Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: bOV3JvlpSqbktoGWtiv+ZQ9kkgaJgDPKAk2qxuUkz3w=
Subject key identifier: F2:CC:FC:E5:E1:99:9E:7B:BE:F8:51:E7:67:A3:A7:65:9E:F5:B5:B1
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 67292008B901C23A0929756593F5914BC6BA8153
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
Signing time: Fri 27 Jun 2025 17:43:11 +0000
ROA not before: Fri 27 Jun 2025 17:38:11 +0000
ROA not after: Fri 26 Jun 2026 17:43:11 +0000
asID: 9304
IP address blocks: 147.78.121.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:29:20:08:b9:01:c2:3a:09:29:75:65:93:f5:91:4b:c6:ba:81:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 27 17:38:11 2025 GMT
Not After : Jun 26 17:43:11 2026 GMT
Subject: CN=F2CCFCE5E1999E7BBEF851E767A3A7659EF5B5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:2c:26:bf:d8:9f:35:11:07:d5:30:de:3f:
f0:68:d4:21:b2:b7:33:b0:1b:49:67:71:60:52:10:
f3:b6:be:7f:6c:6c:8c:57:dc:cc:83:b1:ee:c0:43:
57:76:a9:28:f4:46:88:2b:79:9d:39:a1:3f:17:8f:
a1:2b:b4:a7:9b:9c:5b:23:dd:62:ed:7b:a9:c0:e5:
d0:5c:90:a7:f6:74:23:07:75:f9:af:b0:92:cc:4e:
aa:ee:ee:37:63:94:ca:39:db:59:8a:a2:22:ca:0a:
3b:72:6b:f8:47:61:d9:3c:91:8d:8e:ad:79:6c:2a:
d2:fe:b2:6f:bb:52:d8:48:f8:88:3f:b2:bb:80:7e:
40:5e:e8:ce:03:7a:0c:b8:ec:68:66:fe:45:6e:b1:
55:d6:a3:9f:1a:d7:a0:b3:96:87:bd:0b:99:da:ce:
60:f1:70:dc:16:b0:a4:2f:2d:bd:52:59:02:62:75:
e4:58:59:9a:94:f9:cc:62:f0:c2:69:c9:47:f8:ac:
39:a6:34:cc:47:43:2b:69:27:6d:c4:f3:48:e0:49:
b6:5d:4e:87:7d:eb:d5:f5:6e:a5:a3:70:2f:ac:99:
c3:11:db:f6:8a:60:83:ba:7f:d9:7c:74:87:de:8a:
18:3e:d3:32:60:84:fa:20:1d:76:0f:fa:4d:cb:f5:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:FC:E5:E1:99:9E:7B:BE:F8:51:E7:67:A3:A7:65:9E:F5:B5:B1
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:39:31:d2:89:19:aa:a0:44:63:61:ee:8e:2d:68:df:55:
6c:9b:9c:ad:a5:b3:d9:f3:a5:db:12:e4:71:37:05:e9:b3:e4:
b7:77:78:1d:75:85:70:53:0c:f5:36:b6:9d:ee:04:5f:33:22:
a7:95:06:74:1a:06:f0:bf:4a:05:50:a7:65:86:43:b9:af:6f:
d0:0e:40:c3:f0:b9:ed:2c:72:ce:0b:65:f5:68:50:f1:f6:4b:
5a:4e:c4:ef:d4:a7:b0:5c:d8:94:dc:67:4a:86:45:ad:4f:79:
0e:3d:b1:07:20:2e:45:ef:4c:06:85:e2:89:92:85:63:6f:9a:
c0:7b:72:54:9f:9d:91:08:3b:f8:e5:71:78:d3:62:8b:58:97:
89:5b:c2:fb:1c:65:86:9e:8c:df:40:3c:08:34:c1:16:d1:02:
c1:d3:a4:8e:ec:fb:e3:63:76:b5:df:cf:81:49:40:02:bf:53:
cb:d7:6b:39:9b:0a:57:d2:a5:db:e9:ef:5f:d7:c7:8b:24:6c:
fa:88:94:fc:7b:e6:d4:f6:b3:fd:ba:4a:00:a0:eb:ee:63:e6:
68:e8:11:5d:16:e4:a4:df:e2:fb:29:0a:51:75:60:98:7e:40:
d0:5e:db:1e:5a:9a:db:26:98:f3:fc:34:d1:e9:6a:30:4c:88:
85:52:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:52:00 2025 by rpki-client