Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: Y8kb9AvA/Uiuw1BqqLn4AroU95qJhdgVlKA6m31nryU=
Subject key identifier: 5E:A0:D9:CF:13:47:C6:48:51:78:B3:7B:C0:6E:C1:B3:9F:2E:F7:8C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 10ED658B8E71DCCAF8270A3F633AD0EA22CB7A5A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
Signing time: Mon 20 Jan 2025 00:02:29 +0000
ROA not before: Sun 19 Jan 2025 23:57:29 +0000
ROA not after: Mon 19 Jan 2026 00:02:29 +0000
asID: 3356
IP address blocks: 46.202.16.0/22 maxlen: 24
46.202.24.0/22 maxlen: 24
46.202.35.0/24 maxlen: 24
46.202.39.0/24 maxlen: 24
46.202.40.0/24 maxlen: 24
46.202.104.0/22 maxlen: 24
46.202.112.0/22 maxlen: 24
46.202.120.0/22 maxlen: 24
46.203.24.0/22 maxlen: 24
46.203.48.0/22 maxlen: 24
46.203.68.0/22 maxlen: 24
46.203.112.0/24 maxlen: 24
46.203.153.0/24 maxlen: 24
46.203.187.0/24 maxlen: 24
46.203.197.0/24 maxlen: 24
46.203.200.0/24 maxlen: 24
46.203.205.0/24 maxlen: 24
91.124.139.0/24 maxlen: 24
91.124.201.0/24 maxlen: 24
91.124.220.0/24 maxlen: 24
91.124.238.0/24 maxlen: 24
92.112.1.0/24 maxlen: 24
92.112.4.0/24 maxlen: 24
92.112.14.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.112.147.0/24 maxlen: 24
92.113.156.0/24 maxlen: 24
92.113.157.0/24 maxlen: 24
92.113.163.0/24 maxlen: 24
92.113.164.0/24 maxlen: 24
92.113.165.0/24 maxlen: 24
92.113.168.0/24 maxlen: 24
92.113.225.0/24 maxlen: 24
92.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:65:8b:8e:71:dc:ca:f8:27:0a:3f:63:3a:d0:ea:22:cb:7a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 19 23:57:29 2025 GMT
Not After : Jan 19 00:02:29 2026 GMT
Subject: CN=5EA0D9CF1347C6485178B37BC06EC1B39F2EF78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:f9:3e:e2:69:5a:14:b5:f5:97:57:94:94:
e5:53:f6:40:43:f4:6a:fa:52:27:65:b9:8a:6c:a2:
80:e7:10:17:78:ea:75:c7:6e:7c:29:2d:77:25:9e:
e1:37:b4:ff:df:c6:d9:72:86:48:ed:42:55:84:0d:
8a:8f:b6:e9:40:ff:11:de:40:ef:96:ec:ed:98:25:
0d:a8:1a:ac:09:42:d4:48:ff:17:74:3f:c2:ac:7a:
24:13:42:5d:6b:cb:fb:e6:3f:cb:03:de:01:70:df:
7c:a8:b2:e4:90:85:54:fe:9f:8d:67:a4:65:a5:98:
30:d6:1d:6c:47:66:33:cc:2d:15:3d:ca:90:ca:ec:
f1:d8:d2:b9:70:26:15:87:d5:b5:a2:94:e7:b8:13:
ef:08:d1:2a:de:d5:93:43:b4:e7:5c:7c:46:d9:0b:
03:92:15:13:ca:2b:ca:09:18:c0:a3:ea:4a:dc:67:
b3:a7:34:28:8d:2e:48:71:d3:ea:fb:e4:51:09:14:
8c:3c:c9:c8:14:27:63:63:4a:53:46:21:6b:02:13:
3d:79:77:6f:04:25:65:0e:c9:e7:83:ed:60:3d:2d:
04:b4:1a:fb:e3:9d:9a:5b:b6:35:1c:f2:e2:da:f1:
50:b9:59:a2:31:2a:e6:66:48:dc:87:1a:eb:fb:0a:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:D9:CF:13:47:C6:48:51:78:B3:7B:C0:6E:C1:B3:9F:2E:F7:8C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.16.0/22
46.202.24.0/22
46.202.35.0/24
46.202.39.0-46.202.40.255
46.202.104.0/22
46.202.112.0/22
46.202.120.0/22
46.203.24.0/22
46.203.48.0/22
46.203.68.0/22
46.203.112.0/24
46.203.153.0/24
46.203.187.0/24
46.203.197.0/24
46.203.200.0/24
46.203.205.0/24
91.124.139.0/24
91.124.201.0/24
91.124.220.0/24
91.124.238.0/24
92.112.1.0/24
92.112.4.0/24
92.112.14.0/24
92.112.89.0/24
92.112.142.0/24
92.112.147.0/24
92.113.156.0/23
92.113.163.0-92.113.165.255
92.113.168.0/24
92.113.225.0-92.113.226.255
Signature Algorithm: sha256WithRSAEncryption
7d:48:50:54:65:92:35:82:1f:b3:fe:bc:07:38:96:a7:b4:02:
02:30:c9:ff:5d:3b:30:83:ee:40:1d:8e:b0:5d:c6:84:58:1a:
f5:0b:55:48:42:1e:f5:ba:97:c9:fe:3d:8b:5f:9b:92:9e:c3:
47:d5:1f:3f:81:b3:8f:d6:26:99:23:a0:c3:4d:2b:e2:8f:46:
f7:1f:eb:6f:5f:6a:74:e7:b4:dc:5a:73:3c:69:30:2e:55:9d:
5c:09:45:95:1f:c0:3c:ee:5d:08:ad:fb:3e:99:3c:30:48:c3:
cf:b3:b5:ca:3d:a3:93:65:69:05:87:3c:ba:49:05:0d:6b:1b:
9d:d8:65:2f:10:e6:60:11:a1:a5:8a:6f:d8:58:2c:21:cd:39:
d5:d9:9f:ac:a7:3b:0f:99:e3:c5:cd:cb:36:07:20:48:6a:50:
fc:94:1d:82:15:98:1d:23:96:a3:44:70:a0:0c:a3:80:0c:e6:
14:95:31:dc:6b:ff:14:21:f5:d2:5c:40:5d:1c:1d:6d:cf:dd:
64:da:0d:a4:90:0c:a8:1c:7b:e1:d6:0b:e7:1a:b1:d9:0c:8f:
02:30:72:b8:b9:17:c7:b1:9a:61:a2:ba:eb:0b:eb:ff:03:00:
c6:ed:ec:b2:96:6c:84:e9:8e:81:ad:d8:75:11:c7:3e:94:f3:
7f:f4:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:05 2025 by rpki-client