Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: 6w7Q/9vA616I8GsN0cRIXAzGzq/bzuokJ8nAkO+Y59s=
Subject key identifier: 33:08:AD:9F:9E:2F:8F:ED:3E:F0:EC:5B:FA:4C:35:ED:B9:E1:69:98
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5E259464C5C3208338B9DC6BEB4648C1E15B2CF2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
Signing time: Thu 31 Oct 2024 10:04:13 +0000
ROA not before: Thu 31 Oct 2024 09:59:13 +0000
ROA not after: Thu 30 Oct 2025 10:04:13 +0000
asID: 47583
IP address blocks: 46.202.88.0/21 maxlen: 24
46.202.128.0/21 maxlen: 24
46.202.136.0/21 maxlen: 24
46.202.144.0/21 maxlen: 24
46.202.152.0/21 maxlen: 24
46.202.160.0/21 maxlen: 24
46.202.168.0/21 maxlen: 24
46.202.176.0/21 maxlen: 24
46.202.184.0/21 maxlen: 24
46.202.192.0/21 maxlen: 24
92.112.176.0/21 maxlen: 24
92.112.184.0/21 maxlen: 24
92.112.192.0/21 maxlen: 24
92.113.16.0/21 maxlen: 24
92.113.24.0/21 maxlen: 24
92.113.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:25:94:64:c5:c3:20:83:38:b9:dc:6b:eb:46:48:c1:e1:5b:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 31 09:59:13 2024 GMT
Not After : Oct 30 10:04:13 2025 GMT
Subject: CN=3308AD9F9E2F8FED3EF0EC5BFA4C35EDB9E16998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:c2:28:e5:90:f6:51:e9:0c:66:8d:e9:a7:
97:de:51:c6:e9:88:ab:95:f5:f8:3c:30:95:f1:4d:
7c:a4:d0:fc:20:3e:d3:8a:df:f8:b1:1f:dd:5b:ac:
7e:38:b2:99:32:4c:12:70:0d:00:32:9d:1b:ec:ca:
33:c2:2a:ce:ae:92:22:c3:0c:89:bc:ab:06:f8:e8:
6a:00:f6:32:3a:c6:76:3b:1e:29:a1:8b:2d:40:dd:
f9:21:a7:f2:fd:80:16:8d:68:cd:d0:0c:bc:d6:53:
29:0b:43:26:6e:f1:12:ef:cb:39:52:34:be:f3:5a:
9c:29:eb:05:a7:38:25:c4:0b:05:eb:1c:0e:d9:d3:
d8:39:47:44:0b:81:9a:7a:47:86:85:1d:e9:07:51:
86:4e:c3:65:a3:2e:2c:b5:ee:f9:aa:00:c3:f1:ce:
d4:c9:44:d5:82:79:cf:64:11:a0:dd:61:a0:92:97:
9c:61:18:e2:29:3b:86:49:78:13:cf:25:fd:e5:7f:
36:c1:4c:72:85:80:55:42:de:57:c4:8e:e7:a8:5f:
cd:21:e2:fb:f0:29:00:1b:d3:cb:fb:27:5c:35:3d:
75:e9:bf:70:21:9c:a9:7b:9f:83:5e:05:95:8e:c4:
44:61:29:80:09:4f:58:d3:fb:93:dc:da:ee:25:f2:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:AD:9F:9E:2F:8F:ED:3E:F0:EC:5B:FA:4C:35:ED:B9:E1:69:98
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.88.0/21
46.202.128.0-46.202.199.255
92.112.176.0-92.112.199.255
92.113.16.0-92.113.39.255
Signature Algorithm: sha256WithRSAEncryption
49:45:e4:90:24:6b:fc:44:fa:6d:e1:57:e0:8e:81:5d:00:f1:
b3:92:07:2d:13:be:34:f5:bf:af:32:fe:c9:dc:01:ee:44:d3:
0a:ca:5d:81:db:5d:9e:b5:b7:34:29:af:6d:d4:b2:93:e9:2d:
4f:af:bb:e4:96:95:b7:95:d3:f5:57:46:5d:39:0d:2e:8c:86:
85:64:1f:7a:f5:96:fd:3e:f3:5a:aa:b7:36:3b:d2:2a:e0:bb:
e3:1c:7e:0c:16:66:d0:95:f8:c2:02:c6:e4:6b:fb:ed:79:b7:
d4:98:4e:72:bf:ff:3a:82:76:ec:99:4a:57:6c:71:01:a5:61:
0c:29:aa:3e:c0:a3:5e:de:ee:e0:cd:d5:7a:02:05:a7:33:82:
ba:0e:12:d8:8e:b9:32:74:e8:21:15:bb:48:ef:8f:8b:e1:b8:
ba:d7:3e:fa:15:fd:29:a7:70:c0:a8:f1:a0:49:74:40:f7:ac:
09:fc:53:88:3b:99:b5:70:b3:4d:52:51:92:7d:4e:19:e7:b4:
65:20:fe:77:40:eb:a7:4c:84:82:eb:f9:90:cd:e1:86:b6:9e:
bd:a0:29:0d:bd:c3:af:10:af:2d:ba:27:5f:42:9e:dc:26:5c:
56:43:91:2e:a0:b9:bc:d7:f0:1a:3b:f1:fc:2f:6a:ae:89:fe:
9a:02:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:01 2024 by rpki-client on console-ams.rpki-client.org