6:
d6:b3:cf:5b:fd:58:7d:b7:e0:16:7f:31:64:06:95:
15:8f:ca:5d:05:cf:04:ba:73:83:b7:06:f9:b0:fb:
c2:06:08:a5:7c:cc:3a:e5:f1:2a:29:d4:d9:30:02:
bb:ef:ed:11:4e:5d:59:54:20:2f:b6:95:c1:d1:65:
54:bf:e4:c3:5a:92:5b:43:e7:82:5c:ef:eb:38:bf:
fc:f7:2d:c5:f7:bf:c3:bf:93:49:5d:34:5e:b0:35:
73:aa:4d:d5:87:8f:ff:6c:94:5a:66:dd:b3:2d:30:
19:9f:d4:4d:34:92:43:77:9f:70:43:64:f2:fa:b4:
0c:ca:bd:e0:75:74:73:bb:87:00:19:01:3a:4c:15:
0c:ac:46:7c:d2:6f:ae:64:36:85:65:1d:89:4a:f6:
a1:e2:9e:39:36:3c:82:c7:b0:c9:1b:d3:59:c3:2e:
7c:01:05:e6:af:0e:1d:e9:27:89:65:ab:da:20:4e:
e7:4d:8f:0c:19:c5:41:64:16:4e:aa:5e:b8:79:ca:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2E:46:2D:EA:76:73:22:58:E4:7B:2F:9B:A5:A2:5C:74:85:E0:57
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.205.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bb:f2:da:6d:2f:38:6b:39:7f:9b:39:ad:db:3a:7a:9d:c2:
9f:2f:01:02:0c:75:34:99:e4:1f:bb:a2:e1:10:65:c6:9a:12:
ca:9b:93:37:96:91:31:bd:42:23:1c:9e:c2:95:d0:61:1d:61:
75:e5:68:f3:e4:ae:3b:fa:51:1c:56:d2:f8:c7:23:92:8c:10:
8d:55:50:08:c1:9f:d5:e9:33:da:d9:6c:7c:17:db:e4:7c:1f:
d3:58:f7:19:08:44:1f:61:25:8e:50:90:4d:f8:98:a3:d0:95:
5e:0a:30:72:72:1c:52:eb:b4:4f:2c:7b:a7:40:28:50:6d:d5:
39:22:53:e2:3c:2c:8a:db:b2:ae:b0:6f:2c:e4:ec:c7:ec:8f:
61:7f:22:04:46:f5:5b:69:9d:59:20:70:6f:5b:ce:70:89:97:
6c:a1:04:98:c8:14:8d:58:9a:d7:fd:62:73:e0:d2:3a:6c:2d:
9c:d7:80:d5:c0:36:b0:60:45:96:77:86:d9:90:9e:f3:a6:e9:
1a:60:30:91:8e:0e:dd:05:e7:99:77:1b:08:03:46:97:0a:03:
6c:49:bc:80:b7:6a:21:da:a3:88:31:d5:08:40:26:fd:6a:f1:
d7:cb:97:7d:27:46:a4:0e:4a:07:76:4e:e4:f4:82:64:94:51:
21:1c:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:54 2025 by rpki-client