Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49546.roa
File: AS49546.roa (raw, json)
Hash identifier: rGWQgeK6e7rJlryb34QiMWulEzLMswdFgbBx34A28cQ=
Subject key identifier: AC:4C:E9:44:B3:8D:BC:35:CD:5A:B3:7E:6C:AE:54:EE:70:B1:E3:56
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3296A3DBB5C0A5A120528D2E69A605C8A0D0B473
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49546.roa
Signing time: Wed 01 Mar 2023 07:08:18 +0000
ROA not before: Wed 01 Mar 2023 07:03:18 +0000
ROA not after: Wed 28 Feb 2024 07:08:18 +0000
asID: 49546
IP address blocks: 185.173.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:96:a3:db:b5:c0:a5:a1:20:52:8d:2e:69:a6:05:c8:a0:d0:b4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:18 2023 GMT
Not After : Feb 28 07:08:18 2024 GMT
Subject: CN=AC4CE944B38DBC35CD5AB37E6CAE54EE70B1E356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:08:1c:72:c9:be:b6:52:38:ad:3d:48:af:
01:12:a7:08:43:d4:e5:15:c3:b4:30:3b:74:3e:e1:
66:6c:6a:8c:18:84:e1:79:24:6f:20:df:1c:4c:2f:
d1:25:57:b8:83:2b:6a:11:cf:98:6c:0d:81:b9:b7:
89:e4:03:de:c3:20:38:c5:d0:08:b3:d4:8c:5f:df:
16:7a:25:72:02:04:7b:c2:a8:3f:78:a6:de:95:0d:
ab:e4:de:08:22:68:08:f2:20:90:34:aa:21:d2:a0:
d8:7c:ce:c3:44:6e:81:8d:53:63:30:15:ec:38:8c:
0d:81:a7:a0:e4:a9:06:15:7c:4a:59:d6:00:e4:e9:
54:b9:24:67:56:59:f4:7c:e8:ff:e6:a6:81:70:74:
c1:f5:c0:63:b1:0d:c9:db:a2:c7:ec:18:3d:2d:6e:
bc:33:c7:95:0f:0d:c6:63:84:e3:08:92:a6:a6:35:
06:60:42:82:be:37:61:52:6d:66:82:72:cd:52:b1:
13:70:85:b5:56:df:07:99:13:90:56:a5:d1:89:30:
0c:2b:cd:68:8a:4e:da:81:7f:60:10:49:07:81:62:
7f:fe:df:6e:2c:95:45:3c:74:70:46:97:dc:74:c5:
0d:0b:f0:48:5b:84:68:ba:61:b1:1c:ae:4f:a4:c4:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:E9:44:B3:8D:BC:35:CD:5A:B3:7E:6C:AE:54:EE:70:B1:E3:56
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49546.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.27.0/24
Signature Algorithm: sha256WithRSAEncryption
45:49:a1:86:9a:59:d9:f0:5b:19:8f:b8:a5:4b:63:a0:fc:9b:
bb:31:6e:54:85:4e:1f:37:8c:06:f6:42:32:52:a3:74:bf:70:
6b:5e:e8:89:15:4b:06:f0:98:22:ba:21:dd:39:99:09:bb:d5:
63:c2:ba:1d:cf:f5:52:75:98:2c:23:bc:1a:a0:26:3e:98:95:
c6:d5:b4:fd:b7:26:27:a0:8a:70:f6:7b:61:6f:5d:35:3c:40:
22:46:d2:bd:08:b4:36:e5:90:5a:63:da:c2:f5:5f:82:e7:52:
d7:25:09:9b:b3:0b:15:dc:ad:39:e3:89:e3:17:68:5e:0b:9e:
a3:aa:c2:5c:dc:00:db:c7:45:00:73:f8:ec:18:ec:64:92:e8:
d1:59:82:96:20:bd:ce:54:f4:03:fd:59:f1:83:63:ca:ac:94:
07:a3:ee:b6:b4:5c:54:c7:1b:27:d4:ae:6a:ec:6a:25:6a:c5:
ff:c8:d6:79:de:79:0c:0c:a8:bc:23:ba:2f:70:c7:43:ba:7b:
7c:10:b2:b6:f2:c9:33:e8:14:bd:43:c1:c7:7e:7a:8c:16:b8:
bb:e6:1e:c0:f2:97:08:c0:97:f5:3c:d5:c0:ee:02:07:d8:3f:
90:b0:8f:84:20:6b:4e:ef:a0:38:f5:de:1f:0e:01:3a:5a:0d:
cb:6c:44:2f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUMpaj27XApaEgUo0uaaYFyKDQtHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzAzMDEwNzAzMThaFw0yNDAyMjgwNzA4MThaMDMxMTAvBgNV
BAMTKEFDNENFOTQ0QjM4REJDMzVDRDVBQjM3RTZDQUU1NEVFNzBCMUUzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhggccsm+tlI4rT1IrwESpwhD
1OUVw7QwO3Q+4WZsaowYhOF5JG8g3xxML9ElV7iDK2oRz5hsDYG5t4nkA97DIDjF
0Aiz1Ixf3xZ6JXICBHvCqD94pt6VDavk3ggiaAjyIJA0qiHSoNh8zsNEboGNU2Mw
Few4jA2Bp6DkqQYVfEpZ1gDk6VS5JGdWWfR86P/mpoFwdMH1wGOxDcnbosfsGD0t
brwzx5UPDcZjhOMIkqamNQZgQoK+N2FSbWaCcs1SsRNwhbVW3weZE5BWpdGJMAwr
zWiKTtqBf2AQSQeBYn/+324slUU8dHBGl9x0xQ0L8EhbhGi6YbEcrk+kxNp1AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUrEzpRLONvDXNWrN+bK5U7nCx41YwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDk1NDYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5rRsw
DQYJKoZIhvcNAQELBQADggEBAEVJoYaaWdnwWxmPuKVLY6D8m7sxblSFTh83jAb2
QjJSo3S/cGte6IkVSwbwmCK6Id05mQm71WPCuh3P9VJ1mCwjvBqgJj6YlcbVtP23
JieginD2e2FvXTU8QCJG0r0ItDblkFpj2sL1X4LnUtclCZuzCxXcrTnjieMXaF4L
nqOqwlzcANvHRQBz+OwY7GSS6NFZgpYgvc5U9AP9WfGDY8qslAej7ra0XFTHGyfU
rmrsaiVqxf/I1nneeQwMqLwjui9wx0O6e3wQsrbyyTPoFL1Dwcd+eowWuLvmHsDy
lwjAl/U81cDuAgfYP5Cwj4Qga07voDj13h8OATpaDctsRC8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:07 2025 by rpki-client