Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
File: AS50867.roa (raw, json)
Hash identifier: FwkAfb2U3yT7dyuNP2uNdb5NSNQ8OiDLL+FozSFqdOc=
Subject key identifier: A9:45:E8:D7:B2:F3:3E:81:53:13:14:2E:F3:E6:3E:64:AD:D6:8B:02
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4B467211CD8E32EF14C22CF22985C452705D588F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
Signing time: Thu 13 Mar 2025 07:29:58 +0000
ROA not before: Thu 13 Mar 2025 07:24:58 +0000
ROA not after: Thu 12 Mar 2026 07:29:58 +0000
asID: 50867
IP address blocks: 46.203.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:46:72:11:cd:8e:32:ef:14:c2:2c:f2:29:85:c4:52:70:5d:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 13 07:24:58 2025 GMT
Not After : Mar 12 07:29:58 2026 GMT
Subject: CN=A945E8D7B2F33E815313142EF3E63E64ADD68B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:0a:3e:db:de:7f:ad:2d:2e:24:9d:5a:1d:
3a:e1:12:b7:49:28:82:df:a7:de:54:f5:b8:c3:08:
1e:e4:7c:55:79:01:c0:91:6e:4f:02:a9:43:9d:06:
d0:16:5c:e7:e8:78:45:b0:b6:9a:bf:3c:11:73:bb:
fe:3c:72:27:db:4f:ca:61:1e:dd:0b:2d:39:b8:85:
67:f2:49:b2:1a:ed:11:4c:32:db:cd:0f:2d:6f:66:
0a:ef:91:a6:72:5d:92:08:1e:34:4b:0f:1f:77:fc:
d6:62:b2:1f:7d:8f:94:51:43:21:1e:19:1e:f0:5a:
4f:83:35:53:3a:cd:5f:74:d6:69:65:32:ae:27:89:
bb:0b:f5:2b:87:be:14:a5:6d:4a:c7:80:28:82:04:
ef:0a:6f:d8:39:4c:d0:ef:77:54:7c:ef:9d:c5:4d:
df:ff:c4:9a:df:03:84:21:84:a8:07:e7:b1:11:89:
1c:43:5a:db:48:92:ee:29:8f:6c:89:b4:4a:4f:13:
f9:c8:8c:34:e8:14:0b:0f:63:b2:af:79:27:94:15:
c9:09:09:b3:cb:b6:85:c0:1c:6c:ca:0d:1c:f0:95:
c5:2e:82:94:28:5f:1d:c5:2c:df:4f:cf:b0:0d:ca:
35:5f:b7:4a:64:73:1e:bb:02:52:dc:0c:da:f0:07:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:45:E8:D7:B2:F3:3E:81:53:13:14:2E:F3:E6:3E:64:AD:D6:8B:02
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9c:66:ab:7a:9f:32:b3:c9:f4:e2:85:f7:3c:d5:e9:69:8f:
98:b7:98:46:d1:f8:7f:47:cc:f8:b9:ea:28:7f:7e:0d:cf:25:
38:a9:b4:3c:3b:71:7c:05:53:5e:fe:90:99:5a:b2:68:a4:04:
21:af:a4:dd:f8:55:c4:b4:ca:c7:1d:b0:b7:77:24:43:21:d2:
de:2b:36:8b:82:33:32:47:9c:4c:4f:a8:f3:6e:3b:a7:0d:21:
39:53:b7:a9:31:ac:52:6f:99:3b:cd:0b:a3:03:bc:17:f9:5f:
30:40:6e:7d:6c:38:14:dc:9e:fd:89:e3:76:ea:d8:b0:4d:50:
50:b1:c0:5e:17:b5:76:b8:3e:db:4a:1a:d9:0e:05:26:8f:ea:
1d:a5:02:bb:74:b5:15:fe:84:79:80:4f:bc:b2:f0:68:f0:3c:
cd:88:a9:95:3d:06:4c:17:af:d8:86:b5:f3:b6:22:c6:4a:b6:
f1:13:73:98:10:5e:b0:3d:9b:7a:28:2e:f6:b9:a8:65:d2:8a:
dc:fb:07:77:95:3b:f8:51:2d:7f:cc:b7:ca:91:ac:fe:fd:4f:
f0:a9:ed:2c:0c:06:d8:a2:56:24:ba:fc:cc:d8:1b:f6:51:3e:
70:65:d7:2c:09:3c:3a:a0:e3:b7:6e:b8:1f:07:6f:ce:32:6d:
7b:86:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:06 2025 by rpki-client