Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: yr+hviMgOLSC0HYudhP45z2m3kS0qNADz9hwp1pRo+A=
Subject key identifier: A0:97:CA:48:0D:C4:5E:3C:FA:0D:BC:AF:D7:EB:BC:CA:51:72:98:BA
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 27EC95DFE89CFE871E28AFD47448A039EE59A1AD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
Signing time: Tue 17 Jun 2025 12:44:46 +0000
ROA not before: Tue 17 Jun 2025 12:39:46 +0000
ROA not after: Tue 16 Jun 2026 12:44:46 +0000
asID: 9304
IP address blocks: 143.20.36.0/24 maxlen: 24
143.20.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ec:95:df:e8:9c:fe:87:1e:28:af:d4:74:48:a0:39:ee:59:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 17 12:39:46 2025 GMT
Not After : Jun 16 12:44:46 2026 GMT
Subject: CN=A097CA480DC45E3CFA0DBCAFD7EBBCCA517298BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:10:2f:1b:0f:b2:fd:54:f8:3d:e4:a8:83:
53:fd:85:fd:8e:7b:5f:af:a1:1a:dc:dd:9e:12:33:
a3:50:fd:61:b4:10:a5:95:1b:52:f8:b6:f0:2c:6b:
03:ea:d0:37:15:e3:8a:d6:da:37:3c:45:f9:95:a2:
02:6b:51:39:ea:20:b0:9f:08:a5:07:37:53:49:8f:
d0:bb:b5:8c:37:0a:81:66:e1:d8:38:9f:d3:f4:a7:
b8:2c:40:0c:7d:47:d1:18:d7:b9:d6:d6:31:52:92:
89:18:88:5f:3f:ef:93:54:2a:b1:54:7b:b2:19:c9:
1f:48:71:2f:82:b0:29:9b:2c:78:ed:2e:83:f3:02:
33:7a:7b:a9:54:1a:f4:63:7e:f9:21:08:e8:0f:54:
62:55:8a:16:4f:2d:6c:cf:95:67:17:73:95:fe:36:
91:d2:bb:ac:4f:82:e2:3b:89:a6:f7:b3:0f:2f:8b:
77:e2:35:68:4d:63:b5:a9:ef:4e:82:96:36:94:a8:
9c:57:33:a0:bb:ba:51:ac:de:f4:53:23:d3:f2:c5:
de:1d:94:f4:14:25:19:c2:e2:80:d1:29:4f:ba:3c:
4a:8d:29:78:39:f4:40:0e:7a:e0:0a:bd:a6:12:dd:
22:4b:0a:52:c0:23:fa:2e:65:f4:b9:40:9d:7e:03:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:CA:48:0D:C4:5E:3C:FA:0D:BC:AF:D7:EB:BC:CA:51:72:98:BA
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.36.0/24
143.20.84.0/24
Signature Algorithm: sha256WithRSAEncryption
48:eb:22:66:99:7e:29:74:41:a6:f9:c2:d6:35:38:0f:e2:ea:
3c:7b:75:ed:5c:f4:8f:91:9f:68:11:1f:02:48:7d:2f:f5:1b:
50:ba:e5:03:a9:4d:76:4e:7b:78:ff:a1:01:2d:25:7d:f1:f1:
d2:26:da:f8:9b:73:c1:02:d0:7f:b2:1e:28:14:ca:68:a1:0f:
bd:08:21:15:12:13:c3:ae:67:2e:a7:4a:f2:67:f1:24:ad:04:
65:a4:ca:90:d0:77:71:95:a7:53:58:14:b8:79:20:8b:6b:d2:
a6:b7:f7:6b:e4:1a:fe:6a:cc:41:f2:57:ad:de:37:4f:07:11:
37:b8:7a:00:9e:8f:4d:a4:91:70:99:a4:da:9a:2f:72:c4:92:
1c:48:4a:41:49:bb:a9:97:f8:62:b1:ae:29:90:43:75:c6:cd:
fc:7a:9a:1e:ac:2a:ff:c8:ff:c2:d8:a8:f0:ce:53:8a:c4:c6:
e0:74:fe:4c:f4:fc:f1:61:d9:5b:56:9c:f7:5c:ae:c6:96:10:
38:ea:a8:4f:d6:9f:5b:25:e7:5b:ee:2a:31:28:1f:8a:9a:8b:
7b:9e:08:21:92:02:be:38:31:2c:7e:2d:ee:07:cf:08:be:39:
98:b4:61:92:95:56:0b:b7:26:31:a0:96:8e:f7:e9:18:a1:cc:
e4:a5:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:55:13 2025 by rpki-client