Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa
File: AS13347.roa (raw, json)
Hash identifier: P+bRR2GiwthTNDwRsSbQss7zyXtc/B60VMbtLJWYxSw=
Subject key identifier: 9E:5F:0E:85:1A:AA:FB:D8:62:2E:64:F7:11:1D:F8:1C:AF:EF:AF:7C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E70ADCE55B32F8DC9B25EE1D9FFE02C42BB29D3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa
Signing time: Wed 15 Jan 2025 19:06:48 +0000
ROA not before: Wed 15 Jan 2025 19:01:48 +0000
ROA not after: Wed 14 Jan 2026 19:06:48 +0000
asID: 13347
IP address blocks: 92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.112.36.0/23 maxlen: 24
92.112.38.0/23 maxlen: 24
92.112.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:70:ad:ce:55:b3:2f:8d:c9:b2:5e:e1:d9:ff:e0:2c:42:bb:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 15 19:01:48 2025 GMT
Not After : Jan 14 19:06:48 2026 GMT
Subject: CN=9E5F0E851AAAFBD8622E64F7111DF81CAFEFAF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:bd:d5:61:d2:56:a4:ae:22:1d:73:e2:89:
90:0b:e1:b8:fe:45:8b:78:ca:db:c4:69:48:96:02:
ce:d0:34:a7:94:ea:6e:a5:32:8c:9b:06:d3:9f:43:
bc:50:6e:32:6b:81:4c:b9:40:9c:df:1c:12:20:70:
85:ec:46:04:44:d3:65:5a:87:72:4f:7e:80:ab:08:
e3:2a:1c:ea:17:e6:25:95:5b:13:86:88:25:6a:ff:
06:0e:12:0e:51:5d:a9:cc:cc:43:8a:bc:46:4f:88:
d0:9e:24:2a:bc:ae:44:ce:a6:58:a7:15:87:99:c9:
48:01:02:cf:0a:da:08:a9:fd:59:c3:3f:52:e3:a6:
e8:b7:8b:4c:c1:0b:92:46:f9:d2:b9:ea:88:1c:3c:
5f:5e:5e:88:b9:7d:af:be:d3:9a:40:d2:86:b0:74:
50:2c:54:3e:cf:a7:e5:0e:7b:48:c5:c6:a0:62:40:
63:d8:52:7a:a2:29:1f:bb:3f:5d:51:ba:c1:82:e8:
b2:22:9f:68:e8:d8:31:81:ae:c6:ad:83:5a:68:31:
d0:bd:b5:ff:63:be:12:05:b9:08:76:dd:98:60:84:
f4:79:f2:dd:ee:73:0b:c8:4c:db:29:52:f7:85:ad:
01:b3:3a:0b:ac:30:9e:7f:76:fb:7f:7b:ea:d3:6a:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:0E:85:1A:AA:FB:D8:62:2E:64:F7:11:1D:F8:1C:AF:EF:AF:7C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.32.0/20
Signature Algorithm: sha256WithRSAEncryption
68:c3:81:22:0b:65:d4:8b:80:36:a4:04:f2:1d:52:50:99:13:
d7:a1:0b:65:a2:d8:5d:a3:4c:3b:03:83:df:eb:fa:d6:33:b0:
31:3c:6d:2b:51:2a:86:d5:91:f6:c2:9a:0a:cc:58:6b:e0:30:
f5:01:84:a6:99:d9:e3:14:17:ed:6c:bf:d4:86:0e:49:cf:8f:
6c:cc:ed:52:42:e1:91:9d:87:7e:1d:e1:96:2b:44:ef:28:dc:
8e:16:66:91:4c:f9:c1:52:60:63:8e:74:3f:a4:9b:9d:61:23:
bc:51:fd:ba:2b:8d:80:6f:38:4b:bc:1d:d8:d1:ab:6f:17:9a:
7f:7e:14:a8:1f:7a:54:21:da:25:0d:45:50:1d:8a:af:e5:50:
13:0f:14:17:10:cb:af:e3:d2:9e:92:05:bd:52:a9:ee:64:e0:
44:dc:db:fe:26:ac:4a:c0:02:57:f7:49:0f:a2:97:1a:30:b6:
9f:7b:3f:cf:bc:76:26:7f:e4:20:c3:17:34:ed:a9:2c:fc:b6:
3b:84:68:97:6f:53:8f:a3:d2:3b:ad:59:44:92:71:2a:78:26:
cb:43:b4:70:a5:07:3c:34:bb:6f:24:3c:5e:d2:42:85:54:8f:
7c:b8:d7:69:c1:16:9a:5d:50:39:64:a6:63:9a:ec:62:42:7c:
87:53:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:29 2025 by rpki-client