Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: hFbV6TigyHb/th8XAz2nU/5ZU0BTGzYiT86+FogFx2E=
Subject key identifier: 4F:D5:C0:13:CE:FC:8A:EC:25:96:5B:98:5C:A4:90:12:9D:65:E9:76
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0D548A7E2F37654AB4AE2B590C0AEE854D31AD80
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
Signing time: Mon 03 Mar 2025 09:59:06 +0000
ROA not before: Mon 03 Mar 2025 09:54:06 +0000
ROA not after: Mon 02 Mar 2026 09:59:06 +0000
asID: 48266
IP address blocks: 46.202.0.0/24 maxlen: 24
46.202.39.0/24 maxlen: 24
91.124.6.0/24 maxlen: 24
91.124.119.0/24 maxlen: 24
91.124.120.0/24 maxlen: 24
91.124.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:54:8a:7e:2f:37:65:4a:b4:ae:2b:59:0c:0a:ee:85:4d:31:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 3 09:54:06 2025 GMT
Not After : Mar 2 09:59:06 2026 GMT
Subject: CN=4FD5C013CEFC8AEC25965B985CA490129D65E976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:2c:fe:aa:c5:84:ab:d7:d7:4a:0c:c2:98:
4a:4b:af:08:a8:73:5f:cf:46:61:7f:0c:d4:2d:ef:
93:e7:e1:ca:7e:c5:53:72:ec:98:1f:3b:12:b2:50:
76:b5:9c:39:e4:ea:13:8c:9e:e4:b5:ed:7a:cc:26:
8b:68:e4:67:b1:b3:04:04:c5:5f:90:97:1a:58:d8:
09:f2:dd:db:5e:37:9e:08:76:ef:ce:92:07:08:6b:
db:c6:89:6f:e8:6b:db:ab:67:3c:1d:49:fb:42:fa:
08:dc:00:81:2b:1f:c4:17:fc:44:c3:9b:3f:91:34:
a1:5c:31:62:d8:5b:4d:5c:7a:8d:ee:16:58:aa:a9:
c2:e9:fd:ce:bb:08:ac:b0:d1:37:e9:e6:7e:cb:16:
9b:dd:6f:32:8d:a7:a9:05:87:05:8e:cc:d1:ff:6e:
bb:17:bf:d2:65:eb:7e:0d:b7:a7:3c:4a:0b:ac:56:
72:a7:2c:1a:8f:c4:c4:29:c1:f0:2d:5d:8b:39:8c:
bb:b2:41:40:6e:ad:b2:2d:b8:65:06:af:dd:b3:b6:
ca:66:d8:65:1c:b7:3b:33:16:92:a8:22:6b:7c:c6:
fb:86:f6:4a:1f:b9:13:ef:5a:20:7f:58:8b:90:cf:
4a:25:51:a0:84:c9:ae:a1:3b:b0:34:33:a6:2c:cb:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:C0:13:CE:FC:8A:EC:25:96:5B:98:5C:A4:90:12:9D:65:E9:76
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.0.0/24
46.202.39.0/24
91.124.6.0/24
91.124.119.0-91.124.121.255
Signature Algorithm: sha256WithRSAEncryption
83:63:6b:c6:d7:a7:8f:e1:3c:74:59:02:c0:02:9e:74:a0:fe:
ab:ee:39:f5:bc:2f:0f:67:40:60:3d:6e:8e:13:06:24:53:83:
f4:39:54:4a:5d:eb:6b:74:3f:5e:12:27:12:86:b1:65:0c:55:
71:be:9c:e0:78:c6:4a:5d:a8:85:cf:51:68:4a:80:95:c0:27:
6e:1d:24:c2:5e:ff:f1:eb:9d:ae:ee:ce:22:ae:2b:9e:8c:4b:
1c:7a:27:43:20:e0:a9:83:09:f5:db:08:06:2e:e4:81:49:30:
78:d7:f1:d2:74:04:1b:eb:6d:c3:ca:1c:fa:85:4a:27:71:1b:
8e:48:ff:60:c4:72:0e:a1:7a:07:1c:10:e2:29:a7:73:d8:91:
bb:7c:6c:ee:4e:12:f4:ae:dc:89:f2:a5:83:ae:55:91:5b:e6:
64:40:2f:ee:82:a1:f6:26:f0:62:8c:b8:f9:f6:f5:8e:7d:54:
12:fb:60:1b:83:f3:64:9d:35:24:4d:58:15:42:ea:e8:8b:ba:
7e:f9:7f:18:8e:5d:5c:a1:e7:89:78:2f:ea:0b:78:25:62:f0:
fa:c2:1b:30:9f:82:5e:10:86:db:da:4d:ec:5a:8e:1f:6c:cd:
1a:00:0a:ae:00:56:b4:d0:64:5e:5f:87:bc:bf:bc:4d:3a:13:
a2:4e:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:25 2025 by rpki-client