Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: wD9GC6NIB4VfgaJOFBG2h0io+eAyVGFIJxYNkNUPj38=
Subject key identifier: 4C:D9:89:79:2C:77:5D:AA:DE:94:EC:F4:29:D8:BC:C0:A8:A5:06:E2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5CAAA1959234E8BAEBC82B65007B025089AA9C4B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
Signing time: Thu 10 Apr 2025 16:02:51 +0000
ROA not before: Thu 10 Apr 2025 15:57:51 +0000
ROA not after: Thu 09 Apr 2026 16:02:51 +0000
asID: 5065
IP address blocks: 91.124.64.0/23 maxlen: 24
91.124.88.0/23 maxlen: 24
91.124.124.0/23 maxlen: 24
91.124.136.0/23 maxlen: 24
91.124.142.0/23 maxlen: 24
91.124.150.0/23 maxlen: 24
91.124.174.0/23 maxlen: 24
91.124.184.0/23 maxlen: 24
91.124.202.0/23 maxlen: 24
91.124.210.0/23 maxlen: 24
95.135.0.0/23 maxlen: 24
95.135.6.0/23 maxlen: 24
95.135.12.0/23 maxlen: 24
95.135.18.0/23 maxlen: 24
95.135.24.0/23 maxlen: 24
95.135.30.0/23 maxlen: 24
95.135.36.0/23 maxlen: 24
95.135.42.0/23 maxlen: 24
95.135.48.0/23 maxlen: 24
95.135.52.0/23 maxlen: 24
95.135.54.0/23 maxlen: 24
95.135.56.0/23 maxlen: 24
95.135.62.0/23 maxlen: 24
95.135.68.0/23 maxlen: 24
95.135.74.0/23 maxlen: 24
95.135.80.0/23 maxlen: 24
95.135.86.0/23 maxlen: 24
95.135.92.0/23 maxlen: 24
95.135.94.0/23 maxlen: 24
95.135.106.0/23 maxlen: 24
95.135.108.0/24 maxlen: 24
95.135.110.0/24 maxlen: 24
95.135.117.0/24 maxlen: 24
95.135.118.0/24 maxlen: 24
95.135.124.0/24 maxlen: 24
95.135.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:aa:a1:95:92:34:e8:ba:eb:c8:2b:65:00:7b:02:50:89:aa:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 10 15:57:51 2025 GMT
Not After : Apr 9 16:02:51 2026 GMT
Subject: CN=4CD989792C775DAADE94ECF429D8BCC0A8A506E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:89:00:ed:e6:47:fc:3b:a3:cd:97:0d:c9:
3d:46:bd:0a:b9:f3:bb:22:c9:d8:56:5f:21:9e:dd:
f7:97:f3:64:80:19:78:e1:07:b6:0f:f1:f3:63:e8:
36:e0:3d:d6:4c:3d:57:15:9d:9e:84:8a:00:5a:42:
0d:62:dc:d9:23:c6:9d:ea:55:0a:2a:bb:57:16:67:
22:28:74:fc:d7:e9:88:1e:67:69:ac:f7:d0:22:ff:
95:d7:99:f6:7d:25:40:5d:6d:1c:ba:25:50:f9:8c:
fb:d7:9d:ee:3d:24:c3:5c:23:65:38:0e:c0:1a:8c:
37:42:b6:60:97:a5:6e:6d:6c:85:ab:8c:2e:c9:83:
42:f3:32:c4:b5:5e:fe:2d:bd:0c:0a:1b:da:79:e6:
c6:5a:7d:18:f7:95:b1:bf:4f:21:9d:13:30:0c:5c:
ec:ed:fb:c7:ad:33:54:23:f7:8d:a2:48:33:f0:87:
24:88:98:f7:69:f9:df:e7:d9:4d:1f:72:cc:fc:7f:
49:03:44:dc:76:1c:44:96:9c:9b:ce:e4:f7:f8:93:
75:41:2b:85:1a:c5:75:5e:af:0d:64:5d:c8:3b:0a:
7d:7b:1b:25:92:37:46:c2:97:38:00:fc:89:6e:62:
de:30:36:06:69:7f:ad:93:a3:c2:6a:4d:cb:b9:be:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:89:79:2C:77:5D:AA:DE:94:EC:F4:29:D8:BC:C0:A8:A5:06:E2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.64.0/23
91.124.88.0/23
91.124.124.0/23
91.124.136.0/23
91.124.142.0/23
91.124.150.0/23
91.124.174.0/23
91.124.184.0/23
91.124.202.0/23
91.124.210.0/23
95.135.0.0/23
95.135.6.0/23
95.135.12.0/23
95.135.18.0/23
95.135.24.0/23
95.135.30.0/23
95.135.36.0/23
95.135.42.0/23
95.135.48.0/23
95.135.52.0-95.135.57.255
95.135.62.0/23
95.135.68.0/23
95.135.74.0/23
95.135.80.0/23
95.135.86.0/23
95.135.92.0/22
95.135.106.0-95.135.108.255
95.135.110.0/24
95.135.117.0-95.135.118.255
95.135.124.0/24
95.135.156.0/22
Signature Algorithm: sha256WithRSAEncryption
40:6f:a4:ef:54:7e:7d:ae:df:5b:ef:95:f2:d9:66:1d:61:47:
27:75:3b:02:39:2d:88:69:38:61:9a:d3:58:74:15:bd:7c:b8:
b7:63:66:5f:f2:a6:16:ea:f5:0b:1f:1d:84:58:59:d0:60:b4:
ae:17:d3:01:db:ab:0e:50:d7:51:3d:20:2f:40:41:7a:f0:f9:
06:00:fc:1b:67:62:e2:e6:d6:41:fa:42:53:d9:39:2f:52:b2:
5c:35:e0:27:3f:48:ec:3b:bd:55:30:79:f7:5f:8d:f7:5c:e5:
f1:5a:8c:dd:74:a9:6b:b1:bd:66:e0:74:fb:82:4a:3b:b1:e4:
82:36:6f:33:8f:f2:11:0c:da:c4:ec:3a:4d:30:28:99:f5:a5:
f5:71:02:33:e4:70:52:1c:51:7a:1c:f2:14:c2:a6:0c:10:b2:
cf:21:dd:db:a7:b9:3d:54:84:be:d7:1c:c5:57:ec:48:56:06:
ae:ef:16:ae:91:87:a0:f9:98:a3:5b:b1:d2:77:37:33:f9:38:
36:ee:f8:0c:c1:ca:fb:26:52:2b:fb:9d:13:b7:0a:ac:30:2f:
90:41:65:c1:7f:a8:25:ae:38:2f:83:c1:31:fa:21:27:0b:e8:
c2:58:b0:35:f0:b9:66:34:30:d8:b1:93:fa:36:af:79:fd:79:
e0:3d:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net