Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: oirwxlFT7OFKMDFnP9wpRjS5qdNzU9l1Sj4W9vaOF6Y=
Subject key identifier: BA:B4:4B:D0:89:4A:8C:08:23:7B:39:F2:D6:B9:E5:7B:3C:D8:AA:AF
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3077E590BC73735E6798E1A06E7DA4D907486551
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395374.roa
Signing time: Fri 06 Jun 2025 02:08:01 +0000
ROA not before: Fri 06 Jun 2025 02:03:01 +0000
ROA not after: Fri 05 Jun 2026 02:08:01 +0000
asID: 395374
IP address blocks: 194.60.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:77:e5:90:bc:73:73:5e:67:98:e1:a0:6e:7d:a4:d9:07:48:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 6 02:03:01 2025 GMT
Not After : Jun 5 02:08:01 2026 GMT
Subject: CN=BAB44BD0894A8C08237B39F2D6B9E57B3CD8AAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:57:d6:10:cf:4d:43:bc:9e:1c:f2:10:c9:bb:
28:e9:aa:08:9c:8f:d4:f0:8e:6a:df:1e:5a:eb:ea:
c5:e9:94:f8:fd:4f:ff:6f:45:aa:7c:1b:8d:2f:2d:
db:d1:79:be:50:18:6b:5f:62:a3:66:d8:68:7b:fe:
db:c8:ce:79:6c:dd:aa:ab:e2:6d:69:a6:e6:8e:39:
67:55:65:6e:c0:45:04:bf:b9:3d:df:54:3f:5b:c0:
bf:7d:ee:16:6c:2b:4e:7f:13:5b:8c:12:f6:e1:a5:
04:54:fc:18:53:7e:d4:6d:cd:21:4f:78:c8:e5:a1:
93:25:8f:54:b7:1a:cf:44:89:16:4e:fb:b3:ff:2d:
a1:9b:27:3e:b2:cc:5f:36:a8:17:77:86:12:76:71:
6a:46:49:5b:2d:5a:72:9a:9c:7d:2f:72:46:f8:8a:
5f:d1:c5:a7:87:f9:da:4e:89:af:47:d2:c1:0f:0d:
f3:8f:c9:c3:2d:20:d7:bc:66:21:a4:e5:de:94:e4:
5b:69:67:ba:53:4f:9f:31:79:32:37:79:96:5f:30:
2c:5a:6a:c4:de:17:e2:b6:be:60:80:03:1f:94:f5:
dc:17:88:42:69:f5:7f:e2:95:f5:48:35:56:84:da:
5e:f2:e1:70:bf:ce:e9:2e:bd:6b:1c:78:cf:15:33:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B4:4B:D0:89:4A:8C:08:23:7B:39:F2:D6:B9:E5:7B:3C:D8:AA:AF
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:95:5b:00:56:ff:8f:46:bb:96:e5:1b:6e:18:a2:f5:cd:32:
42:8b:1b:93:75:93:d1:a0:75:10:e6:f8:8d:51:9f:56:15:b7:
ce:4b:e1:46:e0:38:f3:28:0e:30:3f:16:e6:4f:9a:eb:28:49:
66:ab:fe:27:51:6c:cb:aa:38:bf:12:31:b4:17:07:4b:0f:ce:
88:a4:e4:15:08:c9:21:ac:12:80:b1:2e:47:5e:fa:64:37:c8:
84:83:94:9e:7d:b7:f0:b2:06:4e:31:9c:27:69:67:b3:29:64:
f3:1b:05:a7:41:0c:e6:54:9c:85:a2:2c:70:34:7f:73:dc:9f:
32:e4:7f:80:19:a8:74:c7:e1:83:e9:be:57:5b:07:7a:3a:46:
6a:b7:45:b5:4b:e2:39:7e:b3:ea:c6:1b:f7:9e:e9:46:9f:af:
b0:47:03:fa:d1:e6:7a:38:24:6e:e2:36:b3:64:c5:02:1f:fa:
9b:2d:2f:72:e5:34:32:a7:b0:5e:5a:3d:a7:21:64:b2:01:4f:
bf:ba:17:b0:21:5b:94:7f:19:c2:39:45:ff:38:a7:58:6c:4e:
7f:6b:9e:f2:30:c9:2c:a8:ce:bd:4c:ac:8c:97:50:a5:13:b8:
a0:5e:15:7e:91:c3:26:3c:29:eb:b6:6f:a5:be:87:6a:68:19:
03:60:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:29:49 2025 by rpki-client