Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa
File: AS23679.roa (raw, json)
Hash identifier: sWA27o/Y5ZQ+yvbpbhemkJw8m1ExxL2VEj+DR+njwtM=
Subject key identifier: 26:35:48:E7:36:60:72:1E:DB:31:47:0D:28:78:75:06:75:82:B8:37
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: F04C6BEA211BF2D877DB721119F44E2701AE99
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa
Signing time: Fri 24 Jan 2025 09:53:52 +0000
ROA not before: Fri 24 Jan 2025 09:48:52 +0000
ROA not after: Fri 23 Jan 2026 09:53:52 +0000
asID: 23679
IP address blocks: 91.124.132.0/24 maxlen: 24
91.124.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f0:4c:6b:ea:21:1b:f2:d8:77:db:72:11:19:f4:4e:27:01:ae:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 24 09:48:52 2025 GMT
Not After : Jan 23 09:53:52 2026 GMT
Subject: CN=263548E73660721EDB31470D287875067582B837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:ca:b6:da:8d:ae:6d:33:47:82:8b:11:d8:
e9:b2:8b:5c:e8:fd:21:05:7b:b7:bb:ba:cd:66:79:
c1:78:f3:53:5d:91:08:52:ba:a5:9d:2c:c8:81:db:
cc:2b:c7:5c:65:1e:bf:01:bf:76:12:29:d8:d1:8a:
24:8b:b2:82:01:71:76:15:d5:26:9d:5d:c1:06:f4:
4a:43:da:da:ff:4d:8d:f6:03:4d:2a:ab:51:d4:1a:
fe:4b:f8:66:87:97:1d:dd:a9:ec:b5:ea:48:26:7e:
e1:65:65:f2:43:7c:f1:fa:d8:2a:4c:e2:59:40:60:
c8:58:ca:ce:74:e1:3c:90:56:2d:09:82:e8:2e:af:
d5:9c:87:5c:c3:a1:11:93:6d:43:ae:83:43:95:ec:
b7:b2:9c:75:3e:de:72:68:e1:b5:21:c7:a9:3d:b7:
0b:9d:22:54:15:e1:48:3e:8a:3f:4c:a2:3d:23:de:
34:43:f9:90:d0:8d:b7:b4:f0:2b:d8:dc:c7:fc:8b:
8c:ba:be:a5:74:f5:16:a9:bd:65:71:a9:80:61:7d:
40:fd:1f:ae:9d:fa:7f:ca:28:fd:ca:fa:f2:28:e8:
f1:35:66:e9:68:07:5c:89:40:ad:09:0a:14:d5:79:
91:0f:3b:25:a2:23:b7:0d:58:fd:b6:9b:b2:fc:29:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:35:48:E7:36:60:72:1E:DB:31:47:0D:28:78:75:06:75:82:B8:37
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.132.0/24
91.124.138.0/24
Signature Algorithm: sha256WithRSAEncryption
84:71:a5:74:5e:0b:80:a2:9d:15:e0:d8:3e:b8:a6:07:9a:17:
20:6f:90:a0:38:4f:b8:1b:34:4a:bc:cd:48:7b:95:ae:82:9c:
30:91:4b:b5:b9:e2:f8:3a:9b:e4:83:ee:2a:e2:5c:53:c8:a1:
a6:45:ab:7d:23:e9:df:1e:2f:9a:01:67:e0:d5:12:40:8a:03:
6d:dd:26:7e:e4:19:05:ba:a6:1f:c4:40:0b:79:aa:68:11:a5:
14:e1:94:71:a9:8e:ed:15:f2:51:7a:47:b8:86:c8:d7:b2:8a:
25:98:a7:ea:be:f7:0d:fd:b9:d3:05:57:32:76:a6:86:72:d9:
e8:f5:7c:51:6c:07:5a:43:2b:ef:3d:3f:79:06:de:ca:9a:2d:
3e:74:14:91:ad:46:86:19:7b:3e:cd:60:8f:66:5d:2d:28:62:
54:78:26:8c:00:a5:df:75:64:bc:02:5c:21:ca:3e:58:94:76:
97:7f:33:6b:a1:91:31:68:ca:79:9b:19:a2:90:9a:2f:d1:42:
e8:ad:6e:92:f6:7d:89:af:a0:3a:f3:c8:11:21:76:c7:d4:2e:
ce:c5:ba:88:f2:e8:b2:ca:26:46:eb:85:82:58:05:97:71:59:
f3:88:39:1e:93:f7:62:3a:4e:53:ed:e2:52:9e:7a:fd:32:5a:
0e:ef:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:20:10 2025 by rpki-client