Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: QIG8v2Hk0bD8zfYFPVOsfFKpUVu0ssPwduQUGbrvnlo=
Subject key identifier: 56:B4:E6:D7:17:C3:13:AD:3D:48:F2:D2:31:1B:60:C3:B7:53:B4:05
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5AAE9984D3C4BC8DC4F17F27FFC1AF5ED7BAF4CC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Tue 03 Jun 2025 06:36:26 +0000
ROA not before: Tue 03 Jun 2025 06:31:26 +0000
ROA not after: Tue 02 Jun 2026 06:36:26 +0000
asID: 9304
IP address blocks: 141.11.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ae:99:84:d3:c4:bc:8d:c4:f1:7f:27:ff:c1:af:5e:d7:ba:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 3 06:31:26 2025 GMT
Not After : Jun 2 06:36:26 2026 GMT
Subject: CN=56B4E6D717C313AD3D48F2D2311B60C3B753B405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:a6:96:72:17:7b:ac:2c:5c:d8:97:e3:eb:
de:51:e7:e7:8b:2d:6a:51:d8:2f:41:8c:36:27:78:
64:1c:9f:a1:9f:ca:1e:f3:8b:73:ea:fd:57:53:8e:
99:2d:e1:33:5e:75:4f:d2:ab:7a:6e:82:45:b2:df:
ae:7c:69:87:45:5c:53:d0:0f:4e:0c:c9:8e:a6:c6:
a3:d4:a4:8f:4b:e6:2f:30:87:9c:37:57:51:62:da:
ad:2e:86:b0:48:9a:35:c8:f2:98:3b:96:b2:fe:18:
20:60:d1:e3:45:ad:26:bf:1f:23:2e:b2:1f:63:d2:
d5:15:2f:86:58:61:0f:bc:a1:88:6c:ac:fa:48:6c:
5f:28:e7:9f:ec:f9:54:c3:f0:3c:9d:76:97:a6:68:
01:25:fc:e3:1e:fc:50:5c:b5:73:9b:6b:ca:c1:6b:
90:f6:6d:72:95:f9:b5:51:6d:f3:4d:61:99:a6:0c:
dd:eb:56:96:46:1b:61:4c:a4:9e:83:09:78:f5:94:
c5:0b:ae:b7:41:d8:07:ef:bc:28:3e:78:fa:d8:f0:
9b:66:6d:50:b9:3e:f1:ef:87:46:ff:1b:4a:df:5e:
19:36:73:ca:5e:4b:cc:65:0b:5b:21:b3:ce:ff:20:
3a:c4:f6:c6:35:d4:46:70:2f:4a:31:10:9b:a3:2c:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:E6:D7:17:C3:13:AD:3D:48:F2:D2:31:1B:60:C3:B7:53:B4:05
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:21:0d:c3:f7:46:e6:14:2e:43:28:c3:8a:3e:a5:07:d5:41:
e8:43:c0:75:69:4d:54:9b:b6:51:31:f8:2a:09:dc:c1:7f:07:
23:71:44:ed:79:52:c5:9b:54:c6:6a:00:b3:29:b2:9c:00:75:
33:f5:76:c1:a2:07:e7:7c:20:79:60:85:4f:41:8e:f5:70:8b:
44:18:3e:88:f2:1d:88:27:04:a4:42:ec:47:4a:96:64:fc:2f:
1e:01:35:d9:f9:3c:ce:36:d8:31:93:df:a2:36:0b:51:62:38:
97:4c:8d:95:74:35:6d:f5:27:7b:e6:46:43:81:96:67:90:22:
6a:bb:be:e4:e7:a7:c9:10:88:7d:4c:41:2d:35:c2:41:da:11:
67:06:48:9b:eb:44:d7:bd:02:f2:71:05:4b:fc:2c:7c:53:35:
08:85:86:d1:94:ce:ea:77:80:bf:30:b6:c3:6b:dd:0e:2f:39:
f8:1b:97:77:5d:6c:9e:9b:c3:23:11:6a:c7:4c:02:9b:22:76:
77:ea:ef:eb:a3:55:78:98:ac:48:0b:3a:16:75:c9:a6:c0:0f:
c6:94:c6:39:9d:4b:b2:6a:30:26:60:29:f3:75:a7:e5:3f:b0:
11:ad:6f:00:e2:d1:c0:be:a1:22:43:75:6e:53:22:cb:ad:e6:
df:1d:4a:fd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUWq6ZhNPEvI3E8X8n/8GvXte69MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA2MDMwNjMxMjZaFw0yNjA2MDIwNjM2MjZaMDMxMTAvBgNV
BAMTKDU2QjRFNkQ3MTdDMzEzQUQzRDQ4RjJEMjMxMUI2MEMzQjc1M0I0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXraaWchd7rCxc2Jfj695R5+eL
LWpR2C9BjDYneGQcn6Gfyh7zi3Pq/VdTjpkt4TNedU/Sq3pugkWy3658aYdFXFPQ
D04MyY6mxqPUpI9L5i8wh5w3V1Fi2q0uhrBImjXI8pg7lrL+GCBg0eNFrSa/HyMu
sh9j0tUVL4ZYYQ+8oYhsrPpIbF8o55/s+VTD8DyddpemaAEl/OMe/FBctXOba8rB
a5D2bXKV+bVRbfNNYZmmDN3rVpZGG2FMpJ6DCXj1lMULrrdB2AfvvCg+ePrY8Jtm
bVC5PvHvh0b/G0rfXhk2c8peS8xlC1shs87/IDrE9sY11EZwL0oxEJujLLVrAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUVrTm1xfDE609SPLSMRtgw7dTtAUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LxTAN
BgkqhkiG9w0BAQsFAAOCAQEAoSENw/dG5hQuQyjDij6lB9VB6EPAdWlNVJu2UTH4
KgncwX8HI3FE7XlSxZtUxmoAsymynAB1M/V2waIH53wgeWCFT0GO9XCLRBg+iPId
iCcEpELsR0qWZPwvHgE12fk8zjbYMZPfojYLUWI4l0yNlXQ1bfUne+ZGQ4GWZ5Ai
aru+5OenyRCIfUxBLTXCQdoRZwZIm+tE170C8nEFS/wsfFM1CIWG0ZTO6neAvzC2
w2vdDi85+BuXd11snpvDIxFqx0wCmyJ2d+rv66NVeJisSAs6FnXJpsAPxpTGOZ1L
smowJmAp83Wn5T+wEa1vAOLRwL6hIkN1blMiy63m3x1K/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:58:37 2025 by rpki-client