Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58061.roa
File: AS58061.roa (raw, json)
Hash identifier: dRIv7osyMSdm5qnlg95w7d94dfVshxo99RfjBiLphCI=
Subject key identifier: 75:7B:56:09:3D:B2:F9:CB:F0:C7:F4:5F:51:F6:9B:F1:F9:6A:70:5E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 58341BA6F10B095EC04FF18AD1A4DBA8FDF45A22
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58061.roa
Signing time: Sun 16 Mar 2025 00:00:39 +0000
ROA not before: Sat 15 Mar 2025 23:55:39 +0000
ROA not after: Sun 15 Mar 2026 00:00:39 +0000
asID: 58061
IP address blocks: 91.124.18.0/24 maxlen: 24
91.124.35.0/24 maxlen: 24
91.124.49.0/24 maxlen: 24
91.124.54.0/24 maxlen: 24
91.124.60.0/24 maxlen: 24
91.124.81.0/24 maxlen: 24
91.124.128.0/24 maxlen: 24
91.124.147.0/24 maxlen: 24
91.124.148.0/24 maxlen: 24
91.124.173.0/24 maxlen: 24
91.124.186.0/24 maxlen: 24
91.124.200.0/24 maxlen: 24
91.124.236.0/24 maxlen: 24
91.124.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:34:1b:a6:f1:0b:09:5e:c0:4f:f1:8a:d1:a4:db:a8:fd:f4:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 15 23:55:39 2025 GMT
Not After : Mar 15 00:00:39 2026 GMT
Subject: CN=757B56093DB2F9CBF0C7F45F51F69BF1F96A705E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:d0:b0:3b:25:fe:d4:b2:59:bc:04:04:47:
e8:75:8e:44:44:14:db:6a:95:73:10:66:7e:9c:a4:
5a:96:e9:e3:e6:39:6b:eb:ae:1a:42:75:07:b7:48:
b3:bb:71:74:a3:e4:f7:84:e3:58:b1:89:17:14:56:
1c:5c:a4:0e:d5:18:51:c2:41:70:45:58:52:1e:12:
37:81:e8:36:d3:33:ef:49:5f:65:f2:17:58:a4:ec:
97:2d:ae:8c:41:fe:dd:ac:80:e1:77:89:64:d1:c2:
88:7c:f1:4b:a6:6b:ad:5a:e9:cf:f5:24:16:11:54:
20:24:3c:e3:36:5e:64:f5:30:da:a1:84:9f:70:54:
af:69:43:14:0c:94:4d:b9:75:43:16:16:a7:2c:98:
96:bc:d8:0a:86:a8:e7:75:87:85:c8:c1:c1:79:d1:
b8:36:83:5a:aa:37:51:2c:71:34:95:8b:75:b9:c4:
fe:6e:d1:16:75:ae:f0:eb:78:c4:ca:bd:31:a4:ba:
85:23:52:f7:83:5f:cc:d7:8e:68:71:2a:39:7e:d5:
c5:4f:73:51:d7:ea:03:9b:2c:48:4b:73:7e:93:ce:
05:c3:58:c8:9a:47:01:a4:02:48:88:c4:d0:14:47:
ef:9a:b1:d1:4f:0e:fe:9a:78:a3:24:14:93:cf:4a:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:56:09:3D:B2:F9:CB:F0:C7:F4:5F:51:F6:9B:F1:F9:6A:70:5E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.18.0/24
91.124.35.0/24
91.124.49.0/24
91.124.54.0/24
91.124.60.0/24
91.124.81.0/24
91.124.128.0/24
91.124.147.0-91.124.148.255
91.124.173.0/24
91.124.186.0/24
91.124.200.0/24
91.124.236.0/24
91.124.255.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e4:69:d6:40:d5:ea:54:70:8f:7c:f7:27:9a:33:83:07:89:
43:33:2b:b5:6d:3b:8a:46:4b:a6:c8:a3:c3:db:62:23:36:83:
bf:d6:aa:32:51:ee:00:5e:28:20:c6:94:41:f6:62:87:3d:17:
f5:9f:23:c0:c7:03:3e:5a:57:9c:5f:48:4d:fd:2a:30:ac:40:
20:0f:da:06:a2:5c:91:0e:fa:f0:6b:93:f4:40:0a:6f:bf:bf:
04:48:ab:d3:86:40:08:2f:8f:d7:6c:f9:01:ec:bb:4a:f0:50:
a1:8c:7a:97:fa:7c:6e:54:1f:3f:4a:cc:c4:97:12:8a:55:c0:
ea:2f:8f:d4:a0:b5:2f:36:94:02:01:38:c3:95:2a:5a:c1:b4:
3c:16:b1:1a:a5:8a:6e:90:5e:f0:6e:91:5a:13:74:cb:2b:46:
7b:60:70:69:9e:c6:ba:d2:3c:7c:3f:98:52:0e:51:e4:1d:ef:
30:1e:d2:9d:67:d2:48:25:c5:10:55:6e:79:ff:56:30:7f:97:
6b:5a:78:c4:b6:fc:92:48:16:fc:af:75:fd:54:f3:88:db:89:
27:00:bb:fd:f2:c4:c3:0d:cd:d4:21:c2:7e:e1:44:41:0d:14:
4c:7e:a9:69:35:1d:ac:cc:83:b8:41:5f:ac:60:fd:43:e1:aa:
15:65:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net