Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS34927.roa
File: AS34927.roa (raw, json)
Hash identifier: YCLxk/n2G4J4Myg+rSk1VKzX/cBdBudeXb+Yb41qqCQ=
Subject key identifier: 5B:51:AF:E2:70:C9:23:5B:3A:18:9A:BC:1A:F5:B5:12:2F:C9:01:10
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3C1665D12C6D814EEAD30D0B8435AFE8DAE7158F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS34927.roa
Signing time: Tue 10 Jun 2025 08:37:14 +0000
ROA not before: Tue 10 Jun 2025 08:32:14 +0000
ROA not after: Tue 09 Jun 2026 08:37:14 +0000
asID: 34927
IP address blocks: 178.93.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:16:65:d1:2c:6d:81:4e:ea:d3:0d:0b:84:35:af:e8:da:e7:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 10 08:32:14 2025 GMT
Not After : Jun 9 08:37:14 2026 GMT
Subject: CN=5B51AFE270C9235B3A189ABC1AF5B5122FC90110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:a6:49:cc:c8:e0:9d:1b:54:6f:b7:e6:7e:
28:9e:92:ba:f5:59:09:23:fd:38:f6:9c:c8:37:20:
c3:c6:78:b2:85:f7:c8:02:ca:89:04:2f:46:a6:9b:
67:96:cf:33:3e:03:19:87:f3:0e:24:8b:48:ae:32:
20:10:9e:30:f0:e9:1a:80:e8:5d:a6:4e:b8:43:18:
2e:ea:1c:01:5d:cc:cb:cb:7b:5e:fe:aa:51:ca:ba:
37:5e:56:94:72:84:31:f4:4d:d4:d4:3b:c4:d0:40:
a4:13:33:cb:9d:c7:51:93:60:bd:2f:2b:b3:f0:c3:
c0:8c:b2:41:f3:39:ca:83:68:be:7f:07:73:f8:26:
7f:a2:44:42:2b:ec:50:15:93:52:52:c4:6a:a0:47:
da:e5:3b:3b:0c:ce:7b:ba:2c:a1:8f:b0:4b:7a:dd:
6b:97:96:3b:0b:c0:ea:f8:f0:c8:f9:e2:90:db:50:
6e:63:9b:42:99:50:7c:7a:f0:4c:a2:d4:78:a2:50:
35:40:75:c1:7e:9d:fa:d4:98:e9:03:f1:a5:00:6e:
1f:75:01:a8:dc:12:82:77:8a:95:46:fe:af:14:00:
a6:22:34:43:83:56:6a:c8:37:46:c3:c9:68:0d:26:
a7:04:ed:57:83:a8:a0:10:bd:1f:2b:f5:da:9b:ad:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:AF:E2:70:C9:23:5B:3A:18:9A:BC:1A:F5:B5:12:2F:C9:01:10
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS34927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7d:3d:cd:61:1e:1d:fb:ea:ad:e7:ed:3f:cc:f4:e8:cb:a8:
8d:3b:31:cb:d2:d4:41:42:33:4d:d1:74:0c:95:61:14:bd:8c:
d1:04:0c:ce:b1:33:ea:36:cb:ff:1f:61:60:9f:9a:0c:5e:7a:
1d:24:8f:8f:8c:8f:aa:8a:c5:ae:b3:3d:5e:95:a9:e8:14:2e:
66:c2:8a:8e:46:b0:ab:df:12:8a:7d:cf:1b:28:8a:8f:25:ce:
bf:90:67:f4:cd:22:f7:92:4c:f6:aa:ad:0d:5b:f9:0e:43:d3:
a1:5c:4f:72:62:33:43:c0:e9:df:3f:04:a6:2e:ec:47:c0:3d:
e8:e7:41:32:cb:31:73:9d:62:55:55:3e:c6:c2:06:56:aa:23:
fe:ec:a1:70:0a:86:a5:af:b6:d5:2a:d1:d9:5f:cf:49:da:51:
50:ce:b6:59:6d:8a:b0:58:ee:e7:42:9f:18:5c:ba:3e:5f:a7:
f5:07:88:02:80:bb:c6:01:aa:34:c0:07:06:61:27:21:2f:33:
2e:79:8b:90:6b:37:98:dc:6e:66:90:e9:fc:a2:ba:9e:e7:98:
84:43:ac:f8:d0:1f:a8:9d:d7:33:7d:29:dd:c8:29:56:34:70:
85:69:29:e1:a9:a3:9d:6b:ed:9c:94:71:3a:11:c1:91:b1:b8:
ff:12:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:38:45 2025 by rpki-client