Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49544.roa
File: AS49544.roa (raw, json)
Hash identifier: BDrbkff5Pn2U2JXXLo8G/Dj9JOQhJQ8PTnh11Jy6zcs=
Subject key identifier: D2:5B:FC:63:CD:47:F5:AE:E6:B6:12:75:2A:8E:EB:1A:89:DC:F0:1A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0A262F339950DFB0558A50BB1C86DEB07718C98A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49544.roa
Signing time: Tue 07 Jan 2025 19:40:40 +0000
ROA not before: Tue 07 Jan 2025 19:35:40 +0000
ROA not after: Tue 06 Jan 2026 19:40:40 +0000
asID: 49544
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:26:2f:33:99:50:df:b0:55:8a:50:bb:1c:86:de:b0:77:18:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 7 19:35:40 2025 GMT
Not After : Jan 6 19:40:40 2026 GMT
Subject: CN=D25BFC63CD47F5AEE6B612752A8EEB1A89DCF01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:60:33:22:81:8e:22:6d:ef:2d:7d:c7:5f:
d6:a6:1b:13:0f:ff:92:5a:b6:37:5d:1c:6c:f2:c8:
72:d3:e2:6b:c4:9e:be:f1:29:f2:13:f4:31:ca:46:
97:9e:bc:3b:02:c8:f0:7a:f5:99:b4:f4:42:d0:40:
d7:f3:9a:60:2b:a8:17:36:9b:6b:71:7b:67:7e:68:
10:5d:e0:07:1a:10:ec:5e:33:e5:fc:2d:15:2a:ea:
2d:88:2c:70:9e:53:4f:c1:2c:59:0e:6f:89:66:20:
a4:03:9d:c7:2f:57:66:a7:61:4a:4a:26:7b:2e:39:
86:e5:3e:8d:3b:d8:9a:a7:23:a7:2b:c4:3c:36:4d:
54:46:bc:23:68:8c:c1:84:88:bf:ed:09:47:99:ed:
ea:a8:dc:e3:62:9e:50:a1:00:bf:c0:4e:b3:a0:6d:
bc:02:cc:3b:d5:64:64:c3:88:14:6b:32:34:8a:c3:
7e:24:7a:62:5a:65:3d:d3:63:59:e1:68:83:63:0f:
a7:4d:98:ef:7f:c6:15:6b:77:21:ea:b6:b7:ec:81:
6b:ab:a6:ac:cc:3c:47:44:60:49:79:7c:c2:08:16:
43:9d:16:2f:f3:35:09:74:de:33:9e:16:3e:e2:23:
c3:fd:2f:1e:c7:28:d7:59:42:12:e8:28:4b:8d:95:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:FC:63:CD:47:F5:AE:E6:B6:12:75:2A:8E:EB:1A:89:DC:F0:1A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8e:87:71:bd:b7:13:43:0b:96:2c:b9:a8:c1:21:c2:1f:52:
d4:be:0c:ab:23:12:ee:81:41:fb:f6:3a:5f:ed:75:20:4a:9c:
fb:90:f9:d8:b8:64:69:1f:20:47:19:ef:9d:7e:05:2e:4f:db:
10:9c:25:bb:cf:87:62:1f:5e:fc:ea:2b:f7:c4:1f:37:44:f8:
bb:01:60:a0:82:a5:bd:db:67:4b:bc:c1:2b:67:e6:7a:bf:71:
b2:54:af:63:7f:d3:aa:02:34:35:9b:f3:a3:9b:0d:55:59:df:
83:62:00:d5:41:64:69:6b:60:4c:83:07:fa:f7:40:e9:56:d6:
96:35:9f:43:e4:90:dc:30:e7:12:95:ff:44:5e:31:7f:9e:7c:
cc:4d:44:18:fe:80:0a:00:25:63:7a:b6:14:da:fb:bd:44:58:
c4:7e:7d:6b:43:d4:28:71:8c:83:a2:4e:9b:a6:4c:a7:b7:d0:
3c:3b:0e:69:49:84:b0:2b:e7:ec:1b:a1:05:ec:d9:dd:56:20:
ff:25:e8:bd:6e:23:b6:b5:73:5b:c5:f9:12:d7:bb:53:e7:af:
a2:c4:22:42:1e:fa:10:fc:4e:61:03:71:af:5e:ad:b2:e6:49:
d7:45:6b:d8:88:39:2a:31:f2:c7:b4:1a:40:95:5c:66:91:e8:
8e:31:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:42 2025 by rpki-client