Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa
File: AS56913.roa (raw, json)
Hash identifier: z7FvvSU73+B7S6HG2flrElhXjqbYFVntvlrMoMt3h/o=
Subject key identifier: F3:E9:40:8B:AC:BA:C8:5A:44:BD:B1:96:06:E8:18:AA:03:4B:2E:A5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 512B29F48027E3DFFB4F5B65F9E40D9206004CA1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa
Signing time: Sun 16 Feb 2025 10:49:18 +0000
ROA not before: Sun 16 Feb 2025 10:44:18 +0000
ROA not after: Sun 15 Feb 2026 10:49:18 +0000
asID: 56913
IP address blocks: 95.135.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2b:29:f4:80:27:e3:df:fb:4f:5b:65:f9:e4:0d:92:06:00:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 16 10:44:18 2025 GMT
Not After : Feb 15 10:49:18 2026 GMT
Subject: CN=F3E9408BACBAC85A44BDB19606E818AA034B2EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:50:9e:e9:41:b5:0b:18:8c:79:87:9f:d6:
91:c0:26:0a:fa:01:d8:e5:f3:c0:61:16:54:74:b7:
d0:63:99:b0:86:b0:1f:f5:ca:9a:33:24:81:49:1d:
17:59:95:62:aa:8f:d6:f5:5e:24:ba:b8:30:f7:08:
8d:15:5c:af:00:f5:7c:69:a9:c0:24:9a:d7:75:e5:
bf:01:db:58:10:c4:da:ea:d7:a5:e4:22:0e:0b:37:
c8:8d:9a:c3:02:7f:b8:c6:e4:6f:52:78:21:b7:7d:
a8:60:fa:c8:f6:1e:8c:57:87:7a:d3:2d:06:14:2c:
f1:f8:2b:12:99:6e:63:3a:83:cf:6f:7a:7c:0e:19:
2b:a7:3d:6c:dd:0e:54:b8:c3:17:76:7e:d8:97:cd:
b3:2f:1a:18:5f:42:24:21:96:2d:22:f7:8e:ab:b2:
45:ff:5a:c1:fc:02:38:6e:11:fe:57:b5:80:5b:e6:
ec:82:e0:b8:f6:b0:75:69:91:3a:25:45:a4:37:0d:
3a:56:61:38:31:58:34:91:64:78:ae:d5:fb:8f:77:
6e:09:39:a3:ba:9d:76:6a:71:9d:68:22:9b:78:99:
8e:d1:3b:47:62:35:8e:5f:98:a8:98:be:87:7d:b7:
4d:a2:cb:32:54:a0:4f:e7:87:0b:77:ad:ce:00:4b:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:40:8B:AC:BA:C8:5A:44:BD:B1:96:06:E8:18:AA:03:4B:2E:A5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.176.0/24
Signature Algorithm: sha256WithRSAEncryption
43:de:48:71:78:1e:0f:89:0e:3d:cd:d6:16:4a:4a:f8:c5:4a:
d1:c5:c8:8e:1d:71:58:9d:14:7d:a7:28:cc:9c:40:cf:8e:7e:
00:4a:5b:1d:69:9a:e6:0e:03:37:53:9b:3d:df:bf:f5:43:85:
5b:57:e4:82:4a:76:59:8d:ac:97:fd:7d:70:bc:59:88:c9:b3:
2f:a8:68:c4:af:59:9f:e7:bf:91:b1:29:de:38:3b:e9:b8:23:
56:fb:3d:a3:11:a3:ae:7c:4a:d6:47:b7:f4:c5:55:64:89:79:
31:1f:f4:0c:d6:c8:11:76:6d:0b:9a:4e:1b:cc:78:0d:db:41:
f8:3a:d6:0f:67:a7:ca:74:d6:17:4a:10:93:a0:8b:8c:66:75:
a3:84:64:65:20:66:7d:c9:4c:f5:e3:cf:e9:2d:50:2c:d9:07:
58:17:46:17:8a:7c:37:c7:80:97:a9:f1:2e:e1:1c:0a:d8:23:
66:e1:04:9d:62:ec:da:99:ac:fc:9a:23:84:be:03:a8:a1:07:
f2:74:94:bb:b5:76:52:66:16:ca:0d:a1:8c:8b:34:40:a5:63:
9e:86:cf:53:ae:a8:f3:f5:42:fb:b6:a4:33:29:35:fb:80:17:
fe:e9:85:e8:c3:70:8f:1e:79:ef:8e:89:fa:dd:64:61:db:d6:
fd:f6:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:34:05 2025 by rpki-client