Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: 3zzSeGX+tgTw6Bk9yXXLv6uIGPm7HRd9LMb5RNCcREM=
Subject key identifier: 4C:9B:51:87:A9:B5:B1:26:CB:36:24:4E:FA:34:47:1B:80:FC:51:B9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 23DEFE64D21EB2F1B2F2DC8AE310210067358C1E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
Signing time: Tue 08 Apr 2025 16:22:02 +0000
ROA not before: Tue 08 Apr 2025 16:17:02 +0000
ROA not after: Tue 07 Apr 2026 16:22:02 +0000
asID: 5650
IP address blocks: 46.203.160.0/24 maxlen: 24
46.203.164.0/24 maxlen: 24
92.112.32.0/24 maxlen: 24
92.112.33.0/24 maxlen: 24
92.112.34.0/24 maxlen: 24
92.112.35.0/24 maxlen: 24
92.112.36.0/23 maxlen: 24
92.112.38.0/23 maxlen: 24
92.112.40.0/21 maxlen: 24
92.112.157.0/24 maxlen: 24
92.113.56.0/21 maxlen: 22
95.135.38.0/24 maxlen: 24
95.135.85.0/24 maxlen: 24
95.135.127.0/24 maxlen: 24
95.135.138.0/24 maxlen: 24
95.135.180.0/24 maxlen: 24
95.135.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:de:fe:64:d2:1e:b2:f1:b2:f2:dc:8a:e3:10:21:00:67:35:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 8 16:17:02 2025 GMT
Not After : Apr 7 16:22:02 2026 GMT
Subject: CN=4C9B5187A9B5B126CB36244EFA34471B80FC51B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:39:58:6e:93:9d:c6:4b:84:4f:40:90:83:
66:5a:7b:e2:74:cd:df:fe:9f:23:4a:42:84:10:d8:
1f:5d:8f:a4:22:53:25:77:7b:46:c7:d5:e5:75:09:
68:2c:47:33:30:5c:31:fc:09:78:6a:2b:6d:71:e3:
1b:07:0a:f4:d4:64:d5:32:5a:ec:2d:a6:87:4b:41:
5c:f0:68:36:04:22:d0:82:e7:20:b9:9b:10:a6:8d:
5c:3a:b0:34:28:ae:02:b1:d5:9d:f2:aa:96:76:c3:
fd:d5:98:22:75:6c:45:2a:f3:81:74:3a:1e:d1:8f:
d6:00:70:bd:3f:3b:32:f1:26:8a:04:f8:b6:ba:be:
50:1d:77:82:86:c1:4a:50:4b:1d:13:c5:6b:08:0e:
2b:ce:3e:6d:3f:83:2f:d6:94:e9:5e:f1:f3:0d:92:
f3:54:c3:d8:dd:78:7b:93:17:60:ec:1d:95:53:0d:
da:8a:69:c3:70:4b:69:7c:01:e8:a4:94:83:5c:33:
a3:8b:4f:27:9e:44:c4:2e:61:de:1f:29:d1:15:c9:
4b:c9:14:7b:8f:d9:eb:9c:68:d3:fa:c8:b9:89:55:
02:e0:48:29:58:22:de:99:e6:8a:9e:b6:0f:80:ea:
e2:b7:ce:d5:c4:88:96:12:6e:8d:85:77:41:04:81:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9B:51:87:A9:B5:B1:26:CB:36:24:4E:FA:34:47:1B:80:FC:51:B9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.160.0/24
46.203.164.0/24
92.112.32.0/20
92.112.157.0/24
92.113.56.0/21
95.135.38.0/24
95.135.85.0/24
95.135.127.0/24
95.135.138.0/24
95.135.180.0/24
95.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
16:59:d0:4d:10:26:fa:09:c3:86:a3:f8:39:97:69:5d:93:70:
43:52:50:41:58:ae:b1:d8:62:1e:15:fe:bf:15:cc:f4:0f:cc:
ab:88:26:59:70:17:ac:f0:ee:37:95:cc:44:8d:62:03:32:02:
81:5b:19:24:1a:67:bf:ae:93:de:4c:b5:af:db:7b:1c:85:4b:
0a:61:b1:54:86:46:8b:44:5b:99:78:e6:a9:50:c1:44:80:09:
cd:5a:35:36:86:ad:fe:a4:75:9e:ad:cc:29:12:23:ca:24:38:
11:86:3c:fc:77:f4:d9:18:49:a3:1f:1b:90:ee:47:cb:7c:25:
17:b9:80:28:5f:8f:8c:b4:87:59:4d:89:f6:9b:81:78:7a:f5:
31:e6:15:70:b0:28:53:88:87:f5:11:a1:8a:85:99:b4:77:6c:
b6:ea:c3:de:cd:be:49:9d:98:e1:e2:55:83:d5:f4:f1:7b:82:
93:05:c1:62:de:40:f9:e9:96:c8:fa:02:18:2e:17:e0:f0:60:
9f:a2:bd:8e:04:4d:03:cc:af:46:45:39:2e:6f:c9:b1:89:05:
42:02:6a:37:e5:24:c8:22:46:4a:cc:ab:cf:87:53:ba:aa:81:
d4:0a:30:5c:b9:22:7f:aa:d3:d8:32:18:8f:46:ad:57:65:ad:
9c:5d:7d:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net