Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9291.roa
File: AS9291.roa (raw, json)
Hash identifier: 2LG0p0w37Z00WLFKr+dRI9HS5au2UPD7cff8C+j99sY=
Subject key identifier: 67:3B:AC:0E:BA:A5:21:46:0F:1D:09:03:0A:8D:01:4E:88:41:09:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 47A6239ED9ADFF52B8FD1C8DC20E8B7CC2582330
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9291.roa
Signing time: Thu 08 May 2025 15:25:11 +0000
ROA not before: Thu 08 May 2025 15:20:11 +0000
ROA not after: Thu 07 May 2026 15:25:11 +0000
asID: 9291
IP address blocks: 155.117.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a6:23:9e:d9:ad:ff:52:b8:fd:1c:8d:c2:0e:8b:7c:c2:58:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 8 15:20:11 2025 GMT
Not After : May 7 15:25:11 2026 GMT
Subject: CN=673BAC0EBAA521460F1D09030A8D014E88410912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:9e:5f:81:a7:e9:78:43:6a:a5:52:4e:f6:
f0:69:68:ea:e0:75:fd:9c:54:cc:69:4f:0c:98:7e:
e2:64:3e:44:27:7d:9e:76:f4:5d:77:6a:32:c8:37:
67:89:d4:91:2b:b9:91:02:cc:5a:ca:df:38:ec:f6:
81:39:9a:9d:bb:80:c6:5c:bd:25:ca:f7:7c:7d:78:
74:c3:67:c0:00:f4:c7:b5:97:4d:85:70:e8:8a:0a:
4f:4d:95:98:05:74:60:58:98:7f:66:4f:84:f9:13:
8f:e9:4a:6a:b4:3c:9a:14:c9:d0:65:68:4c:8e:d4:
ce:c3:eb:2b:1c:1b:4e:35:25:c7:ed:16:22:8d:61:
3c:89:b3:c8:ab:41:71:b5:3a:f5:7c:77:ea:eb:07:
08:8b:62:36:0c:13:b4:77:2b:48:02:b5:9a:32:be:
92:f5:76:0b:36:75:f8:c1:c6:d6:d8:e8:b5:c7:14:
a8:96:b1:59:12:b7:9f:d6:5d:be:d9:98:d0:6e:33:
19:da:ed:28:fe:e1:0e:34:de:9b:ff:b8:a8:52:ef:
17:4a:70:bf:33:5e:b3:7e:ff:20:fe:1e:72:b0:ad:
e7:d9:dd:11:9d:2f:51:59:ae:c7:6d:1e:1f:98:4d:
ca:fa:01:26:de:c4:3d:ef:48:79:5e:c6:bb:e5:1c:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:AC:0E:BA:A5:21:46:0F:1D:09:03:0A:8D:01:4E:88:41:09:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:00:c8:91:18:74:67:28:7d:20:a3:fd:d5:72:52:82:fb:cf:
a2:b2:ca:b5:78:28:21:6e:77:13:3a:2a:42:ea:e5:85:52:5c:
36:9c:8e:fd:0f:4d:ec:77:3f:cb:53:63:7f:e8:5c:26:8e:52:
72:eb:12:29:60:cb:e2:d7:6f:a5:88:db:e9:f6:88:e5:b5:ed:
9d:e9:ed:3e:87:47:4b:28:ec:18:67:95:9d:fd:30:3e:4e:61:
b6:eb:e1:1e:60:d9:85:9d:cd:ee:9a:29:ee:f3:a3:d2:8a:13:
68:c8:1f:82:30:42:60:6d:59:88:39:b3:df:92:34:5f:b2:fc:
d4:e3:3f:aa:7f:71:6c:e8:1f:bf:b4:35:c6:16:d7:24:b6:09:
b7:25:3e:2a:c1:1c:20:eb:03:45:7e:95:58:a9:ed:f6:40:3b:
71:7e:11:ff:5f:77:0d:5a:e4:f3:f9:45:26:a5:04:27:b5:cc:
1a:e7:34:41:dc:2c:ab:2b:dd:13:3e:d0:f6:a4:da:a4:9f:06:
c9:7d:fc:f4:bb:0d:32:a6:51:57:c9:a5:63:99:21:59:d3:a7:
b7:23:67:d1:9b:38:20:c3:da:ef:38:1d:65:ca:bb:2f:e1:d2:
02:59:74:75:0a:35:24:ac:d1:bc:b1:2c:11:4f:9b:c9:fa:a8:
05:cd:e5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:14 2025 by rpki-client