Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: 8l6hZDfOna8jwAV9yryG3WGoZKTuBJXJG1djq6HBP/g=
Subject key identifier: F9:DF:1C:9F:41:19:EB:75:FF:D6:7F:46:D4:1B:84:49:A8:6F:AF:2A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 32A1E547164C7365B70E27D59844B9A72C84FD70
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
Signing time: Tue 15 Apr 2025 23:19:09 +0000
ROA not before: Tue 15 Apr 2025 23:14:09 +0000
ROA not after: Tue 14 Apr 2026 23:19:09 +0000
asID: 36530
IP address blocks: 46.203.98.0/24 maxlen: 24
46.203.203.0/24 maxlen: 24
92.113.106.0/23 maxlen: 24
92.113.112.0/23 maxlen: 24
92.113.124.0/23 maxlen: 24
92.113.136.0/23 maxlen: 24
92.113.142.0/23 maxlen: 24
95.135.83.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a1:e5:47:16:4c:73:65:b7:0e:27:d5:98:44:b9:a7:2c:84:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 15 23:14:09 2025 GMT
Not After : Apr 14 23:19:09 2026 GMT
Subject: CN=F9DF1C9F4119EB75FFD67F46D41B8449A86FAF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:3d:3c:75:a2:16:0e:ef:5e:cd:c8:60:62:
a4:63:80:59:4d:d1:e8:b6:e6:b8:77:98:cc:b9:e9:
16:ee:0b:35:99:2a:78:bf:4e:25:79:43:4f:a6:1a:
bd:95:9f:51:ba:de:0f:98:c5:46:d4:9f:ff:2a:be:
07:73:56:7b:c2:35:16:2b:36:49:8e:7c:ae:e9:eb:
a2:15:16:7f:cb:1c:16:c2:a0:9f:4c:fd:31:57:2a:
51:c2:48:92:a7:58:2c:f3:c4:e1:81:29:f9:d2:06:
89:9c:e5:49:31:e5:e5:bc:8b:2e:84:ea:37:ab:e8:
e4:ba:58:3e:6f:2b:e4:bf:50:22:02:79:15:0c:5e:
e5:79:3e:4a:d4:d9:af:d5:67:a3:ae:08:cd:b4:07:
6b:aa:aa:d6:5a:0a:2a:34:54:37:c1:d5:bc:c5:ee:
5e:ab:e0:ee:46:72:9d:51:fc:19:f1:9e:66:d3:bd:
9e:c3:09:a5:c4:c8:a0:c1:fa:9d:3f:2a:c7:03:01:
c0:62:4e:4d:39:24:a9:f9:42:61:87:a1:86:0c:97:
f1:7e:4d:c6:99:0e:9b:ab:b5:cf:4f:ac:c6:30:f6:
b2:13:c8:b5:01:64:a9:a8:9f:fe:d2:21:dd:51:b6:
f0:0d:da:7e:c8:21:a1:d2:87:c7:3a:60:e1:3f:5f:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:1C:9F:41:19:EB:75:FF:D6:7F:46:D4:1B:84:49:A8:6F:AF:2A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.98.0/24
46.203.203.0/24
92.113.106.0/23
92.113.112.0/23
92.113.124.0/23
92.113.136.0/23
92.113.142.0/23
95.135.83.0/24
95.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:5e:72:09:ca:87:1c:a2:93:5a:b4:e4:83:45:8b:62:85:47:
4f:c2:60:6b:4c:69:23:c2:d4:f5:b7:1b:6b:e2:c2:7f:bf:36:
15:fa:20:4c:ff:10:f3:86:e4:34:b7:df:49:58:f8:89:8d:e3:
ec:04:c0:16:dd:d4:2a:8f:ad:71:1c:4c:97:67:d8:c5:60:db:
d5:50:e1:11:5c:1b:c6:e6:3c:9a:f4:54:7b:51:99:d8:dc:3f:
d6:63:eb:ec:27:2c:59:af:fb:e9:0f:9f:47:60:9c:1b:3d:38:
ce:c2:7a:8d:92:4c:f7:60:a3:7f:c1:28:42:09:23:23:a0:f3:
bf:b5:30:63:bc:d8:3b:9e:97:c8:7f:8b:b4:ca:b5:f6:fc:96:
80:bd:88:57:33:da:f0:4f:59:b7:2c:01:ac:32:4c:0f:7f:8a:
25:98:22:b5:f2:69:ac:0f:25:a6:a7:8f:e4:3c:53:98:38:98:
a6:8f:5e:ba:d6:f9:04:a0:87:fb:b3:73:a6:f5:de:a6:76:49:
b5:13:a3:94:6c:d3:08:c8:54:bd:e0:36:8b:93:e6:97:41:6f:
0f:de:e9:60:04:aa:bb:fe:a5:16:a7:d1:2f:e9:f7:3f:81:f9:
60:fd:c8:4a:c5:cd:d2:c5:8d:90:57:03:3d:a2:e8:12:dc:be:
1e:3d:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:31 2025 by rpki-client