Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: E2I0tRo4o76c8MQvsE2f/cuIYYyH3n84uWfJY8I9xAw=
Subject key identifier: AA:A3:2D:22:A9:2B:40:56:42:14:B6:92:5F:06:04:F3:38:1B:DD:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 018A295F8BBC75D5C7D7BC42D68307C400D7EF04
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
Signing time: Mon 17 Mar 2025 06:01:15 +0000
ROA not before: Mon 17 Mar 2025 05:56:15 +0000
ROA not after: Mon 16 Mar 2026 06:01:15 +0000
asID: 9304
IP address blocks: 96.62.103.0/24 maxlen: 24
96.62.152.0/22 maxlen: 24
96.62.156.0/22 maxlen: 24
96.62.224.0/24 maxlen: 24
96.62.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:5f:8b:bc:75:d5:c7:d7:bc:42:d6:83:07:c4:00:d7:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 17 05:56:15 2025 GMT
Not After : Mar 16 06:01:15 2026 GMT
Subject: CN=AAA32D22A92B40564214B6925F0604F3381BDD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:0a:ae:e1:6a:25:67:2c:bb:d2:c5:7d:f9:
79:d2:01:eb:4c:09:0d:3c:e8:07:9b:cb:91:ed:a9:
34:b4:1a:a4:0c:dd:f6:7e:fb:1d:a2:c6:b3:fe:83:
15:21:f7:af:d8:0f:77:19:be:03:f3:db:cb:6d:6a:
3c:31:b1:3e:d7:7e:ae:b1:07:7d:98:d4:b3:d1:e3:
41:91:24:c8:61:94:00:7e:2c:12:f1:28:b1:ba:c1:
bd:bf:49:63:35:38:e3:13:9f:31:93:63:1d:a3:ab:
b9:36:bb:f2:0f:e0:92:10:be:53:b3:77:fb:3b:2c:
61:4f:05:f1:06:26:34:5a:13:24:7d:cf:4e:75:18:
e3:16:52:1c:7b:21:b9:1f:b1:77:67:55:97:cd:f3:
01:1f:70:50:8f:73:70:52:ce:7c:ea:56:c7:32:28:
60:3a:92:4f:31:ce:a0:b5:dc:58:cb:c6:65:d1:0a:
62:c4:d8:80:63:2b:b6:60:33:42:07:13:2c:ee:42:
38:43:1c:53:34:79:43:78:a9:7e:c6:8f:df:1c:04:
a4:41:30:19:ab:34:16:36:b5:8c:a9:58:a2:1c:3d:
f7:82:20:3a:b7:46:0d:46:08:36:66:ea:9e:cb:03:
06:35:65:7d:1c:4c:fe:2c:dd:6c:4a:b0:5e:a1:45:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:2D:22:A9:2B:40:56:42:14:B6:92:5F:06:04:F3:38:1B:DD:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.103.0/24
96.62.152.0/21
96.62.224.0/24
96.62.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:31:41:94:1d:96:81:00:ee:3f:a1:25:2a:24:ff:ff:0b:9e:
a5:a7:11:de:c7:37:0f:9f:f7:6c:11:07:40:cd:8b:22:41:30:
dd:18:a6:fd:b7:2c:bd:20:39:60:88:98:a2:88:e0:92:ef:9d:
44:86:d9:2e:40:eb:05:a4:ff:e9:1b:35:eb:69:c2:f1:86:bb:
04:d2:5f:4d:98:1b:fe:71:b2:19:74:a8:56:76:c6:48:85:8a:
8b:12:33:5b:fb:95:f1:4a:76:bc:4c:07:88:92:3b:cf:07:81:
eb:14:01:b7:a4:b1:7f:be:4b:7e:6e:31:ee:c0:b5:0c:44:d9:
80:4f:e4:3a:01:90:b9:fe:5e:fe:e1:a3:af:62:b7:ef:d7:21:
b3:6d:03:c6:fa:d3:0a:6a:8d:59:d7:10:6e:11:70:49:a3:83:
ad:02:18:5b:8c:fd:48:2b:f1:b9:fa:e0:c7:52:12:32:b1:c5:
0a:98:69:3a:37:08:bb:9b:28:63:9e:db:14:0f:b5:1d:82:80:
68:ce:94:c8:dc:24:b6:3a:df:be:a0:04:f2:0e:fd:94:ee:15:
b2:5e:26:dd:ce:14:61:66:a6:39:e1:b5:c6:0b:85:bb:76:4c:
b9:f8:d7:7c:4f:e2:16:50:86:f8:99:41:1c:5a:18:91:2b:fe:
b9:dd:86:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:06 2025 by rpki-client