Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
File: AS38511.roa (raw, json)
Hash identifier: V7DSRdFvPPolW2PhomEmxwSTUmsHE2rHj14s1RjCWNs=
Subject key identifier: 09:F8:DD:95:3D:E4:CC:DF:62:D6:F3:D2:AB:EA:48:25:F0:83:EE:9F
Certificate issuer: /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial: 6F330DBA535D6259B7AF763407170BAD9C7D0666
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
Signing time: Fri 27 Sep 2024 18:51:59 +0000
ROA not before: Fri 27 Sep 2024 18:46:59 +0000
ROA not after: Fri 26 Sep 2025 18:51:59 +0000
asID: 38511
IP address blocks: 45.251.4.0/22 maxlen: 24
101.255.0.0/16 maxlen: 16
101.255.0.0/16 maxlen: 24
101.255.0.0/17 maxlen: 17
101.255.0.0/18 maxlen: 18
101.255.0.0/22 maxlen: 22
101.255.0.0/24 maxlen: 24
101.255.1.0/24 maxlen: 24
101.255.2.0/24 maxlen: 24
101.255.3.0/24 maxlen: 24
101.255.4.0/24 maxlen: 24
101.255.5.0/24 maxlen: 24
101.255.6.0/24 maxlen: 24
101.255.7.0/24 maxlen: 24
101.255.8.0/24 maxlen: 24
101.255.9.0/24 maxlen: 24
101.255.10.0/24 maxlen: 24
101.255.11.0/24 maxlen: 24
101.255.12.0/24 maxlen: 24
101.255.13.0/24 maxlen: 24
101.255.14.0/24 maxlen: 24
101.255.15.0/24 maxlen: 24
101.255.16.0/24 maxlen: 24
101.255.17.0/24 maxlen: 24
101.255.18.0/24 maxlen: 24
101.255.19.0/24 maxlen: 24
101.255.20.0/24 maxlen: 24
101.255.21.0/24 maxlen: 24
101.255.22.0/24 maxlen: 24
101.255.25.0/24 maxlen: 24
101.255.26.0/24 maxlen: 24
101.255.27.0/24 maxlen: 24
101.255.28.0/24 maxlen: 24
101.255.29.0/24 maxlen: 24
101.255.30.0/24 maxlen: 24
101.255.31.0/24 maxlen: 24
101.255.32.0/24 maxlen: 24
101.255.33.0/24 maxlen: 24
101.255.34.0/24 maxlen: 24
101.255.35.0/24 maxlen: 24
101.255.36.0/24 maxlen: 24
101.255.37.0/24 maxlen: 24
101.255.64.0/18 maxlen: 18
101.255.96.0/20 maxlen: 20
101.255.99.0/24 maxlen: 24
101.255.100.0/22 maxlen: 22
101.255.100.0/23 maxlen: 23
101.255.124.0/24 maxlen: 24
101.255.128.0/20 maxlen: 20
101.255.144.0/20 maxlen: 20
101.255.156.0/22 maxlen: 22
101.255.160.0/21 maxlen: 21
101.255.164.0/22 maxlen: 22
101.255.173.0/24 maxlen: 24
101.255.176.0/22 maxlen: 22
103.15.172.0/22 maxlen: 24
103.15.173.0/24 maxlen: 24
103.15.174.0/24 maxlen: 24
103.15.175.0/24 maxlen: 24
115.124.64.0/19 maxlen: 24
115.124.64.0/22 maxlen: 22
115.124.64.0/24 maxlen: 24
115.124.65.0/24 maxlen: 24
115.124.66.0/24 maxlen: 24
115.124.67.0/24 maxlen: 24
115.124.68.0/23 maxlen: 23
115.124.68.0/24 maxlen: 24
115.124.69.0/24 maxlen: 24
115.124.72.0/21 maxlen: 21
115.124.72.0/24 maxlen: 24
115.124.73.0/24 maxlen: 24
115.124.74.0/24 maxlen: 24
115.124.75.0/24 maxlen: 24
115.124.76.0/24 maxlen: 24
115.124.77.0/24 maxlen: 24
115.124.78.0/24 maxlen: 24
115.124.79.0/24 maxlen: 24
115.124.80.0/22 maxlen: 22
115.124.80.0/24 maxlen: 24
115.124.81.0/24 maxlen: 24
115.124.82.0/24 maxlen: 24
115.124.83.0/24 maxlen: 24
115.124.84.0/23 maxlen: 23
115.124.84.0/24 maxlen: 24
115.124.85.0/24 maxlen: 24
115.124.86.0/23 maxlen: 23
115.124.86.0/24 maxlen: 24
115.124.87.0/24 maxlen: 24
115.124.88.0/21 maxlen: 21
115.124.88.0/24 maxlen: 24
115.124.89.0/24 maxlen: 24
115.124.90.0/24 maxlen: 24
115.124.91.0/24 maxlen: 24
115.124.92.0/24 maxlen: 24
115.124.94.0/24 maxlen: 24
115.124.95.0/24 maxlen: 24
202.182.48.0/21 maxlen: 24
2404:cf00::/32 maxlen: 48
2404:cf00:efa::/48 maxlen: 48
2404:cf00:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 Nov 2024 01:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:33:0d:ba:53:5d:62:59:b7:af:76:34:07:17:0b:ad:9c:7d:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Validity
Not Before: Sep 27 18:46:59 2024 GMT
Not After : Sep 26 18:51:59 2025 GMT
Subject: CN=09F8DD953DE4CCDF62D6F3D2ABEA4825F083EE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:22:e4:cc:85:73:21:a1:4c:ed:8f:ca:1c:
31:d7:58:8f:7e:67:1e:5e:5d:ee:72:db:ff:8d:f6:
08:24:69:8a:59:2c:90:b6:a5:05:75:e3:01:b7:0f:
82:1f:f2:af:98:8f:71:d5:91:a8:b3:b2:f3:9d:9a:
a7:c4:f8:38:16:ca:18:68:14:37:b7:91:24:92:da:
74:95:ed:ec:aa:80:62:68:ec:ce:54:2f:1c:61:f5:
6e:09:5f:f8:fc:54:62:29:e7:a2:05:cd:90:6e:d7:
1a:4a:76:71:56:da:6a:96:c8:dc:0c:ea:f1:9d:8a:
9f:81:5e:fe:85:bc:4e:6b:3a:22:a1:64:ab:81:04:
b4:b3:bc:8f:2c:63:bb:7d:84:42:1e:9d:31:83:dd:
fd:99:df:b5:be:68:67:a8:a1:7c:1e:43:9d:48:30:
62:a3:95:6f:fc:2a:79:4a:0d:0a:26:8c:da:62:d8:
95:0c:45:ee:83:20:dc:17:86:15:70:db:90:75:d3:
46:9c:7f:be:90:47:f1:72:4e:47:c6:8d:e6:19:03:
eb:27:20:aa:1f:78:3e:32:1e:32:db:04:bf:56:49:
89:a7:b0:59:fb:67:35:68:53:00:84:20:91:dd:df:
2d:44:a7:f8:f8:55:74:cb:ea:26:85:cc:42:15:61:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:DD:95:3D:E4:CC:DF:62:D6:F3:D2:AB:EA:48:25:F0:83:EE:9F
X509v3 Authority Key Identifier:
keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS38511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.4.0/22
101.255.0.0/16
103.15.172.0/22
115.124.64.0/19
202.182.48.0/21
IPv6:
2404:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
69:18:a4:d0:77:4c:b3:17:81:a6:a0:ec:85:7d:e4:1a:55:fb:
d4:27:bb:20:29:7f:20:83:42:eb:7d:55:7c:25:43:2d:66:7f:
40:71:8f:42:0f:f2:27:b8:2d:71:05:69:ef:bb:24:f0:39:f2:
e6:6c:73:4c:f1:58:1c:c8:e3:86:24:58:23:1c:b4:38:73:e5:
d2:84:76:10:c1:bc:a7:d6:d5:c2:8d:d0:96:6a:84:0e:58:fe:
2a:83:ea:0c:de:e3:3a:3a:0c:f9:f6:68:b2:4e:99:51:5f:35:
04:26:5b:61:3d:04:be:b3:30:fc:dd:54:d0:6a:68:53:52:98:
1b:a7:48:fd:86:e3:b2:ee:dd:e4:a8:e5:7a:67:92:e0:f8:74:
28:56:dc:25:c2:a7:7d:ac:ed:42:22:ee:5d:13:c6:f3:b2:11:
74:c3:af:ae:70:fb:5e:7b:8e:1b:78:3a:24:0b:b3:94:c6:b9:
54:bf:07:95:4f:57:cf:9d:71:64:e6:e6:67:15:6b:0f:99:0c:
53:c1:33:12:5b:a2:91:61:a0:7d:7c:a7:ff:ef:fb:3d:45:ff:
4d:fe:e8:76:98:77:4b:cf:3d:9e:e3:f8:5c:30:4f:96:32:85:
dc:1b:a3:ac:14:47:1a:cb:87:2b:33:60:54:3b:33:63:c6:33:
7e:71:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org