Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: rQ+2ej6b0KY/p8nxzvBevDgvCtIsDJsw2RtAf2xUT3I=
Subject key identifier: 34:04:7F:A2:21:DC:03:DA:77:97:BA:85:B7:61:70:EE:79:C3:5D:0E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 49CFD396CBF7C300A21A12DD9B738E6E2048B180
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
Signing time: Tue 28 Jan 2025 13:40:31 +0000
ROA not before: Tue 28 Jan 2025 13:35:31 +0000
ROA not after: Tue 27 Jan 2026 13:40:31 +0000
asID: 5511
IP address blocks: 46.202.3.0/24 maxlen: 24
46.202.34.0/24 maxlen: 24
46.202.38.0/24 maxlen: 24
46.202.42.0/24 maxlen: 24
46.202.55.0/24 maxlen: 24
46.202.58.0/24 maxlen: 24
46.202.65.0/24 maxlen: 24
46.203.1.0/24 maxlen: 24
46.203.4.0/24 maxlen: 24
46.203.15.0/24 maxlen: 24
46.203.20.0/24 maxlen: 24
46.203.30.0/24 maxlen: 24
46.203.41.0/24 maxlen: 24
46.203.42.0/24 maxlen: 24
46.203.53.0/24 maxlen: 24
46.203.60.0/24 maxlen: 24
46.203.76.0/24 maxlen: 24
46.203.82.0/24 maxlen: 24
46.203.86.0/24 maxlen: 24
46.203.144.0/24 maxlen: 24
46.203.184.0/24 maxlen: 24
91.124.244.0/22 maxlen: 24
91.124.248.0/22 maxlen: 24
92.112.0.0/24 maxlen: 24
92.112.12.0/24 maxlen: 24
92.112.130.0/24 maxlen: 24
92.112.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cf:d3:96:cb:f7:c3:00:a2:1a:12:dd:9b:73:8e:6e:20:48:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 28 13:35:31 2025 GMT
Not After : Jan 27 13:40:31 2026 GMT
Subject: CN=34047FA221DC03DA7797BA85B76170EE79C35D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:76:06:1a:96:84:da:da:6f:a1:ad:88:04:
4a:2e:2f:48:55:9a:5e:2b:b4:7b:cd:91:39:56:b8:
f8:78:95:72:90:45:34:de:aa:d7:69:19:a4:fa:2e:
e1:b4:b8:58:fe:3e:f4:3d:36:00:25:22:b6:b7:62:
c7:bb:09:d3:17:7c:5d:6e:b9:c0:07:96:1f:a4:6a:
ff:8a:4e:dd:9a:d0:fc:fe:f1:b1:a1:0b:12:3b:90:
e1:e1:cf:f7:71:f5:7b:f4:fa:76:1c:cb:aa:a7:c7:
27:02:d5:f2:10:74:66:3e:55:eb:ce:f7:e1:df:de:
03:0f:45:68:ce:19:be:2c:02:38:be:2f:0f:d7:cf:
38:3c:4a:9c:e3:d7:b6:e2:34:6e:ea:b6:19:c4:f8:
b1:b0:fd:95:fd:91:da:ce:79:f8:93:b4:4a:94:cf:
8b:31:a1:97:87:66:c8:09:32:d1:0c:5f:17:f1:32:
93:9a:da:a6:b2:a3:fb:7d:2c:aa:dd:90:20:9e:2e:
dc:4f:5c:1f:98:c6:d4:9d:60:8c:0c:99:db:50:a3:
00:d5:ec:83:cb:70:a2:dd:4e:ac:df:0d:48:3d:0f:
9a:22:e2:f4:d7:2f:cb:39:53:6a:52:b9:14:d8:95:
75:90:ac:68:fe:5d:77:7e:de:da:e1:ca:d8:9a:a9:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:7F:A2:21:DC:03:DA:77:97:BA:85:B7:61:70:EE:79:C3:5D:0E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.3.0/24
46.202.34.0/24
46.202.38.0/24
46.202.42.0/24
46.202.55.0/24
46.202.58.0/24
46.202.65.0/24
46.203.1.0/24
46.203.4.0/24
46.203.15.0/24
46.203.20.0/24
46.203.30.0/24
46.203.41.0-46.203.42.255
46.203.53.0/24
46.203.60.0/24
46.203.76.0/24
46.203.82.0/24
46.203.86.0/24
46.203.144.0/24
46.203.184.0/24
91.124.244.0-91.124.251.255
92.112.0.0/24
92.112.12.0/24
92.112.130.0/24
92.112.159.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ef:00:16:cb:81:4a:ed:e8:aa:14:49:fc:a9:58:22:01:52:
c8:d3:3a:79:24:4e:73:1e:8d:d5:b2:76:c8:d8:2f:2c:ad:7b:
f9:ea:77:d9:14:fd:9c:df:0c:10:b4:bd:51:4d:ed:98:15:f4:
ac:56:21:ee:6c:7d:54:f0:d2:1d:0d:82:7d:af:72:5e:de:60:
46:1d:9c:0c:c5:95:59:8b:ee:50:28:0f:ab:19:ad:34:9f:7e:
3b:cf:ed:93:58:b0:d7:91:07:dd:66:a4:30:44:8e:22:5c:49:
e9:c6:be:37:90:0a:8a:df:81:d5:4f:0e:96:fb:00:86:28:9e:
a9:d0:24:4b:5b:85:35:52:e7:69:e8:79:7f:fe:d6:cf:0c:22:
11:60:b2:6e:ec:5b:0b:2c:49:c5:dc:9c:a7:ea:91:33:87:c4:
67:48:1f:e7:b8:ac:79:72:12:69:85:98:02:d2:17:af:5e:04:
1e:70:fa:6f:a8:22:4c:21:6d:e6:02:a9:c9:1c:b4:d0:39:97:
89:eb:e6:3d:fe:49:84:e9:56:38:6d:1f:ca:19:7b:e1:2c:d4:
ff:a2:7e:18:89:d5:19:72:e1:03:a4:3c:c0:43:81:4d:9c:3d:
b1:64:e5:72:3d:e4:70:40:21:62:65:64:cc:27:08:37:1e:02:
14:93:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:45 2025 by rpki-client