Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: OtMNSXbn6GMh1MaC2jTscHKmpMmF7uaoG3qCK2D27+A=
Subject key identifier: BB:C5:18:42:BA:84:EC:BA:B0:A3:8D:A0:24:B9:22:C1:DE:A6:26:FD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 50B0BF1DD83A27956D3090E5031979EF260177E8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
Signing time: Thu 27 Mar 2025 19:39:34 +0000
ROA not before: Thu 27 Mar 2025 19:34:34 +0000
ROA not after: Thu 26 Mar 2026 19:39:34 +0000
asID: 11404
IP address blocks: 95.135.173.0/24 maxlen: 24
95.135.178.0/24 maxlen: 24
95.135.179.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.221.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b0:bf:1d:d8:3a:27:95:6d:30:90:e5:03:19:79:ef:26:01:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 27 19:34:34 2025 GMT
Not After : Mar 26 19:39:34 2026 GMT
Subject: CN=BBC51842BA84ECBAB0A38DA024B922C1DEA626FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:db:53:90:71:13:ea:be:2f:3d:f2:c3:b4:
d8:cf:3b:7b:43:61:e0:89:32:90:71:c2:0c:35:64:
75:c1:0e:a1:e5:91:23:f9:fc:b7:c0:7b:1c:50:b4:
1f:7f:9f:c2:8e:8c:65:b6:09:df:57:57:a4:76:02:
e9:58:5d:40:a1:b0:0d:b1:0c:be:1e:b9:a8:03:ec:
f0:73:8a:1f:5f:9d:d7:c9:30:45:0c:9d:71:36:20:
3d:5d:97:2e:41:71:c2:43:e5:74:63:ea:04:05:8b:
4e:cf:54:9a:95:3b:ed:46:d1:5d:05:2d:12:08:4d:
15:68:55:67:0f:e1:2c:36:1c:a8:3d:a5:a3:ef:e6:
36:80:ac:a3:77:40:14:0f:15:84:d3:56:e0:76:12:
0d:83:df:50:00:ac:08:8d:58:01:07:80:7e:b1:62:
58:0f:d2:4d:a1:4c:9e:77:2f:34:3e:53:d4:d9:f4:
05:aa:8c:a2:82:c4:c2:c2:fe:44:67:d6:ab:61:62:
da:d5:4d:40:50:ca:ff:be:d9:df:ee:e3:82:c4:0d:
ad:f9:68:e1:9a:44:05:1e:61:05:5f:07:c4:e8:b1:
f4:3e:40:e2:50:b1:7b:7e:66:4f:2f:84:e1:8a:7b:
bc:b5:a1:5c:06:98:dd:4e:6c:2f:2e:7b:ff:78:82:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:18:42:BA:84:EC:BA:B0:A3:8D:A0:24:B9:22:C1:DE:A6:26:FD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.173.0/24
95.135.178.0/23
95.135.210.0/24
95.135.221.0/24
95.135.228.0/24
95.135.230.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b6:e4:63:2f:79:da:44:05:f3:c9:4f:76:42:40:e6:7d:d3:
a1:cd:3a:1c:86:2b:f7:73:b9:c7:7b:36:4e:6b:f3:25:62:cc:
4a:b3:8d:a8:eb:46:a1:37:4b:8e:fe:85:f6:bd:5c:fc:b9:2f:
b0:7d:72:b1:09:52:1a:01:e2:77:d5:f3:1c:6c:f0:5e:53:6b:
86:84:99:62:34:46:a3:dd:e6:f5:32:32:be:82:10:05:19:4b:
c1:8f:ea:c0:a2:fc:51:ee:c5:b2:cd:cc:3b:f5:c4:d6:cd:43:
d7:6d:a5:67:32:f2:ce:23:69:6b:fc:85:f9:04:dd:54:cc:a0:
a8:5b:ab:8a:66:89:61:7d:99:6a:54:4f:87:9c:d0:af:63:b1:
43:19:d4:46:c0:8c:7e:04:32:60:99:8e:e3:a2:b8:f6:eb:f3:
ff:b2:41:ba:bc:81:00:c5:a3:39:92:cd:0e:c8:9c:37:f6:39:
36:a5:ee:06:ef:a3:00:12:eb:ba:03:a2:4e:72:8b:86:09:a2:
12:4b:fd:23:9e:c4:51:b8:1f:37:ee:a8:c0:87:38:4b:54:54:
6b:c2:c8:e1:b5:f3:7e:06:e8:45:c7:59:d0:49:4a:c3:1b:3d:
c4:70:32:31:22:8b:c7:c5:05:b7:5e:10:bf:03:05:4f:ba:b5:
d0:e7:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:21 2025 by rpki-client