Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
File: AS54339.roa (raw, json)
Hash identifier: Z6nseCGs4ozexMBPhwTV/pH8xmbW0p1zw6UGW1jYmLE=
Subject key identifier: FD:1F:31:B3:70:2E:FE:A9:E5:D8:20:89:6C:44:4E:72:F8:0E:81:D8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 195389F24A3BAD4EFE813DCDF734D063E989A8F9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
Signing time: Sat 12 Apr 2025 07:06:05 +0000
ROA not before: Sat 12 Apr 2025 07:01:05 +0000
ROA not after: Sat 11 Apr 2026 07:06:05 +0000
asID: 54339
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.199.0/24 maxlen: 24
46.203.235.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.113.4.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.9.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:53:89:f2:4a:3b:ad:4e:fe:81:3d:cd:f7:34:d0:63:e9:89:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 12 07:01:05 2025 GMT
Not After : Apr 11 07:06:05 2026 GMT
Subject: CN=FD1F31B3702EFEA9E5D820896C444E72F80E81D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:04:28:48:71:c3:c3:48:ed:2e:06:1a:b3:
a3:37:9e:99:9a:d8:63:a0:f1:26:68:a6:00:6b:ff:
0b:ed:7b:67:a5:7c:a0:6d:08:00:45:ab:b6:53:40:
48:fc:df:ac:31:2f:5c:93:ae:36:08:48:cb:3c:b9:
6e:91:77:48:75:6c:82:8f:a0:c7:27:6a:44:72:0c:
a5:13:4e:e3:57:bf:7e:60:2f:fd:1b:6e:f1:b9:a4:
5d:03:d6:28:c9:ac:f8:70:df:ef:d1:b4:f2:af:07:
89:44:b8:15:3e:6a:31:fa:1a:cd:41:40:4c:62:dc:
87:37:15:13:41:57:4f:87:21:67:8a:95:8e:b0:56:
fa:72:b5:ee:a5:9c:7e:1b:a8:7c:f2:22:2d:75:27:
73:67:08:96:d6:aa:b1:94:d0:ff:e9:58:95:71:72:
84:cb:b2:b3:1b:56:b9:e7:07:d7:9f:12:3b:53:7b:
29:f8:48:81:32:bb:da:86:a2:91:51:b7:c0:c5:14:
ed:13:dd:b0:46:4c:24:12:1c:91:7d:eb:93:e6:be:
22:18:3c:f4:85:b2:9b:c1:95:bd:2c:e0:fa:4c:a6:
ff:a0:f8:32:86:fe:14:8a:3a:66:b0:a7:d0:4a:02:
4b:4e:c6:2b:e0:16:d6:ae:ed:cb:ad:3c:02:a5:c2:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:31:B3:70:2E:FE:A9:E5:D8:20:89:6C:44:4E:72:F8:0E:81:D8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.168.0/24
46.203.177.0/24
46.203.199.0/24
46.203.235.0/24
92.112.55.0/24
92.113.4.0/24
92.113.6.0/24
92.113.9.0/24
92.113.15.0/24
92.113.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b9:7e:42:4e:25:5a:a8:e0:59:fd:c0:de:8d:47:49:78:47:
e6:81:da:e0:33:4a:62:76:29:f8:5d:04:38:19:51:cb:cf:b4:
ee:b1:52:c7:1b:42:61:cc:f0:03:df:e2:35:f7:68:84:29:da:
9b:8d:8f:58:59:2f:8c:7e:dc:ce:bd:58:af:98:87:96:3f:ba:
41:eb:40:c8:6e:93:94:ea:74:96:27:54:9f:b5:e4:fb:bb:c6:
88:fa:7b:c5:ed:4f:03:05:da:4b:db:60:b5:95:7f:68:81:5e:
dc:86:8b:d2:92:51:36:77:db:e5:cd:c0:89:7a:e9:27:31:e5:
45:1d:86:3a:43:60:cb:99:64:79:77:6a:91:be:e9:26:43:2c:
33:ca:97:ca:99:96:72:29:88:8d:98:69:58:d0:7a:7b:3a:75:
52:18:d9:55:df:54:84:72:14:5c:f4:11:11:15:3d:41:5c:df:
39:ff:67:dd:9d:55:1d:8d:6a:c3:c2:fe:2d:08:28:f0:7a:f1:
a1:00:cd:a8:44:d5:12:c8:da:0a:76:c5:cc:b9:ed:cb:d0:50:
23:8c:7a:fb:fa:f3:a5:ab:17:b1:ac:d9:00:e8:6f:5c:dc:f9:
04:9b:99:3b:39:aa:39:05:01:a0:a4:31:33:e1:35:f0:e3:7b:
cb:19:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net