Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9232.roa
File: AS9232.roa (raw, json)
Hash identifier: 16ATfN/7dkjBle+ENMnYUE88lVC0qn4FuhCDXbXISS8=
Subject key identifier: 47:57:37:0C:7D:9E:EA:52:8F:BB:F5:6D:9E:6F:DA:77:ED:FE:AA:75
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 78C90F00BE94BC41218A9A888524C6DE52B57E02
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9232.roa
Signing time: Sun 01 Jun 2025 16:06:29 +0000
ROA not before: Sun 01 Jun 2025 16:01:29 +0000
ROA not after: Sun 31 May 2026 16:06:29 +0000
asID: 9232
IP address blocks: 143.14.62.0/24 maxlen: 24
143.14.128.0/24 maxlen: 24
143.14.137.0/24 maxlen: 24
143.14.193.0/24 maxlen: 24
143.14.223.0/24 maxlen: 24
155.117.0.0/24 maxlen: 24
155.117.8.0/24 maxlen: 24
155.117.16.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
155.117.185.0/24 maxlen: 24
155.117.188.0/24 maxlen: 24
162.141.121.0/24 maxlen: 24
167.148.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c9:0f:00:be:94:bc:41:21:8a:9a:88:85:24:c6:de:52:b5:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 1 16:01:29 2025 GMT
Not After : May 31 16:06:29 2026 GMT
Subject: CN=4757370C7D9EEA528FBBF56D9E6FDA77EDFEAA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:ae:e2:4a:2a:1f:1b:f9:37:c3:0a:17:51:
26:fe:e6:6e:6e:7a:93:9b:37:f3:56:3e:96:be:03:
0a:3d:2a:ed:6b:33:00:5d:5e:f7:17:65:02:b0:b4:
10:99:81:df:37:1f:e4:ea:ca:8e:42:5e:8c:97:2c:
10:a3:f5:53:1e:f4:1a:87:fc:a8:cc:c3:10:24:a7:
02:b7:8b:b1:62:8c:07:9b:ac:0d:e1:e0:fa:b9:df:
a4:ae:e0:6a:c4:94:99:34:1c:3b:0f:50:ab:a4:83:
cb:42:0c:e1:32:0c:59:30:91:47:85:08:06:73:89:
da:eb:94:e8:f4:68:be:94:4e:28:51:a7:55:a0:1c:
ea:32:fd:4d:36:2b:4a:e6:0a:4a:36:9b:90:b8:45:
05:b4:59:4f:ac:6c:e0:3f:87:f6:f6:25:a6:6b:92:
66:b5:eb:9f:1c:92:b3:e4:c1:1d:df:1a:c3:b3:b0:
4f:76:b0:74:5a:21:7b:28:89:10:3c:05:7e:16:59:
fd:73:cf:96:ad:37:90:a1:8a:83:63:13:0d:51:de:
9f:5c:9c:54:ed:4c:93:8d:fa:63:03:a5:8b:e2:97:
48:0b:a2:11:65:b6:e9:4c:e6:a6:8d:b4:6a:ed:7b:
53:8f:f7:4f:99:02:57:25:11:f6:eb:4b:18:d0:f5:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:37:0C:7D:9E:EA:52:8F:BB:F5:6D:9E:6F:DA:77:ED:FE:AA:75
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.62.0/24
143.14.128.0/24
143.14.137.0/24
143.14.193.0/24
143.14.223.0/24
155.117.0.0/24
155.117.8.0/24
155.117.16.0/24
155.117.102.0/24
155.117.185.0/24
155.117.188.0/24
162.141.121.0/24
167.148.210.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:04:af:74:2b:04:39:67:6b:b7:57:de:cd:43:ea:e4:ab:f6:
d0:37:90:fb:76:cf:e6:cd:cd:d1:9f:d4:b1:e0:44:64:50:66:
02:2d:2c:ff:15:28:bf:b0:38:a7:e9:90:6d:fe:2c:18:70:d2:
f7:64:f6:e4:d5:26:16:b3:f8:f2:ac:51:ba:61:f0:80:fd:36:
16:9b:c4:3c:64:be:b2:ba:68:9e:01:b9:bb:e5:6a:d3:1b:07:
aa:17:b5:35:8f:09:6d:39:c7:78:9f:cc:ee:1a:bc:93:c0:9f:
f5:42:1f:52:c9:95:9d:06:40:a5:c6:3e:c4:33:12:ae:f5:15:
ad:59:1b:d4:ac:8f:08:ae:0c:48:49:48:75:11:70:0a:f8:1c:
d4:76:ef:4f:68:e7:a3:e8:6f:c1:62:52:9d:87:1a:e6:e3:8a:
36:44:52:f9:a3:ad:5f:1b:ed:d2:49:11:56:25:7b:6a:8d:80:
d9:14:89:05:78:f7:b4:98:c2:4f:4a:f9:02:d8:6d:9d:58:aa:
92:0f:27:46:5c:21:fc:a4:ef:2b:21:74:dc:c3:48:ba:c2:e9:
39:16:0f:37:13:69:c8:40:4f:0a:1f:d7:52:05:f0:e4:e3:0a:
74:8e:d5:23:28:71:f6:5f:a5:0c:ce:3f:3c:92:97:f9:36:02:
2b:0e:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:12:48 2025 by rpki-client