Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9318.roa
File: AS9318.roa (raw, json)
Hash identifier: UmG1rBFzTfhX8rF1Svw+lu3HTRMmu3LkPWptQuTH7jU=
Subject key identifier: 03:66:99:7A:4E:8D:2C:D5:EC:DA:8E:5F:7B:91:96:83:02:7E:C8:86
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1C59913933EED1455E834B6EEAD755DE74B73686
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9318.roa
Signing time: Sat 28 Jun 2025 00:02:07 +0000
ROA not before: Fri 27 Jun 2025 23:57:07 +0000
ROA not after: Sat 27 Jun 2026 00:02:07 +0000
asID: 9318
IP address blocks: 140.233.171.0/24 maxlen: 24
147.79.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:59:91:39:33:ee:d1:45:5e:83:4b:6e:ea:d7:55:de:74:b7:36:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 27 23:57:07 2025 GMT
Not After : Jun 27 00:02:07 2026 GMT
Subject: CN=0366997A4E8D2CD5ECDA8E5F7B919683027EC886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:db:71:5d:02:9d:06:07:40:a8:ac:08:2e:
e6:fb:73:9e:b2:f4:69:e4:3e:c1:5f:33:42:a9:5d:
1b:23:b4:22:f8:63:d6:ed:dc:ac:63:11:55:0a:c6:
a5:94:31:6d:37:bd:b6:e0:1e:4d:ec:22:7c:0b:11:
91:9c:68:91:b5:5a:93:c9:bb:02:a5:07:53:ae:5d:
83:9c:95:52:d4:e4:e6:1b:41:ce:be:39:5c:aa:c0:
5a:d5:28:d4:af:cd:01:d9:67:db:be:74:f3:2e:3b:
79:dc:dc:21:1a:3f:72:36:db:12:cd:3b:9f:77:51:
92:18:3d:cc:14:4e:68:e0:a2:9f:c7:76:96:78:be:
8d:eb:f3:04:6f:5c:5b:9e:2e:0f:d2:a3:d3:9b:b2:
a2:f8:e2:fc:53:d6:7f:03:d4:22:fb:6d:af:4a:a4:
7e:d9:20:3f:2c:ed:97:f4:7a:b1:87:8f:f4:62:45:
ec:2e:4d:2a:39:ba:23:01:79:5f:5b:7a:a8:b6:15:
b6:c7:29:78:aa:10:d4:60:3b:cd:77:4f:d5:1b:a6:
8f:46:d0:42:d1:56:ec:d6:53:d1:1f:7e:cd:cf:e5:
97:7b:87:a6:7d:22:91:83:6d:b7:8a:cd:70:e9:7e:
c4:2c:9c:9e:4f:da:25:c8:8c:e7:fd:d0:0b:53:60:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:99:7A:4E:8D:2C:D5:EC:DA:8E:5F:7B:91:96:83:02:7E:C8:86
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.171.0/24
147.79.26.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3b:11:8a:66:32:38:67:76:f5:46:ac:57:34:07:0b:a8:cc:
8c:d2:dc:1f:4a:66:63:87:d4:0d:e8:dc:c5:5f:4a:f8:e4:9e:
91:2d:e5:a8:fb:a2:f7:75:d2:72:54:15:8f:3b:a2:dd:b8:fd:
78:01:a4:43:59:1f:1f:db:6a:f4:6b:48:91:7b:92:e4:54:2a:
0a:3e:d2:4c:3b:21:5d:61:67:93:a2:ff:b1:6f:35:b4:07:8f:
83:b2:72:82:3f:fd:1d:36:5e:39:96:c3:02:c8:67:6b:a0:12:
9d:49:f3:cf:48:6b:be:a2:23:0a:8b:a9:b0:13:bb:a8:de:81:
7a:7e:33:54:ed:01:6f:e9:3a:f0:db:fc:28:95:8f:8c:97:81:
01:88:28:66:52:12:bf:86:57:91:92:fd:ad:71:3d:9b:6a:15:
0c:68:be:d8:3c:19:a5:46:80:bd:43:b7:24:05:b5:c1:68:d4:
42:34:8b:0c:f1:b3:1d:eb:dc:ac:23:e6:f9:62:52:36:88:c6:
59:08:8e:7b:f9:c6:18:7e:e1:0b:17:87:86:8a:50:5c:19:13:
9d:c9:3b:6b:d5:48:ec:37:26:71:1f:7a:18:db:8e:ae:66:45:
28:ee:4f:d4:4b:03:55:be:ef:2c:14:14:16:5b:48:56:fc:c3:
ec:4d:8f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:21:24 2025 by rpki-client