Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: SSKH3BWNCsuC3Vk42Y6d73wnXAfrtHgZC+HythuvW2w=
Subject key identifier: E8:7D:E7:E1:C6:49:09:AE:20:F0:31:7F:03:B1:2A:F4:DB:98:99:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45319CDF53A4C8A18F629859418674EFD0CE777D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
Signing time: Fri 14 Mar 2025 19:28:11 +0000
ROA not before: Fri 14 Mar 2025 19:23:11 +0000
ROA not after: Fri 13 Mar 2026 19:28:11 +0000
asID: 55201
IP address blocks: 96.62.37.0/24 maxlen: 24
96.62.45.0/24 maxlen: 24
96.62.47.0/24 maxlen: 24
96.62.48.0/23 maxlen: 24
96.62.50.0/23 maxlen: 24
96.62.52.0/23 maxlen: 24
96.62.54.0/24 maxlen: 24
96.62.55.0/24 maxlen: 24
96.62.56.0/24 maxlen: 24
96.62.57.0/24 maxlen: 24
96.62.58.0/24 maxlen: 24
96.62.60.0/23 maxlen: 24
96.62.62.0/23 maxlen: 24
96.62.79.0/24 maxlen: 24
96.62.80.0/23 maxlen: 24
96.62.82.0/23 maxlen: 24
96.62.85.0/24 maxlen: 24
96.62.86.0/23 maxlen: 24
96.62.88.0/24 maxlen: 24
96.62.90.0/23 maxlen: 24
96.62.92.0/23 maxlen: 24
96.62.94.0/23 maxlen: 24
96.62.98.0/23 maxlen: 24
96.62.135.0/24 maxlen: 24
96.62.149.0/24 maxlen: 24
96.62.150.0/24 maxlen: 24
96.62.151.0/24 maxlen: 24
148.135.216.0/23 maxlen: 24
148.135.218.0/23 maxlen: 24
148.135.224.0/23 maxlen: 24
148.135.226.0/23 maxlen: 24
148.135.232.0/23 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
148.135.242.0/23 maxlen: 24
148.135.248.0/23 maxlen: 24
148.135.250.0/23 maxlen: 24
150.241.146.0/23 maxlen: 24
150.241.148.0/23 maxlen: 24
150.241.150.0/23 maxlen: 24
150.241.152.0/23 maxlen: 24
150.241.154.0/23 maxlen: 24
150.241.156.0/23 maxlen: 24
150.241.158.0/23 maxlen: 24
150.241.160.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
150.241.164.0/23 maxlen: 24
150.241.166.0/23 maxlen: 24
150.241.168.0/23 maxlen: 24
150.241.170.0/23 maxlen: 24
150.241.172.0/23 maxlen: 24
150.241.176.0/23 maxlen: 24
150.241.178.0/23 maxlen: 24
150.241.180.0/23 maxlen: 24
150.241.182.0/23 maxlen: 24
150.241.184.0/23 maxlen: 24
150.241.186.0/23 maxlen: 24
150.241.188.0/23 maxlen: 24
150.241.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:31:9c:df:53:a4:c8:a1:8f:62:98:59:41:86:74:ef:d0:ce:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 19:23:11 2025 GMT
Not After : Mar 13 19:28:11 2026 GMT
Subject: CN=E87DE7E1C64909AE20F0317F03B12AF4DB989916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:fd:da:30:c4:fe:2d:cf:80:5b:06:87:99:
e1:af:d3:49:6e:96:57:86:43:54:7e:cd:1e:28:c5:
7d:0d:59:f8:d7:0d:ad:83:9f:3f:0c:63:d8:a7:cf:
90:a6:f5:3b:7d:9a:d2:2e:34:e5:84:b2:30:0f:0d:
95:7e:79:26:e8:0a:d8:4b:ba:71:36:16:06:b5:e5:
7a:44:31:51:cc:f7:b0:10:5a:01:11:dd:38:7c:a6:
1a:85:13:74:c6:96:e2:35:6f:17:10:06:e9:d3:15:
f9:43:8e:d5:ed:bf:ce:b3:81:09:d8:2e:88:fe:24:
3b:fe:72:70:f0:e4:9b:0b:ca:4b:12:fa:ff:9d:9a:
39:31:60:95:22:17:64:fd:74:72:1a:cb:46:d1:b2:
77:5d:7f:13:57:66:a8:3d:81:a0:91:71:15:dd:d6:
19:56:93:2d:8d:4b:3b:d1:df:f3:a1:43:bb:8c:60:
6c:c9:66:b5:24:6b:88:9a:4a:36:99:a8:7b:a7:02:
5c:3e:cc:9e:a0:f2:35:b3:f5:72:34:08:35:81:01:
ee:c4:22:2a:fd:31:45:d7:c8:c5:93:1c:d1:22:cb:
15:14:32:e2:1b:cd:da:be:b8:50:9c:79:85:ba:30:
c6:ce:cd:d5:ba:17:54:84:d9:b8:46:9a:a3:8e:ca:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:E7:E1:C6:49:09:AE:20:F0:31:7F:03:B1:2A:F4:DB:98:99:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.37.0/24
96.62.45.0/24
96.62.47.0-96.62.58.255
96.62.60.0/22
96.62.79.0-96.62.83.255
96.62.85.0-96.62.88.255
96.62.90.0-96.62.95.255
96.62.98.0/23
96.62.135.0/24
96.62.149.0-96.62.151.255
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
150.241.146.0-150.241.173.255
150.241.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:29:4e:e9:ec:5a:f5:ac:93:03:2d:34:14:28:6b:01:ad:07:
7b:f5:29:10:92:b9:f5:26:50:47:84:10:81:e4:ff:71:ae:5c:
5c:06:a3:96:55:06:20:97:fc:77:16:15:d6:cf:d1:99:9d:27:
1c:73:38:01:ef:4b:ed:55:38:44:69:18:d4:5b:ac:a0:75:32:
f6:5b:aa:0e:9a:01:3c:80:79:c0:58:a0:59:be:d8:71:38:6c:
ee:44:e0:a0:02:0c:aa:ef:e3:59:26:56:2c:ce:d3:86:39:c8:
c9:66:95:69:a0:4d:7f:5f:d6:75:50:4f:08:8c:8a:ac:99:74:
cd:fb:ff:7f:8b:7d:0a:c8:14:ff:7c:2b:5f:81:06:83:be:5a:
91:5a:e8:60:c1:6e:07:2e:89:7c:1f:d2:5f:3e:eb:6f:8d:5a:
fb:87:95:bc:aa:c7:57:08:aa:35:04:a3:d7:ce:32:62:66:7e:
7e:e8:1d:98:db:7a:de:aa:b5:fb:25:34:84:49:d2:e8:9e:4d:
35:44:68:60:c0:58:d6:18:37:76:01:2c:08:23:0d:1a:55:d0:
d6:ee:82:92:8e:4e:cd:22:2f:a6:57:78:7d:e6:f7:b5:a2:d5:
8f:a9:e1:e0:b9:a3:4f:70:45:66:33:b2:f7:68:d4:95:5c:1f:
da:ae:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:53 2025 by rpki-client