Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: kTH8hjycouD5mUsO9c4038GCTTyALI51dM62zSCwjKw=
Subject key identifier: 77:62:8B:B5:ED:03:7B:A7:B4:7B:06:10:E0:6A:75:E5:9E:ED:EF:55
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2AF730FD9DF14B6B58CB3919A30D219A11C94124
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
Signing time: Wed 23 Apr 2025 12:07:21 +0000
ROA not before: Wed 23 Apr 2025 12:02:21 +0000
ROA not after: Wed 22 Apr 2026 12:07:21 +0000
asID: 5511
IP address blocks: 46.202.3.0/24 maxlen: 24
46.202.34.0/24 maxlen: 24
46.202.38.0/24 maxlen: 24
46.202.42.0/24 maxlen: 24
46.202.55.0/24 maxlen: 24
46.202.58.0/24 maxlen: 24
46.202.65.0/24 maxlen: 24
46.203.1.0/24 maxlen: 24
46.203.4.0/24 maxlen: 24
46.203.15.0/24 maxlen: 24
46.203.20.0/24 maxlen: 24
46.203.30.0/24 maxlen: 24
46.203.41.0/24 maxlen: 24
46.203.42.0/24 maxlen: 24
46.203.53.0/24 maxlen: 24
46.203.60.0/24 maxlen: 24
46.203.76.0/24 maxlen: 24
46.203.82.0/24 maxlen: 24
46.203.86.0/24 maxlen: 24
46.203.144.0/24 maxlen: 24
46.203.184.0/24 maxlen: 24
91.124.244.0/22 maxlen: 24
91.124.248.0/22 maxlen: 24
92.112.0.0/24 maxlen: 24
92.112.12.0/24 maxlen: 24
92.112.130.0/24 maxlen: 24
92.112.159.0/24 maxlen: 24
95.135.182.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f7:30:fd:9d:f1:4b:6b:58:cb:39:19:a3:0d:21:9a:11:c9:41:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 23 12:02:21 2025 GMT
Not After : Apr 22 12:07:21 2026 GMT
Subject: CN=77628BB5ED037BA7B47B0610E06A75E59EEDEF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:86:71:47:e8:e7:21:f7:5f:33:61:21:e2:
b6:25:91:68:2b:35:6f:6e:8a:2e:09:66:95:1d:a8:
6b:67:47:1d:54:cb:16:92:21:67:53:32:4d:20:f9:
a2:ad:08:06:39:1b:00:fc:02:e0:56:09:2b:b6:d0:
69:e8:42:0e:20:59:61:6d:37:09:c7:71:bf:b4:5c:
40:a5:00:b6:21:ba:05:88:10:4f:5d:68:4f:72:5a:
d5:cb:0b:18:51:22:0e:da:30:54:3d:38:c3:2b:e5:
8b:21:08:5c:05:81:e9:a7:b2:93:d3:d6:47:4f:6c:
b8:f0:b8:5c:5d:25:f8:1d:62:7b:3d:eb:91:d8:a1:
fd:bc:d9:0c:64:c0:6d:5b:94:f2:a6:e1:03:19:90:
80:20:23:29:9a:a6:af:7a:db:23:cf:c7:82:d5:db:
4f:e1:b2:41:d2:ec:fd:77:f5:15:cc:b1:72:d4:16:
13:61:2a:d2:3e:3b:eb:4f:70:0b:87:e1:7f:36:e5:
0b:3f:0c:e2:bf:e5:9b:1b:28:df:c4:a8:93:40:cd:
3c:1d:9c:b5:68:ad:1c:67:f7:11:22:18:e4:9c:1e:
e4:03:90:03:04:1c:3e:d2:9e:38:12:07:6c:8e:d7:
20:e2:cd:78:d5:62:72:06:cd:3f:da:ea:8b:ab:76:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:8B:B5:ED:03:7B:A7:B4:7B:06:10:E0:6A:75:E5:9E:ED:EF:55
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.3.0/24
46.202.34.0/24
46.202.38.0/24
46.202.42.0/24
46.202.55.0/24
46.202.58.0/24
46.202.65.0/24
46.203.1.0/24
46.203.4.0/24
46.203.15.0/24
46.203.20.0/24
46.203.30.0/24
46.203.41.0-46.203.42.255
46.203.53.0/24
46.203.60.0/24
46.203.76.0/24
46.203.82.0/24
46.203.86.0/24
46.203.144.0/24
46.203.184.0/24
91.124.244.0-91.124.251.255
92.112.0.0/24
92.112.12.0/24
92.112.130.0/24
92.112.159.0/24
95.135.182.0/23
Signature Algorithm: sha256WithRSAEncryption
81:43:a0:42:f0:cd:ca:ed:20:ff:70:f9:87:38:bf:32:1e:a9:
bb:62:57:eb:c4:09:76:d6:4f:c2:c1:75:75:94:9a:9e:db:3b:
60:f5:48:b4:45:80:98:91:af:47:77:f3:aa:2b:0d:ee:1e:cb:
6c:65:9f:3a:fd:e8:bd:90:71:a1:df:7a:ea:86:04:15:a1:de:
30:35:99:00:9e:33:34:65:4f:6f:bf:41:d5:ba:1d:bf:c3:2c:
b4:4d:7a:f9:3a:86:9b:41:47:77:b4:ff:d6:33:02:e2:6e:fa:
3a:e3:e0:6d:85:95:73:30:80:fd:0b:0f:77:19:0e:9a:cd:8d:
fc:73:cc:9f:d1:aa:64:fa:bc:5d:f6:12:a2:d7:40:ad:69:1e:
ad:91:ca:bf:be:55:39:3c:4e:17:81:f2:cf:03:cf:b1:97:db:
dc:6a:3f:fb:27:7a:1c:e0:28:bb:a4:9c:37:a1:dd:8d:e3:b9:
40:da:be:84:fd:86:08:ce:a0:d8:a1:66:da:14:31:8e:d9:16:
07:3c:d8:71:43:9c:9a:8e:3a:1a:d8:6b:af:c4:51:90:0a:84:
13:5b:79:63:d9:fb:c8:da:b1:d8:bc:b4:4e:c0:73:79:e7:74:
0b:8d:07:a7:0f:6f:fb:72:e1:fc:f9:4d:c0:7b:00:da:74:c8:
95:00:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:49 2025 by rpki-client