Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: OPrDurN+HMJCDINcALnvO/vIotKmGcPGPI0g3H3wV5c=
Subject key identifier: 7F:99:35:B1:D4:66:86:CF:1A:4A:56:C8:BD:F7:D7:8A:FE:EC:19:94
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 793A2843B4A1E07EBD4AE3071FC46BA4F9D29222
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
Signing time: Sat 07 Jun 2025 18:14:52 +0000
ROA not before: Sat 07 Jun 2025 18:09:52 +0000
ROA not after: Sat 06 Jun 2026 18:14:52 +0000
asID: 9304
IP address blocks: 141.11.39.0/24 maxlen: 24
141.11.180.0/24 maxlen: 24
141.11.196.0/24 maxlen: 24
141.11.197.0/24 maxlen: 24
141.11.198.0/24 maxlen: 24
141.11.199.0/24 maxlen: 24
141.11.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3a:28:43:b4:a1:e0:7e:bd:4a:e3:07:1f:c4:6b:a4:f9:d2:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 7 18:09:52 2025 GMT
Not After : Jun 6 18:14:52 2026 GMT
Subject: CN=7F9935B1D46686CF1A4A56C8BDF7D78AFEEC1994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:10:ae:d4:25:23:9f:b1:7a:ae:46:b7:3f:
0f:3f:60:8a:d4:af:d0:56:56:39:c5:b3:a3:f1:e7:
66:26:87:c2:84:55:9b:66:47:fb:55:d3:94:0c:1d:
d7:0b:84:69:14:36:2a:61:e7:10:f9:2f:ce:1c:03:
c8:7b:6d:a9:64:97:a9:8d:33:16:bd:52:ec:9a:5c:
26:a8:2a:ba:ac:8a:09:5d:ea:f9:22:9f:bb:6d:0e:
e2:bf:57:1d:5c:51:ad:c9:2c:8f:ef:fc:49:e3:f9:
f9:a3:d8:b9:6b:20:07:16:b5:55:db:9d:80:9d:86:
e9:86:17:37:40:ab:ad:5e:10:3b:cf:ad:dd:77:66:
79:7d:96:d0:9c:1d:77:72:f0:33:12:91:7f:39:b8:
6e:71:07:17:7d:8b:99:e3:be:76:51:36:6b:2b:a4:
22:b8:a9:7c:01:35:28:89:dc:59:54:28:7d:ff:fb:
dc:15:5f:b3:98:65:59:8c:98:99:3a:85:fc:7e:cc:
02:70:a3:ac:33:cd:a8:ad:f4:f2:60:82:a6:c5:59:
e3:38:bd:c6:60:f7:02:98:dc:36:05:11:7f:eb:88:
87:75:6d:3f:31:6b:3f:5f:6c:76:bd:50:9b:02:48:
0f:ed:c3:f9:d7:95:64:d5:3d:f7:42:a7:81:8e:a6:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:35:B1:D4:66:86:CF:1A:4A:56:C8:BD:F7:D7:8A:FE:EC:19:94
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
141.11.180.0/24
141.11.196.0/22
141.11.243.0/24
Signature Algorithm: sha256WithRSAEncryption
15:12:dc:cc:8e:ea:a4:86:5d:c0:a8:da:5c:67:19:13:aa:3e:
26:94:6b:94:46:e2:6e:a7:c2:50:8a:6e:c1:b2:f3:ee:d6:86:
4b:6f:d3:1d:9e:d4:69:64:ff:46:a9:48:a7:2b:46:04:08:e8:
b7:17:a9:63:e3:a2:47:49:c8:6b:87:f6:d1:c8:c3:e8:1c:e7:
69:b7:08:7e:9e:ee:56:03:7a:82:1e:58:77:00:b2:90:55:1f:
49:49:99:cb:04:51:81:2e:b6:a5:ab:2e:dd:57:fd:4e:af:83:
30:dd:9b:5d:1e:c2:88:60:c3:96:8b:24:b8:61:3d:fd:25:65:
be:eb:35:45:ed:fe:37:51:d5:14:44:7f:3c:b1:53:ec:d2:02:
83:9f:a6:6d:fb:34:41:71:e4:51:e1:b8:e7:80:60:c7:ab:2f:
48:25:f4:5d:f6:6f:7e:35:8f:25:64:31:66:3d:8e:b5:87:5c:
f5:bb:19:30:8f:c5:6a:50:2d:d7:64:ba:09:c9:06:9d:9b:d3:
80:a3:0a:dd:1e:8a:67:3c:52:62:27:34:e7:c4:fb:50:6f:94:
4e:fc:26:79:a1:fb:08:d7:27:ca:c4:3f:f1:f7:87:b9:54:ec:
4f:71:7b:92:0c:28:a4:f4:fc:61:8e:86:fe:b3:c2:c5:57:c1:
ba:00:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:11:03 2025 by rpki-client