Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: RKRXklBKgdK/N0PwhjF9gUPJtifJi1z2g1z0nP0Jo8o=
Subject key identifier: ED:80:A6:F7:9D:CA:25:2D:15:C6:19:EB:83:43:4F:8B:4B:79:98:C1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 070D0078B2254A316B6A2C6135A2A47DA6A549D3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
Signing time: Mon 28 Oct 2024 13:22:46 +0000
ROA not before: Mon 28 Oct 2024 13:17:46 +0000
ROA not after: Mon 27 Oct 2025 13:22:46 +0000
asID: 9009
IP address blocks: 46.202.12.0/22 maxlen: 24
46.202.100.0/22 maxlen: 24
46.202.116.0/22 maxlen: 24
46.202.228.0/22 maxlen: 24
46.202.236.0/22 maxlen: 24
46.202.244.0/22 maxlen: 24
46.203.36.0/22 maxlen: 24
46.203.236.0/22 maxlen: 24
46.203.241.0/24 maxlen: 24
46.203.242.0/24 maxlen: 24
46.203.243.0/24 maxlen: 24
46.203.244.0/22 maxlen: 24
46.203.252.0/22 maxlen: 24
92.112.100.0/22 maxlen: 24
92.112.120.0/22 maxlen: 24
92.112.214.0/24 maxlen: 24
92.112.215.0/24 maxlen: 24
92.112.218.0/24 maxlen: 24
92.112.219.0/24 maxlen: 24
92.112.220.0/24 maxlen: 24
92.112.221.0/24 maxlen: 24
92.112.223.0/24 maxlen: 24
92.112.224.0/24 maxlen: 24
92.112.225.0/24 maxlen: 24
92.112.226.0/24 maxlen: 24
92.112.229.0/24 maxlen: 24
92.112.230.0/24 maxlen: 24
92.112.232.0/24 maxlen: 24
92.112.233.0/24 maxlen: 24
92.112.234.0/24 maxlen: 24
92.112.237.0/24 maxlen: 24
92.113.96.0/22 maxlen: 24
92.113.108.0/22 maxlen: 24
92.113.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:00:78:b2:25:4a:31:6b:6a:2c:61:35:a2:a4:7d:a6:a5:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 28 13:17:46 2024 GMT
Not After : Oct 27 13:22:46 2025 GMT
Subject: CN=ED80A6F79DCA252D15C619EB83434F8B4B7998C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:12:ed:cb:7b:30:a1:70:42:e8:e6:09:1c:
97:57:0a:92:78:b2:43:a2:7e:9a:37:94:4a:f6:f0:
4b:c7:04:7d:37:a9:a1:24:69:7a:9b:37:d6:27:97:
ef:23:b7:d3:00:5d:af:c2:87:bd:a9:51:3c:c4:bf:
89:e7:86:cf:39:56:f0:39:2d:43:bd:aa:0b:f1:59:
4a:11:56:d0:19:ee:92:2a:21:ab:34:27:ce:ce:14:
2d:6a:65:6e:94:82:e6:03:ce:1f:10:71:e2:bf:a8:
1f:09:4d:de:f7:26:89:00:05:ce:4b:65:6a:33:4a:
67:c9:c9:74:ee:07:51:46:a3:f3:09:97:c1:0b:38:
1b:28:23:fb:de:9d:ac:6b:64:50:3a:a1:1b:fa:19:
2d:1f:6d:40:15:50:41:2a:8f:b0:da:f0:b1:7d:d0:
19:2e:9a:a6:bb:24:c9:54:ad:95:56:eb:61:4d:d2:
17:8c:cd:08:4f:bf:fd:68:af:e2:ea:7a:0f:8c:94:
78:92:3e:fb:c1:cd:7c:d3:73:f3:ba:b0:b3:43:01:
b6:b9:92:35:68:52:dd:6c:67:5d:4c:f7:06:57:8b:
17:b4:9b:d3:99:e1:b1:ee:35:05:28:e6:ff:27:cf:
9c:e2:b8:53:07:82:71:65:95:f0:b8:67:f9:bf:da:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:A6:F7:9D:CA:25:2D:15:C6:19:EB:83:43:4F:8B:4B:79:98:C1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.12.0/22
46.202.100.0/22
46.202.116.0/22
46.202.228.0/22
46.202.236.0/22
46.202.244.0/22
46.203.36.0/22
46.203.236.0/22
46.203.241.0-46.203.247.255
46.203.252.0/22
92.112.100.0/22
92.112.120.0/22
92.112.214.0/23
92.112.218.0-92.112.221.255
92.112.223.0-92.112.226.255
92.112.229.0-92.112.230.255
92.112.232.0-92.112.234.255
92.112.237.0/24
92.113.96.0/22
92.113.108.0/22
92.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
51:be:e3:c4:0d:5e:3b:47:83:ea:0f:c8:01:b3:29:25:47:14:
da:ba:fe:6c:7b:6c:2c:98:84:95:55:b1:af:34:86:8b:6f:fe:
09:21:00:4b:7f:ec:fe:db:e1:37:7d:18:57:c4:2e:66:40:45:
c7:75:9b:a4:d6:aa:73:2a:b5:52:5a:cf:1a:d3:37:88:27:b9:
86:69:90:7e:92:64:ff:ba:9c:98:2b:00:6d:8d:0b:fb:15:f3:
11:3c:bf:5b:2a:52:14:59:64:a2:3a:cc:83:d4:19:86:b2:0c:
9a:1f:af:42:69:c0:10:fe:5d:2a:74:19:64:2c:e8:78:ee:08:
42:9c:05:42:f1:1a:02:6c:1e:94:c2:0b:61:ba:b5:ba:9e:57:
96:0e:ce:7c:ea:50:82:5f:e0:2a:95:82:43:01:37:fe:d0:ed:
b9:00:95:6a:fa:6a:af:e3:08:3e:59:ca:ed:62:88:95:19:74:
d9:c0:4a:73:71:2a:f7:88:bb:33:7b:03:06:15:07:45:06:46:
fb:1d:98:fe:ab:ba:ca:b3:8f:b0:17:05:0b:ef:6f:0a:9f:3e:
32:4d:29:3a:4f:f2:4d:8f:c5:4e:8a:54:64:7f:dd:a1:ae:f6:
fc:9c:22:67:27:80:ca:f8:a5:80:c1:00:8c:7a:64:f0:a1:0f:
03:9f:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:21 2024 by rpki-client on console-ams.rpki-client.org