Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/AF4M9hVxELwlQ7qv4Gb09fNcfp0.roa
File: AF4M9hVxELwlQ7qv4Gb09fNcfp0.roa (raw, json)
Hash identifier: zFBmmy/vG5gfV4X2shh49n5DlvOknIYm0JeQmak9Z4U=
Subject key identifier: 00:5E:0C:F6:15:71:10:BC:25:43:BA:AF:E0:66:F4:F5:F3:5C:7E:9D
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018877D202D7EDA08659489303368A495537
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/AF4M9hVxELwlQ7qv4Gb09fNcfp0.roa
Signing time: Thu 01 Jun 2023 16:37:11 +0000
ROA not before: Thu 01 Jun 2023 16:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.62.0/24 maxlen: 24
45.149.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:d2:02:d7:ed:a0:86:59:48:93:03:36:8a:49:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jun 1 16:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=005e0cf6157110bc2543baafe066f4f5f35c7e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:b7:d9:70:5e:26:bf:81:4f:75:1e:3f:fa:
54:b8:ed:bc:86:d6:80:74:b5:c2:ec:f8:0c:0f:09:
56:52:87:e1:6a:bb:97:c7:2a:bf:ed:ac:19:8e:4e:
99:3e:44:2b:f7:b1:b3:4a:3d:0c:64:b4:3e:f8:78:
e1:1c:07:02:97:dd:34:73:b7:22:f5:1f:b8:28:91:
bb:8d:a2:8d:52:7d:bc:4c:ad:df:d8:b3:da:40:6d:
c0:e9:8f:ad:dd:1a:23:8e:a3:2d:20:4e:54:45:83:
39:4d:c5:31:fd:22:76:02:91:80:eb:37:23:fa:40:
fb:ee:9b:73:d9:ac:9f:1b:bb:70:07:00:23:08:3d:
5e:5d:77:27:32:e1:12:13:a0:35:4b:2f:80:92:05:
8b:84:f8:46:20:55:1d:29:aa:3a:c0:c0:28:dd:c2:
52:37:83:86:e5:c6:bd:ba:d5:55:dc:26:a9:ab:5b:
5d:72:24:2d:01:f6:10:ed:28:0b:56:ee:ec:cf:3d:
de:8a:e4:dc:d5:34:2f:fc:f1:cb:39:0d:cb:f6:bf:
c0:86:2f:cc:f0:e0:04:10:e1:57:4b:3f:2d:38:88:
c1:1d:f3:53:0e:b6:ea:22:bd:d9:fa:b7:96:4b:0a:
68:89:bb:e5:a9:2d:cf:a3:3b:ce:fe:d8:c4:56:51:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:0C:F6:15:71:10:BC:25:43:BA:AF:E0:66:F4:F5:F3:5C:7E:9D
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/AF4M9hVxELwlQ7qv4Gb09fNcfp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.61.0-45.149.62.255
Signature Algorithm: sha256WithRSAEncryption
15:e9:51:d7:e7:30:8c:d0:99:ec:0f:39:cc:13:16:55:cc:0d:
2e:d9:b6:d9:65:77:6f:33:1a:98:2b:b3:07:0b:88:76:ef:75:
36:88:fd:04:ed:90:af:c1:f6:85:9a:04:53:e1:69:71:c9:1b:
c6:4c:ef:ce:c5:74:6b:6b:d7:75:4d:80:0b:f1:e0:38:2c:39:
a7:38:fb:97:e3:5e:d6:66:4a:ae:01:34:29:ea:f4:56:8f:ce:
67:46:b6:81:a7:9a:e8:da:58:e7:7b:90:86:07:8c:ad:1d:9b:
62:c9:e8:95:09:a8:c6:5e:cd:a3:d4:6c:9c:1a:7a:d4:c0:0e:
da:6e:d7:23:46:43:2c:54:bf:3b:6b:eb:e3:c5:b6:03:ec:46:
75:c3:30:02:54:d2:53:70:b1:1f:6d:af:25:fc:46:71:c0:ec:
b1:75:e9:9b:1d:1f:c4:e7:73:a5:50:63:50:56:ab:35:fa:24:
5a:c9:25:fa:34:98:4e:79:71:f5:f4:bf:7b:91:ee:e3:fa:7b:
82:8a:d5:d2:25:d4:fa:5e:ea:70:53:16:49:1e:34:af:37:4a:
14:49:f4:92:12:c6:fa:8c:fd:a2:7d:cc:92:e4:88:ed:aa:ad:
73:b0:08:4d:ae:57:d7:9d:a3:ae:25:b3:28:f6:8b:e6:61:cb:
d6:dd:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:58 2025 by rpki-client