Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61112.roa
File: AS61112.roa (raw, json)
Hash identifier: LJt02gLuHw7Ed3lSejVYdJUsJJRwOQE4C5c+0X6gJRA=
Subject key identifier: 12:35:9F:AF:E9:F2:A6:FD:48:37:5F:6D:D4:0B:79:D4:ED:24:9E:8C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 488C9F66970AB8E6F7DA4770450E7A3F2CF9D657
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61112.roa
Signing time: Thu 19 Dec 2024 00:01:59 +0000
ROA not before: Wed 18 Dec 2024 23:56:59 +0000
ROA not after: Thu 18 Dec 2025 00:01:59 +0000
asID: 61112
IP address blocks: 45.149.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8c:9f:66:97:0a:b8:e6:f7:da:47:70:45:0e:7a:3f:2c:f9:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 18 23:56:59 2024 GMT
Not After : Dec 18 00:01:59 2025 GMT
Subject: CN=12359FAFE9F2A6FD48375F6DD40B79D4ED249E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:0f:b7:95:b8:00:0e:2a:78:9a:12:4d:3f:
68:24:cc:fb:0d:13:69:33:6c:c0:c8:b5:eb:3f:55:
af:0a:27:bc:5f:75:6f:e8:7a:02:44:c0:49:01:a5:
e0:0b:0e:37:90:f2:15:e7:b1:f7:94:96:6e:f5:0c:
dd:36:ac:b2:91:15:5a:6a:81:b1:ba:46:11:dd:54:
9f:28:bc:7c:d5:c2:a6:66:12:ee:6f:35:6e:9c:ca:
03:c2:d4:65:9c:ed:c5:10:07:9f:7f:04:8c:36:0c:
35:65:b6:72:f2:5c:c0:54:f8:86:f1:0f:c3:f3:ce:
5b:fd:3d:f7:91:28:e9:cd:9a:7c:05:ec:4c:41:3b:
a7:e6:e0:54:9b:2a:09:b3:19:02:7d:cb:09:b9:54:
83:29:b2:66:43:c5:96:0d:2d:62:6a:ed:1d:94:1e:
f8:53:4e:c8:40:9a:f0:50:05:c4:d3:3d:bf:8f:86:
24:f0:a0:03:b7:f4:01:80:7c:27:60:b1:a7:50:ad:
e1:d0:e6:ec:24:37:34:b3:d3:c5:c1:08:ee:06:9b:
e0:d4:28:32:df:34:85:d7:13:98:a1:e4:7d:0b:22:
ae:06:81:a9:dc:08:d3:61:61:8a:4d:30:fc:ff:0b:
d3:82:63:12:35:35:70:ed:d7:bf:12:59:0c:90:1b:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:9F:AF:E9:F2:A6:FD:48:37:5F:6D:D4:0B:79:D4:ED:24:9E:8C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61112.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8b:15:e8:89:9b:d7:76:1b:09:56:ac:83:d0:4f:68:ba:8b:
f6:ed:c2:34:63:a0:e6:87:a4:84:9a:9f:c1:51:f5:48:8b:34:
a7:f2:55:5c:27:b3:56:1c:d7:90:bf:0b:1a:74:01:20:bb:f7:
d5:76:07:52:2e:56:48:29:28:b5:44:a1:ea:c4:0f:23:06:ac:
35:c9:8e:7e:3c:35:21:74:6f:83:d1:f3:c5:78:0c:d9:0e:b1:
c7:60:e4:ad:5e:49:79:1c:f0:84:49:35:7c:e1:14:95:95:f7:
b0:09:b4:73:38:6e:43:e4:92:22:bd:6a:78:a1:df:b0:9f:2a:
d7:9c:e6:bf:dc:a2:21:b0:e1:60:9f:3a:11:c9:b9:c1:71:a9:
b1:53:cf:0e:d9:49:d9:d8:34:8a:1f:f5:e3:dc:ce:61:20:f2:
06:9a:5e:b0:20:2a:0c:93:99:17:d4:b7:4e:8e:9f:48:1d:6e:
f8:cc:b9:96:64:9b:49:21:5f:f9:87:5a:8c:a4:83:79:8b:6a:
57:da:b8:96:f2:4b:3a:7d:9b:f8:a5:4a:30:3b:f9:c8:34:96:
a2:eb:ed:ca:d2:89:04:e8:56:d4:78:80:40:ce:d1:b1:a6:98:
3f:b1:59:aa:23:75:36:38:25:2b:09:9b:3b:58:02:2c:10:ea:
24:be:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:09:19 2025 by rpki-client