Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: rem3qmuSe6LxF6MbvdcbMTkmxP77z8gUiIMk13bXu+I=
Subject key identifier: 69:55:B4:DA:C9:04:40:24:56:F1:1A:DD:2D:B6:05:98:99:EF:C9:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 24865A253844E288E6C7161A4287DA79E4B0033E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
Signing time: Sun 26 Jan 2025 14:39:26 +0000
ROA not before: Sun 26 Jan 2025 14:34:26 +0000
ROA not after: Sun 25 Jan 2026 14:39:26 +0000
asID: 9304
IP address blocks: 82.21.101.0/24 maxlen: 24
82.21.109.0/24 maxlen: 24
82.21.118.0/24 maxlen: 24
82.21.133.0/24 maxlen: 24
82.21.144.0/24 maxlen: 24
82.21.156.0/24 maxlen: 24
82.21.187.0/24 maxlen: 24
82.22.200.0/24 maxlen: 24
82.23.143.0/24 maxlen: 24
82.23.144.0/24 maxlen: 24
82.23.145.0/24 maxlen: 24
82.23.146.0/24 maxlen: 24
82.23.147.0/24 maxlen: 24
82.23.148.0/24 maxlen: 24
82.23.196.0/24 maxlen: 24
82.24.17.0/24 maxlen: 24
82.24.57.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.24.183.0/24 maxlen: 24
82.27.109.0/24 maxlen: 24
82.27.199.0/24 maxlen: 24
82.29.26.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.29.75.0/24 maxlen: 24
82.29.78.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:86:5a:25:38:44:e2:88:e6:c7:16:1a:42:87:da:79:e4:b0:03:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 26 14:34:26 2025 GMT
Not After : Jan 25 14:39:26 2026 GMT
Subject: CN=6955B4DAC904402456F11ADD2DB6059899EFC96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:96:5b:ca:85:a2:9d:ad:46:02:37:a8:54:
14:6e:70:5f:2f:c1:3f:04:41:2c:03:9c:df:da:6f:
59:d1:e2:97:5f:65:85:2f:2f:8e:26:e6:0d:60:ab:
31:d0:00:ed:74:d5:8b:85:39:48:af:65:88:2c:ec:
82:35:56:53:b5:7f:68:03:4a:d4:39:32:41:40:a1:
18:e4:12:ed:e2:00:e0:64:73:c6:63:15:9f:04:9a:
8b:d5:c2:ba:29:99:bc:c8:e1:6c:4e:47:dc:fc:91:
a2:1a:05:ce:f5:b0:b1:04:f4:9a:b7:c5:1e:27:db:
bc:23:be:8f:c8:fa:2a:5a:83:12:b3:fb:99:23:b2:
7b:eb:66:13:86:a2:55:74:79:a8:cc:ad:d7:3c:8e:
73:05:a0:0f:66:54:19:82:1b:17:b2:7a:d5:ee:d0:
07:c2:31:15:32:d9:a7:3a:7d:35:3d:3c:4c:00:f3:
cf:52:7b:a6:df:63:0b:14:66:67:02:2a:33:88:f1:
5b:5a:2f:ac:34:58:e2:39:ff:d9:a0:b4:7b:d3:b2:
fb:c8:60:17:de:eb:eb:8f:70:50:77:57:a3:c4:f1:
ed:31:e8:f5:d6:22:29:16:67:59:04:9e:a7:9b:83:
0d:dd:6e:dd:9f:24:be:5c:d3:2b:29:a2:55:b8:a3:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:55:B4:DA:C9:04:40:24:56:F1:1A:DD:2D:B6:05:98:99:EF:C9:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.101.0/24
82.21.109.0/24
82.21.118.0/24
82.21.133.0/24
82.21.144.0/24
82.21.156.0/24
82.21.187.0/24
82.22.200.0/24
82.23.143.0-82.23.148.255
82.23.196.0/24
82.24.17.0/24
82.24.57.0/24
82.24.175.0/24
82.24.183.0/24
82.27.109.0/24
82.27.199.0/24
82.29.26.0/24
82.29.48.0/24
82.29.75.0/24
82.29.78.0/24
82.29.93.0/24
82.29.127.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:1a:5c:40:e9:25:e6:3a:7f:80:72:06:2c:90:0f:6d:1d:
e2:9f:0c:4d:44:3a:dd:cc:5c:96:cf:63:92:f7:ab:52:81:3e:
6e:6c:4b:2a:b7:00:b9:bd:4a:ff:7e:3e:2f:7e:97:9f:93:c6:
dc:20:76:c2:b5:ac:ca:97:d0:7a:8c:01:86:e9:fe:5c:74:74:
61:c7:dd:e0:5c:7b:f5:b3:64:64:82:6e:07:b8:77:07:30:3a:
83:4b:9b:d7:08:19:bd:3d:91:98:df:f4:f6:ef:87:e9:e8:ff:
ea:04:70:08:d4:b0:c0:f9:89:51:77:00:83:c3:49:2d:cb:23:
77:43:fb:0e:a8:a7:17:4c:07:02:21:bd:1c:ee:96:4a:79:e1:
c1:ac:ad:b7:d5:82:4a:78:9d:e0:06:9a:e5:ce:a9:63:08:80:
3f:47:28:97:e3:d6:aa:98:b5:12:1d:91:c3:e1:a7:eb:47:f1:
65:e9:00:cd:d6:48:b0:29:95:19:69:2d:fc:f7:ab:d6:b6:6b:
47:9e:b1:fd:13:5b:a7:41:61:f7:17:c0:07:a5:36:85:3d:a7:
1c:31:06:79:db:c2:3a:59:14:c2:aa:d4:ff:d8:a3:76:ad:97:
38:ff:69:b7:79:1a:35:1a:34:3c:63:17:24:a8:91:ab:3a:66:
5d:85:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:43:00 2025 by rpki-client