Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: fcDIrMIClcIjB0awIHXkJNyy5KaxTlnt9p/VnKUK/1M=
Subject key identifier: 92:E6:2D:6D:FD:28:61:81:6C:85:BB:38:6D:35:8F:D3:4F:4E:2A:CE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7A3FF8BD45FDAC180249AD061A302B8D21A072C7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
Signing time: Wed 12 Feb 2025 00:01:59 +0000
ROA not before: Tue 11 Feb 2025 23:56:59 +0000
ROA not after: Wed 11 Feb 2026 00:01:59 +0000
asID: 36530
IP address blocks: 46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
92.113.106.0/23 maxlen: 24
92.113.112.0/23 maxlen: 24
92.113.124.0/23 maxlen: 24
92.113.136.0/23 maxlen: 24
92.113.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3f:f8:bd:45:fd:ac:18:02:49:ad:06:1a:30:2b:8d:21:a0:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 11 23:56:59 2025 GMT
Not After : Feb 11 00:01:59 2026 GMT
Subject: CN=92E62D6DFD2861816C85BB386D358FD34F4E2ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:e0:4d:a7:12:05:e5:f4:34:88:8d:ce:66:
ba:a7:64:c0:65:c6:b1:17:33:f7:00:6d:d0:87:b7:
4b:f2:d4:e6:bf:e1:9f:1e:91:ae:7d:c6:22:72:37:
13:be:1c:e6:a5:fc:23:41:ae:ec:87:62:87:8b:da:
e1:ce:7e:73:ff:ee:df:f1:48:4c:57:40:6d:7f:b1:
a4:78:17:26:3d:fc:9d:ca:ec:eb:76:1e:9b:1d:c9:
3c:55:fd:7c:d9:55:d4:2b:dd:57:33:30:8a:ea:81:
1e:8c:1e:77:43:52:5e:8c:01:c6:9f:33:a3:e6:d3:
94:9e:95:b0:d4:9c:e8:fd:08:15:e7:ec:8e:e4:e6:
53:aa:7e:5a:3d:9d:9a:9f:20:c9:67:fa:a7:f3:ab:
b2:5c:27:8a:02:e4:86:76:53:43:18:59:ce:ee:93:
58:8e:d7:5c:f4:2a:40:f3:34:b2:56:a5:2f:09:16:
fc:3f:f0:23:df:dc:59:04:73:b8:e8:3d:c7:b9:7a:
b9:e5:fc:1f:d4:4f:72:01:45:d7:ad:d9:86:21:91:
48:72:30:02:23:d4:d7:b7:13:4d:0a:dd:9a:37:97:
db:41:04:78:9b:da:07:76:6f:37:21:77:a9:d5:68:
0e:ff:95:e2:0d:6c:75:77:1c:e4:03:ae:37:e2:da:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:2D:6D:FD:28:61:81:6C:85:BB:38:6D:35:8F:D3:4F:4E:2A:CE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.98.0/24
46.203.203.0/24
92.113.106.0/23
92.113.112.0/23
92.113.124.0/23
92.113.136.0/23
92.113.142.0/23
Signature Algorithm: sha256WithRSAEncryption
67:b0:8d:9c:4b:32:7b:5b:f0:fb:b5:70:34:b9:e3:42:3e:ab:
0f:f8:89:a1:56:dc:a7:fb:03:f8:c2:c7:76:96:48:55:a5:f3:
c7:51:da:80:f9:6d:20:11:4f:99:04:0a:f3:82:47:c4:d6:cb:
73:d1:23:29:de:e2:0f:e0:4d:52:e7:36:ce:e1:2b:d9:2a:fd:
ae:2e:b0:86:5f:dc:26:93:e0:37:1f:dd:bb:19:51:d4:35:28:
94:12:86:e0:e4:5a:9c:af:4a:f4:1b:11:88:1f:57:2b:8f:e1:
b0:fd:9d:6c:fd:80:5b:85:ff:32:35:c2:4a:23:bc:85:9f:70:
0d:86:88:6c:b9:38:da:51:e7:e6:77:a4:76:a0:83:2a:fa:83:
fa:ee:68:6e:fb:c3:11:7f:9b:59:64:ae:c4:6d:87:c9:ca:bd:
f1:42:0d:54:58:ce:94:f1:18:ab:90:b1:cf:cc:12:03:a9:18:
87:15:22:af:ae:97:13:cd:38:eb:43:68:b8:70:68:ca:f4:99:
68:43:61:69:ab:f9:9b:89:85:db:f1:41:88:fc:2a:f3:bf:fe:
68:97:f0:63:8b:50:14:0c:b7:95:94:f4:d0:f0:65:5c:bd:eb:
fb:88:5d:d0:51:d8:5d:77:3b:4d:65:57:4d:95:d1:fd:40:9d:
28:73:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net