Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 8mBpNJ2eQCxCDsMw8pfBKcGJz0A+iKP4ShNAVjG3zPk=
Subject key identifier: 1D:43:18:28:A6:0C:95:D9:7E:71:78:44:2C:73:92:08:E4:72:BE:56
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 12EBA2462FB9944DC40E3DFE27AE0A8C11A16046
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Mon 02 Jun 2025 16:10:26 +0000
ROA not before: Mon 02 Jun 2025 16:05:26 +0000
ROA not after: Mon 01 Jun 2026 16:10:26 +0000
asID: 9304
IP address blocks: 194.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:eb:a2:46:2f:b9:94:4d:c4:0e:3d:fe:27:ae:0a:8c:11:a1:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 2 16:05:26 2025 GMT
Not After : Jun 1 16:10:26 2026 GMT
Subject: CN=1D431828A60C95D97E7178442C739208E472BE56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:1e:8e:3f:70:4c:a6:ab:96:b6:77:11:bf:
31:38:3f:e0:e3:87:08:dd:c5:d9:e1:5b:9f:e9:29:
67:3c:87:da:30:e3:db:8c:74:19:d9:eb:38:e1:41:
c1:65:1a:17:35:ba:ad:fe:f8:b7:ba:65:66:d0:ad:
34:1a:50:77:46:ca:c5:4b:76:08:8c:91:eb:40:ce:
d4:f5:88:53:59:16:67:65:7c:d4:6c:87:90:fe:c1:
5f:65:ef:e0:ef:da:7d:26:bb:25:76:6b:e6:af:35:
1b:88:e6:46:51:58:a7:93:47:fc:04:60:b1:9a:38:
97:6c:fd:b7:8f:4c:35:6b:84:89:5e:de:c7:c5:6e:
1f:97:13:70:44:45:1d:45:04:f0:12:71:e6:59:ae:
3f:c6:44:dd:bd:f9:b3:81:92:cd:7a:fa:9c:36:9e:
2b:2f:0f:af:9a:e6:e7:cc:cd:23:33:a3:a6:9d:f4:
f2:83:51:04:27:40:39:87:48:01:59:15:06:a6:e1:
6d:fa:fa:51:fe:e9:ff:1d:fa:d4:af:2d:83:dc:49:
3a:40:4f:5d:2e:8d:39:49:ed:b8:a6:35:00:94:99:
86:f9:dd:ad:bf:df:cd:cd:90:7b:67:97:18:6c:e7:
e2:cd:23:a5:27:24:8b:96:73:a2:dc:66:ef:7a:f9:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:18:28:A6:0C:95:D9:7E:71:78:44:2C:73:92:08:E4:72:BE:56
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:3b:b0:49:3e:47:59:cf:4c:6b:84:49:90:1a:d6:56:45:
ba:ae:4b:16:56:f4:52:ee:59:18:50:8c:cd:ed:6f:57:98:cf:
91:21:3d:c3:61:16:d7:d6:ba:61:4a:12:47:eb:ab:60:cd:66:
00:88:52:6f:6f:c6:98:5a:e7:9d:a8:da:11:9d:3a:ac:06:50:
9c:bd:d3:8b:93:fc:78:18:e3:4d:4c:17:20:26:12:a4:12:66:
ed:89:4b:f2:85:7d:81:ed:48:7f:fd:1e:b7:31:4c:22:0c:d7:
5b:0b:6b:ce:31:2a:99:8f:cb:ef:c2:b5:58:c1:8d:09:63:07:
dc:7a:35:b4:b7:02:c4:e6:c3:13:14:bc:f2:09:c1:8e:ba:ab:
04:de:ab:2b:d9:7a:97:70:4c:a1:cc:19:75:7d:88:78:e1:0c:
f1:89:54:b4:46:b3:dd:d2:01:c0:81:f1:38:63:6b:4d:a2:36:
1a:e2:bc:f8:63:eb:fd:70:19:37:ef:bc:e8:86:30:72:3e:b4:
73:ef:b9:e8:2a:7b:24:c9:c2:3c:f8:09:ce:b2:7b:00:e8:4b:
39:ab:c8:ad:ee:8f:7e:a5:fd:8d:2b:3f:8d:e9:e9:3c:36:9a:
f0:41:b8:32:e2:52:53:b1:2e:56:cd:79:db:cc:0b:30:31:1f:
95:b5:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:09:24 2025 by rpki-client