Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: iSgDQVKBJinjaUCXWw+nk4VBlDRGgxrlxQO+lbjDkig=
Subject key identifier: 34:5A:2F:C7:5C:30:71:2E:30:E7:71:63:17:BE:5B:5D:24:F2:97:A0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 66042EEA269CC2B31F79B47BC05226F245C011A9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
Signing time: Sun 04 May 2025 13:40:08 +0000
ROA not before: Sun 04 May 2025 13:35:08 +0000
ROA not after: Sun 03 May 2026 13:40:08 +0000
asID: 9304
IP address blocks: 46.203.83.0/24 maxlen: 24
46.203.84.0/24 maxlen: 24
46.203.87.0/24 maxlen: 24
46.203.126.0/24 maxlen: 24
46.203.135.0/24 maxlen: 24
46.203.139.0/24 maxlen: 24
46.203.172.0/24 maxlen: 24
46.203.176.0/24 maxlen: 24
46.203.183.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
91.124.42.0/23 maxlen: 23
92.113.212.0/22 maxlen: 22
95.134.0.0/22 maxlen: 24
95.134.7.0/24 maxlen: 24
95.134.16.0/22 maxlen: 24
95.134.32.0/22 maxlen: 24
95.134.84.0/24 maxlen: 24
95.134.85.0/24 maxlen: 24
95.134.116.0/22 maxlen: 24
95.134.124.0/22 maxlen: 24
95.134.136.0/22 maxlen: 24
95.134.140.0/22 maxlen: 22
95.134.175.0/24 maxlen: 24
95.135.70.0/24 maxlen: 24
95.135.193.0/24 maxlen: 24
95.135.200.0/23 maxlen: 23
95.135.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:04:2e:ea:26:9c:c2:b3:1f:79:b4:7b:c0:52:26:f2:45:c0:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 4 13:35:08 2025 GMT
Not After : May 3 13:40:08 2026 GMT
Subject: CN=345A2FC75C30712E30E7716317BE5B5D24F297A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:c9:fb:54:f9:20:ae:12:ab:be:81:6e:ce:
21:66:00:ef:01:30:fc:77:e1:be:c6:f7:cf:cf:1b:
ca:73:9a:f3:a8:06:cb:ce:66:1b:e3:68:8f:82:b6:
23:ce:75:ad:a4:3e:29:b2:2e:15:bf:fc:a4:35:30:
b8:ce:ba:e2:cb:87:0c:75:57:06:33:f4:7e:22:74:
54:a8:b5:ee:d5:4b:56:1a:a9:4d:f1:ca:9c:0f:8f:
e6:6f:16:75:c5:1a:ba:66:82:5a:58:f4:be:ad:86:
e4:3e:96:f2:44:42:69:b5:68:1e:31:b1:f5:2a:60:
d7:6b:e9:75:64:08:fd:f5:03:b2:54:0c:79:de:30:
6d:29:f1:68:03:4c:6e:ef:27:f2:55:24:3d:d9:87:
e9:c2:21:0f:27:6d:19:1e:5b:db:b4:e9:ef:7f:c5:
2e:2d:54:d7:2b:03:cd:bd:9c:2e:fa:8a:e5:7a:c4:
00:fe:bd:73:51:ce:5f:39:da:ed:d8:21:dc:0a:8f:
2a:e4:a6:49:ba:b9:d3:db:b3:06:47:51:d4:75:82:
ad:97:03:ae:81:11:18:b6:cd:d1:ba:00:0d:a3:b2:
ca:70:49:09:b7:50:ca:63:04:13:75:45:c1:01:30:
7e:4e:dd:13:4b:f5:86:d2:d4:fd:32:4d:92:09:05:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:2F:C7:5C:30:71:2E:30:E7:71:63:17:BE:5B:5D:24:F2:97:A0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.83.0-46.203.84.255
46.203.87.0/24
46.203.126.0/24
46.203.135.0/24
46.203.139.0/24
46.203.172.0/24
46.203.176.0/24
46.203.183.0/24
46.203.200.0/24
91.124.42.0/23
92.113.212.0/22
95.134.0.0/22
95.134.7.0/24
95.134.16.0/22
95.134.32.0/22
95.134.84.0/23
95.134.116.0/22
95.134.124.0/22
95.134.136.0/21
95.134.175.0/24
95.135.70.0/24
95.135.193.0/24
95.135.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2d:1b:a5:d4:0d:ef:15:78:d7:d2:24:81:04:62:b8:6c:fa:
04:a0:ea:bb:bc:ef:3c:19:c8:88:1f:3c:b9:50:5e:66:73:be:
d2:3f:90:77:90:82:20:69:b4:49:74:99:d1:29:67:b0:05:ad:
70:28:17:e4:5e:7f:6d:f1:72:26:e0:14:07:1e:0a:e2:0e:75:
32:9d:4a:fc:a3:65:5c:9a:a5:14:50:69:a9:ea:67:9b:f2:62:
23:98:51:23:50:b4:f0:97:86:1f:5b:be:1a:89:f2:c3:7f:8a:
1e:77:34:83:14:fc:54:f2:b9:a9:ef:f1:cc:79:22:e6:6a:68:
80:af:c5:09:8a:81:15:ca:48:d5:6e:28:a9:b5:c5:3a:d0:b2:
91:3b:b3:80:df:e5:40:2b:86:54:d6:57:8c:20:4e:1e:ec:61:
45:c1:ec:1e:ba:fc:51:4f:ab:28:88:26:47:b3:a4:a0:2b:32:
f2:e9:0b:ae:74:e5:61:dd:c5:3f:9f:b6:ea:e0:c8:d3:90:d7:
39:0d:c6:f9:b0:ad:ef:fc:ec:c2:5b:07:e9:65:01:32:2c:7a:
da:e8:86:0f:51:1f:4b:17:db:77:45:53:55:f2:8e:05:f0:ba:
8b:32:8c:8b:fd:e2:81:80:45:e1:f1:2f:85:a8:e8:b5:6e:91:
86:b1:a5:f3
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUZgQu6iacwrMfebR7wFIm8kXAEakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA1MDQxMzM1MDhaFw0yNjA1MDMxMzQwMDhaMDMxMTAvBgNV
BAMTKDM0NUEyRkM3NUMzMDcxMkUzMEU3NzE2MzE3QkU1QjVEMjRGMjk3QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn8n7VPkgrhKrvoFuziFmAO8B
MPx34b7G98/PG8pzmvOoBsvOZhvjaI+CtiPOda2kPimyLhW//KQ1MLjOuuLLhwx1
VwYz9H4idFSote7VS1YaqU3xypwPj+ZvFnXFGrpmglpY9L6thuQ+lvJEQmm1aB4x
sfUqYNdr6XVkCP31A7JUDHneMG0p8WgDTG7vJ/JVJD3Zh+nCIQ8nbRkeW9u06e9/
xS4tVNcrA829nC76iuV6xAD+vXNRzl852u3YIdwKjyrkpkm6udPbswZHUdR1gq2X
A66BERi2zdG6AA2jsspwSQm3UMpjBBN1RcEBMH5O3RNL9YbS1P0yTZIJBXc3AgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUNFovx1wwcS4w53FjF75bXSTyl6AwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTOTMwNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBrwYIKwYBBQUHAQcBAf8EgZ8wgZwwgZkEAgABMIGSMAwD
BAAuy1MDBAAuy1QDBAAuy1cDBAAuy34DBAAuy4cDBAAuy4sDBAAuy6wDBAAuy7AD
BAAuy7cDBAAuy8gDBAFbfCoDBAJccdQDBAJfhgADBABfhgcDBAJfhhADBAJfhiAD
BAFfhlQDBAJfhnQDBAJfhnwDBANfhogDBABfhq8DBABfh0YDBABfh8EDBAJfh8gw
DQYJKoZIhvcNAQELBQADggEBAA0tG6XUDe8VeNfSJIEEYrhs+gSg6ru87zwZyIgf
PLlQXmZzvtI/kHeQgiBptEl0mdEpZ7AFrXAoF+Ref23xcibgFAceCuIOdTKdSvyj
ZVyapRRQaanqZ5vyYiOYUSNQtPCXhh9bvhqJ8sN/ih53NIMU/FTyuanv8cx5IuZq
aICvxQmKgRXKSNVuKKm1xTrQspE7s4Df5UArhlTWV4wgTh7sYUXB7B66/FFPqyiI
JkezpKArMvLpC6505WHdxT+fturgyNOQ1zkNxvmwre/87MJbB+llATIsetrohg9R
H0sX23dFU1XyjgXwuosyjIv94oGAReHxL4Wo6LVukYaxpfM=
-----END CERTIFICATE-----
Generated at Tue May 6 23:46:51 2025 by rpki-client