Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56962.roa
File: AS56962.roa (raw, json)
Hash identifier: 2YEyIgnIwaiS/6ktaapal/iqnxR4CTZYjwuJSGxdoJI=
Subject key identifier: 52:58:E9:22:D2:94:12:E9:7D:17:DA:D0:7B:BA:4A:C2:6F:F1:72:36
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 165B2F4104B81D04FA4790BA2F92716BC49DB4CC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56962.roa
Signing time: Wed 30 Apr 2025 14:48:04 +0000
ROA not before: Wed 30 Apr 2025 14:43:04 +0000
ROA not after: Wed 29 Apr 2026 14:48:04 +0000
asID: 56962
IP address blocks: 91.124.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5b:2f:41:04:b8:1d:04:fa:47:90:ba:2f:92:71:6b:c4:9d:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 30 14:43:04 2025 GMT
Not After : Apr 29 14:48:04 2026 GMT
Subject: CN=5258E922D29412E97D17DAD07BBA4AC26FF17236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:66:18:ea:05:38:0f:56:4b:a3:31:f5:18:
14:00:9b:44:15:7a:1d:30:03:b8:38:e0:d4:b8:b0:
3c:33:c1:9e:84:d5:82:7c:b3:de:b6:51:ad:06:7d:
e7:e4:16:2b:48:ba:e8:56:8d:36:eb:33:79:62:d4:
f4:ba:0a:44:9b:b9:9a:c8:a0:5e:52:4c:c9:e4:e9:
5a:49:88:53:8e:35:e5:9b:13:b8:8e:d9:ec:92:93:
f2:0e:13:68:cc:42:c2:01:1d:14:b9:a7:c7:95:af:
37:67:63:36:5e:9a:61:40:d6:20:ce:d0:b7:63:de:
fe:df:7c:29:fb:9e:55:fc:0a:4a:88:0a:7c:3f:18:
52:cf:c3:a2:50:b0:dd:b7:fe:81:ad:f4:a7:f1:6f:
39:9b:21:ac:0b:e9:48:f2:06:93:7c:5e:f8:6a:8c:
e3:ae:f9:21:a0:cf:b5:33:44:59:95:46:a3:91:60:
3a:3e:82:7c:33:30:a3:66:21:34:26:fa:fc:b0:76:
ef:bb:8e:91:8b:ae:97:4e:79:2c:e9:49:81:f5:a8:
b5:d3:69:ea:cb:cb:8d:8d:ec:31:30:a0:f6:20:8d:
8b:78:eb:88:68:0e:13:02:ae:d9:ab:61:80:76:aa:
c2:c9:fa:8a:da:d1:6f:d7:60:d4:56:2b:b8:ab:10:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:E9:22:D2:94:12:E9:7D:17:DA:D0:7B:BA:4A:C2:6F:F1:72:36
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:92:e8:0f:42:33:c0:fe:71:0b:2e:12:f0:e2:f2:13:72:2b:
75:49:8d:ad:96:c4:b6:3a:b1:a8:7f:7e:7c:b0:b7:f5:ba:ac:
1b:aa:ee:bc:3e:d0:71:06:7e:8b:21:11:ea:e8:02:ae:5e:9c:
6c:56:d2:75:c3:cf:f0:8d:c6:ce:1d:50:ee:88:ac:3b:a4:45:
10:a9:0f:65:1f:d1:05:e4:31:7a:ee:83:37:16:5b:47:e0:d2:
0f:e9:2d:ff:8e:95:f5:2a:a5:04:91:38:26:b7:ad:17:e8:ce:
79:07:dd:34:53:93:87:f1:98:20:b0:2a:f7:ed:51:a6:9f:ae:
f0:aa:1e:35:19:d1:06:b6:3f:76:6e:b0:5c:7f:83:e9:19:60:
17:63:d6:60:f8:f0:f0:2a:0f:e1:af:60:89:72:56:38:2b:f4:
b6:11:3e:fa:87:eb:ad:ea:0d:54:d5:11:7c:35:d1:44:62:60:
f8:6d:dd:b0:ea:f7:ad:29:63:15:36:bc:ce:2d:95:3b:d1:0a:
9a:6c:89:6e:63:69:dc:0d:b9:79:05:4e:4b:0b:e0:55:46:27:
06:4f:5e:d6:04:24:ec:6e:44:ab:f5:be:76:15:01:b2:3c:00:
86:42:c7:0d:a1:30:e0:25:d6:9c:4d:3e:1c:25:17:38:d7:cc:
b8:8b:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:12:07 2025 by rpki-client