Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: 3CzkeF7fWC+htgMVXFKUQMvz4C7OlxKvSsVQQftYGpw=
Subject key identifier: 5E:F4:C3:03:33:E0:83:7A:B3:A4:26:4A:26:36:31:C4:DB:25:9E:C2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 394B4B411609A51AF200499ED19DB5D535D57E4E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11426.roa
Signing time: Tue 15 Apr 2025 22:10:50 +0000
ROA not before: Tue 15 Apr 2025 22:05:50 +0000
ROA not after: Tue 14 Apr 2026 22:10:50 +0000
asID: 11426
IP address blocks: 91.124.201.0/24 maxlen: 24
91.124.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:4b:4b:41:16:09:a5:1a:f2:00:49:9e:d1:9d:b5:d5:35:d5:7e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 15 22:05:50 2025 GMT
Not After : Apr 14 22:10:50 2026 GMT
Subject: CN=5EF4C30333E0837AB3A4264A263631C4DB259EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:cd:fd:a6:d4:63:88:51:dd:c0:23:d5:65:
1a:24:cd:d7:79:55:6d:3d:be:f1:8a:ab:c5:09:1a:
d5:57:37:96:ee:16:d4:7c:67:e5:31:74:db:cb:08:
9c:36:56:17:c8:23:28:b7:58:ae:bc:34:58:c8:ee:
91:34:67:3f:11:66:72:fd:bc:59:01:28:6b:b3:36:
f1:bf:95:9a:42:84:4e:d3:7b:e5:71:a0:cb:6f:66:
76:5c:c2:65:79:1c:c7:94:ff:a2:8f:b9:6d:12:1a:
d1:f0:8a:d8:df:39:40:b8:f7:95:f2:c3:b5:77:11:
55:c7:32:95:da:0e:95:a0:9f:dc:05:f4:e2:67:f7:
99:7b:5c:e0:6c:32:5d:72:27:f4:a1:26:ea:31:57:
3c:e6:7c:7c:c2:23:0e:d4:9a:4c:13:e4:cf:ac:5e:
ee:c2:19:af:e5:aa:ae:fb:71:8d:b3:8a:ec:ce:54:
dd:d8:f3:2c:3b:37:39:2b:dc:12:8d:92:22:a9:fe:
4f:94:ab:73:7f:e0:b1:d3:d8:ea:81:84:6b:80:3f:
5b:fe:bb:eb:58:8c:c4:1d:da:b9:a4:dc:be:25:98:
3b:45:00:af:46:6f:92:48:d0:7e:82:7e:48:c8:14:
65:15:23:11:e5:f6:2d:3a:36:3c:ed:55:dd:a8:fc:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:C3:03:33:E0:83:7A:B3:A4:26:4A:26:36:31:C4:DB:25:9E:C2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.201.0/24
91.124.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d8:e5:15:de:11:2e:71:3c:53:03:ce:de:d9:2c:84:84:a4:
ca:76:87:c3:32:7e:c7:6f:f9:37:51:57:cc:f4:80:3b:ec:c7:
cc:d0:b4:e6:de:e7:e0:b2:6b:f7:9f:9f:4d:b3:a4:c8:62:e7:
2e:5c:75:a9:61:b4:de:cb:f1:f8:2b:d9:dc:f4:84:8a:4f:ef:
c8:97:56:47:87:3b:26:12:bc:5e:3c:8d:ee:74:ff:0f:94:d7:
7c:91:fe:07:53:a2:b7:22:a1:de:fd:9d:82:4f:46:c6:64:4c:
42:f3:38:59:5e:df:70:d5:d1:91:07:54:94:2b:0d:47:65:9c:
3b:55:42:dd:ef:90:99:44:9d:53:ac:3d:61:bf:63:2c:c1:11:
81:bb:b5:e8:7e:f8:0e:06:1b:ad:79:4d:76:f6:46:83:31:0b:
6f:64:a2:2a:c8:e1:57:76:46:14:73:f2:b5:d2:ef:b1:cf:14:
c5:3c:2c:35:29:7b:8b:82:ef:97:48:69:cb:9f:4c:c3:f2:83:
cb:54:27:b6:7d:64:b5:cf:40:29:3b:2c:2d:cb:ef:49:94:94:
c1:00:a0:ee:85:4d:20:86:4f:0a:08:a4:f5:3b:2d:67:50:0f:
bc:0d:7c:69:3e:69:76:84:52:ca:3b:ac:56:b9:cb:e5:0b:13:
c7:ac:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:07:42 2025 by rpki-client