Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
File: AS216050.roa (raw, json)
Hash identifier: MpgN9hNFmV8t6QPediQ37oxpgCe7vd/2Xo8Rowj+IiU=
Subject key identifier: 05:13:80:B2:25:3E:B5:51:86:4A:0A:32:5A:1E:F7:5C:EF:1A:4D:7D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2D32125B9A920CE8ADD7F0632271BD24BB00C405
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
Signing time: Sun 26 Jan 2025 12:38:59 +0000
ROA not before: Sun 26 Jan 2025 12:33:59 +0000
ROA not after: Sun 25 Jan 2026 12:38:59 +0000
asID: 216050
IP address blocks: 46.202.204.0/24 maxlen: 24
46.202.205.0/24 maxlen: 24
46.203.165.0/24 maxlen: 24
46.203.166.0/24 maxlen: 24
46.203.167.0/24 maxlen: 24
46.203.191.0/24 maxlen: 24
46.203.192.0/24 maxlen: 24
46.203.193.0/24 maxlen: 24
46.203.194.0/24 maxlen: 24
46.203.211.0/24 maxlen: 24
46.203.213.0/24 maxlen: 24
46.203.240.0/24 maxlen: 24
92.113.41.0/24 maxlen: 24
92.113.55.0/24 maxlen: 24
92.113.65.0/24 maxlen: 24
92.113.66.0/24 maxlen: 24
92.113.68.0/24 maxlen: 24
92.113.69.0/24 maxlen: 24
92.113.75.0/24 maxlen: 24
92.113.76.0/24 maxlen: 24
92.113.78.0/24 maxlen: 24
92.113.79.0/24 maxlen: 24
92.113.81.0/24 maxlen: 24
92.113.82.0/24 maxlen: 24
92.113.84.0/24 maxlen: 24
92.113.85.0/24 maxlen: 24
92.113.87.0/24 maxlen: 24
92.113.88.0/24 maxlen: 24
92.113.90.0/24 maxlen: 24
92.113.166.0/24 maxlen: 24
92.113.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:32:12:5b:9a:92:0c:e8:ad:d7:f0:63:22:71:bd:24:bb:00:c4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 26 12:33:59 2025 GMT
Not After : Jan 25 12:38:59 2026 GMT
Subject: CN=051380B2253EB551864A0A325A1EF75CEF1A4D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:ec:c7:b5:36:de:bf:a6:b2:86:8f:fb:54:
16:74:e4:4d:db:91:42:80:15:ec:38:06:d1:b1:2b:
8b:47:04:41:67:df:8b:6c:47:cb:ec:1e:44:78:24:
62:6b:79:3f:b7:d8:23:cb:bb:50:12:b1:21:7b:53:
58:a6:4e:8f:5a:38:3d:67:f3:00:73:8b:a3:82:a1:
07:37:6b:50:ba:41:cf:72:c1:97:2c:06:dc:7f:fe:
80:a2:78:1e:ca:e2:c4:84:6a:2a:2c:fe:c8:65:58:
47:cf:5e:a4:89:e6:05:24:6c:5a:46:2f:bd:a5:47:
3e:d1:0c:53:06:3e:30:cf:c6:53:f1:90:bd:25:81:
10:2b:d0:35:80:99:dc:26:a7:ff:77:4a:e9:9d:4e:
6d:ba:6b:f5:76:b5:49:7c:01:f0:2c:08:cf:05:72:
af:bd:6a:40:75:19:25:2f:74:4e:ad:14:88:d4:51:
19:f9:b0:4e:ed:89:04:30:2d:d2:bc:82:07:50:72:
30:19:95:3f:af:cf:70:b2:27:05:14:9e:41:46:3d:
0d:a8:16:11:09:3e:4e:75:97:25:ad:5e:03:0d:7a:
61:d5:75:84:d9:4d:1e:bf:2f:8f:8a:8f:21:b4:d7:
e1:c8:7f:da:37:bb:36:0e:48:65:60:b7:2a:45:4c:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:80:B2:25:3E:B5:51:86:4A:0A:32:5A:1E:F7:5C:EF:1A:4D:7D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.204.0/23
46.203.165.0-46.203.167.255
46.203.191.0-46.203.194.255
46.203.211.0/24
46.203.213.0/24
46.203.240.0/24
92.113.41.0/24
92.113.55.0/24
92.113.65.0-92.113.66.255
92.113.68.0/23
92.113.75.0-92.113.76.255
92.113.78.0/23
92.113.81.0-92.113.82.255
92.113.84.0/23
92.113.87.0-92.113.88.255
92.113.90.0/24
92.113.166.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:14:01:b4:04:16:f2:e9:c0:17:13:1c:7c:48:99:eb:ad:f7:
4a:7f:01:d5:75:b6:01:c3:04:92:8f:76:05:51:9d:6e:d7:a6:
fc:97:7c:fb:9a:bf:98:88:8c:89:39:11:d9:bc:fc:c1:97:0b:
dd:26:ed:27:92:9a:a9:fe:1d:48:15:dd:c4:3c:27:f3:0a:d2:
ce:70:de:02:11:98:e8:a5:93:31:2e:89:b2:6e:b6:19:66:dc:
c3:2e:16:e0:f0:ec:c5:8d:b7:ee:50:74:d9:f1:6c:1b:85:20:
4c:c3:14:c7:f1:25:cf:e4:76:63:81:ab:88:ab:9c:09:77:d5:
43:bb:5e:0a:c8:eb:d2:4f:8a:65:56:24:e2:c5:e1:3a:47:eb:
db:7c:16:46:df:cd:3f:10:0f:80:c2:68:be:6e:5a:38:e7:e8:
1c:57:02:6a:44:02:aa:14:2c:79:19:33:43:17:85:8d:88:65:
dd:f0:8d:0e:cb:fd:68:31:eb:09:9f:67:4d:d1:87:95:11:7c:
4b:86:b7:22:bd:48:0f:07:84:eb:1d:43:40:9d:f6:2b:33:2b:
54:f8:a0:94:b3:92:6f:58:ff:d2:1b:00:00:34:df:a2:8c:3b:
92:5b:c2:ec:9c:be:ee:15:fa:bf:38:0c:ef:15:7c:d8:cb:15:
a9:a6:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:37 2025 by rpki-client