Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
File: AS11404.roa (raw, json)
Hash identifier: Y4Vy60bVSNiKsNr33ssQmdDh7h9OLDrZmTDu45wrL78=
Subject key identifier: 26:75:B4:01:94:5E:4D:A6:30:EF:36:E4:B5:CB:B7:10:8B:14:EB:6B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3806F8C2275F7E2BC3DB753485AA96A9F6C8A792
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
Signing time: Mon 28 Apr 2025 07:30:17 +0000
ROA not before: Mon 28 Apr 2025 07:25:17 +0000
ROA not after: Mon 27 Apr 2026 07:30:17 +0000
asID: 11404
IP address blocks: 143.14.0.0/20 maxlen: 24
143.14.16.0/21 maxlen: 24
143.14.24.0/21 maxlen: 24
143.14.112.0/22 maxlen: 24
143.14.116.0/22 maxlen: 24
143.14.120.0/22 maxlen: 24
143.14.241.0/24 maxlen: 24
143.14.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:06:f8:c2:27:5f:7e:2b:c3:db:75:34:85:aa:96:a9:f6:c8:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 28 07:25:17 2025 GMT
Not After : Apr 27 07:30:17 2026 GMT
Subject: CN=2675B401945E4DA630EF36E4B5CBB7108B14EB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:3e:10:20:cf:85:86:69:b1:3c:89:25:e1:
4a:98:5b:e1:c2:59:bd:46:f4:69:8c:b6:e0:77:77:
17:c2:61:5c:da:e9:3d:88:7e:7e:41:a9:35:7d:40:
3a:87:f0:e5:61:45:f8:5a:e0:00:84:7d:f8:d2:69:
7b:3d:e5:86:cb:6d:c1:a1:c7:30:bb:e8:4f:b8:4b:
c6:40:dd:91:94:8a:6a:fe:8b:2d:ea:93:97:63:dc:
31:ac:14:57:b8:17:77:a6:c0:89:f6:d6:a0:89:77:
17:8b:5b:6d:e3:27:45:1c:d3:dd:33:4a:40:54:71:
34:e7:3b:33:58:55:bd:6c:9a:0b:43:dd:04:f6:f5:
a7:6a:b7:18:b4:9e:e5:92:78:fd:59:7b:19:da:6d:
f8:75:94:bb:2f:66:c1:fc:8c:28:0f:73:14:80:a7:
bc:00:0a:2e:2f:ff:05:b2:92:17:ca:be:58:f9:d3:
dd:b1:61:d2:c1:fc:dc:71:05:a5:49:c8:54:29:5b:
14:f0:23:dd:4e:e3:2a:92:d4:ba:f8:8b:bd:f5:15:
44:d5:a1:26:fc:a9:81:6a:f4:70:ab:36:06:7a:c0:
bf:08:74:14:24:e9:85:25:97:68:cb:d7:e6:b3:7d:
89:f4:c9:3f:b6:ab:89:40:c7:e5:b0:b7:08:b1:50:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:B4:01:94:5E:4D:A6:30:EF:36:E4:B5:CB:B7:10:8B:14:EB:6B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.0.0/19
143.14.112.0-143.14.123.255
143.14.241.0/24
143.14.255.0/24
Signature Algorithm: sha256WithRSAEncryption
12:29:60:0f:73:60:75:98:b9:e5:64:62:8a:09:42:37:24:9b:
9a:3c:11:a2:c6:9e:27:99:4a:57:4b:5a:70:ca:7f:d7:19:f4:
1e:c8:aa:7d:3c:e2:8d:dc:48:49:57:5f:50:39:18:35:6b:7f:
4e:74:d5:94:74:f4:e6:66:e2:e2:e6:d2:f3:c8:b2:50:a0:37:
33:9b:6d:b0:76:f1:a8:ac:80:1d:c2:dc:81:1b:ae:a9:59:3d:
40:9e:a0:13:00:6d:3c:2e:de:44:d0:cb:9e:5a:8a:89:97:62:
cd:07:78:a0:c3:09:4a:d4:39:cb:bc:bf:eb:96:60:30:25:b2:
90:d5:6f:39:fe:41:d1:c8:eb:5c:40:6f:20:53:04:db:ce:2d:
16:b0:ae:84:ac:67:0a:51:2a:f5:6a:45:fb:30:a9:0f:20:88:
31:ce:3b:c8:ce:de:0a:fe:02:53:6c:54:b5:19:af:58:22:91:
61:e1:db:82:c3:60:dc:f2:ed:9b:43:00:85:eb:e9:8e:17:27:
7e:19:e3:b9:d0:e4:5a:a4:19:25:68:ef:40:01:b2:ca:a2:d9:
63:3e:51:7d:88:93:0a:e6:3b:0d:f5:8b:01:3f:eb:c4:52:b3:
0f:b5:d4:aa:2d:b3:c6:5b:a3:f7:5e:1e:3e:bb:a9:e9:8d:2e:
92:16:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:08:09 2025 by rpki-client