Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: KR1+x42AAwrjmLlrHtMGDrO5HaO9sB6BVAw6S1THhv0=
Subject key identifier: EB:93:A8:F8:13:39:AE:07:33:6C:AD:C3:1A:94:DA:67:A9:0A:0D:77
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 10E80B2E7879326A0C37579CAF3A0AD6801EEB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
Signing time: Wed 27 Nov 2024 12:50:01 +0000
ROA not before: Wed 27 Nov 2024 12:45:01 +0000
ROA not after: Wed 26 Nov 2025 12:50:01 +0000
asID: 50304
IP address blocks: 46.202.251.0/24 maxlen: 24
46.203.12.0/24 maxlen: 24
46.203.63.0/24 maxlen: 24
46.203.85.0/24 maxlen: 24
46.203.127.0/24 maxlen: 24
46.203.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e8:0b:2e:78:79:32:6a:0c:37:57:9c:af:3a:0a:d6:80:1e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 27 12:45:01 2024 GMT
Not After : Nov 26 12:50:01 2025 GMT
Subject: CN=EB93A8F81339AE07336CADC31A94DA67A90A0D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:77:26:d3:78:9e:43:80:69:b4:16:1d:1b:
05:15:b9:5d:fa:54:17:7e:9f:f1:0f:c9:46:6e:57:
a6:b0:2a:12:1c:8e:f1:c9:c8:38:87:41:a9:f4:44:
cd:67:57:ed:01:af:e7:77:3d:b9:c5:9f:e7:a6:ce:
e2:3a:9e:a9:f1:94:4a:2f:f5:de:fd:01:70:6c:80:
67:b6:d7:1c:ff:06:d5:d4:b5:df:a5:37:f4:5a:75:
51:b2:94:63:4f:0a:d2:82:f6:b1:7b:01:f9:a4:51:
ed:7c:4e:d1:f6:70:8e:13:5f:e4:59:0a:f3:73:5c:
ce:60:42:68:a4:79:1f:8d:ed:f3:f0:df:8a:e6:af:
9c:dc:0e:e3:ff:f6:5a:57:2d:68:ce:55:38:80:7d:
ae:61:0a:bd:69:15:31:41:33:99:87:8d:db:93:1f:
73:e4:df:4f:2d:42:8a:ed:ef:21:e1:56:89:b1:32:
27:91:bd:f6:3f:2e:17:68:69:a9:a2:d2:20:29:c6:
10:28:72:01:14:da:53:70:30:66:f9:d1:b6:53:b8:
f2:c7:01:b2:2e:a6:5d:39:9f:6a:63:ed:30:10:39:
6f:fa:e7:cb:bf:06:e6:5f:3a:3f:76:38:6e:51:2a:
76:5f:ee:0b:44:e0:03:f4:a2:ac:39:22:8f:52:de:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:A8:F8:13:39:AE:07:33:6C:AD:C3:1A:94:DA:67:A9:0A:0D:77
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.251.0/24
46.203.12.0/24
46.203.63.0/24
46.203.85.0/24
46.203.127.0/24
46.203.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ae:c2:a4:47:fe:43:e1:2e:7b:1f:3a:5d:02:9c:81:fb:41:
e9:ce:d1:ca:53:62:2b:b3:4e:22:ed:be:5c:cc:c8:e2:93:6b:
e2:f2:8f:b0:ea:cb:63:eb:64:54:79:99:fc:5d:fe:cd:8d:87:
47:62:19:a2:8b:9f:f6:a3:b7:82:63:d6:8d:5c:5e:1b:8a:60:
78:9b:e5:17:e6:39:52:5d:21:84:91:d1:b6:e1:45:37:19:f8:
43:27:5d:1a:7f:09:9c:56:53:82:a2:06:7c:ad:ed:cb:0f:49:
d4:53:4a:45:e0:4c:96:6f:7f:89:c9:c0:6d:f4:9b:24:a0:f2:
a8:de:57:33:03:7e:b5:ee:25:33:d5:1c:b0:f7:3e:e0:eb:c8:
d2:4a:ef:b7:c7:99:ef:8e:61:9b:6d:d5:c6:6d:5d:9e:2e:47:
ac:39:68:36:58:31:ff:b0:76:7c:05:58:7d:21:7c:f7:6c:a1:
00:63:25:f4:28:f8:76:e5:0c:31:9f:59:c9:6f:10:31:c1:e8:
9b:3b:0d:6c:d3:6d:bb:c7:97:38:90:2e:b4:3d:2e:2b:ca:f9:
5c:ab:15:11:57:0c:bd:85:67:44:70:2e:40:b7:c7:16:74:fc:
08:b6:84:f2:10:c3:be:b7:4a:ba:fe:2c:4c:d5:88:88:56:28:
a8:e5:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:00:45 2025 by rpki-client