Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa
File: AS49981.roa (raw, json)
Hash identifier: 14Qj4IqZLTxy/lo4l8EzF7euzPBNRXO+/AUaTdiRCK4=
Subject key identifier: C6:E9:65:E9:91:F4:EC:F2:88:12:1E:25:BF:A9:20:5E:1C:5F:81:45
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1889C1D367AD8DF5F0BE5547B4C28129999752CA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa
Signing time: Wed 12 Feb 2025 00:53:55 +0000
ROA not before: Wed 12 Feb 2025 00:48:55 +0000
ROA not after: Wed 11 Feb 2026 00:53:55 +0000
asID: 49981
IP address blocks: 141.11.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:89:c1:d3:67:ad:8d:f5:f0:be:55:47:b4:c2:81:29:99:97:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 12 00:48:55 2025 GMT
Not After : Feb 11 00:53:55 2026 GMT
Subject: CN=C6E965E991F4ECF288121E25BFA9205E1C5F8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:47:d5:e3:c0:34:b6:4e:bd:f3:36:b5:7c:
32:cc:35:f9:c1:57:4b:01:ef:f0:e0:db:8f:f0:71:
72:af:a8:7e:89:af:6d:1d:f4:95:8d:3f:81:38:80:
a2:0e:8d:47:72:2b:5f:38:4d:c4:c8:21:04:ce:68:
ae:77:a1:71:06:86:b8:cc:ad:0e:88:b7:11:58:43:
6d:2c:dd:cc:00:5d:a9:6a:1b:56:ad:fa:ca:9b:fe:
b4:b9:93:16:93:6c:e2:48:8b:ca:8f:90:a8:33:f3:
9f:9b:57:c9:d5:1e:49:e5:b9:a3:88:1b:bd:9b:bf:
b5:91:8a:ca:94:43:4b:b6:18:bb:b6:e7:fa:b2:f8:
d9:5b:20:be:d5:48:bf:ca:a0:3d:c4:9c:9a:bd:c2:
d2:76:af:3e:e7:f3:fa:46:f9:4e:f4:1d:90:ee:b7:
e6:cf:1d:16:99:25:3f:47:af:5b:71:7c:44:43:b3:
f3:4c:58:cb:84:56:9e:38:83:a1:fa:74:07:36:0e:
a7:64:62:ec:5c:cf:3e:d8:69:14:8d:06:c4:98:87:
7d:65:7c:f8:31:09:96:94:1d:e6:4e:46:87:9a:0b:
6f:83:2f:02:67:d4:11:99:83:0e:35:8e:38:f1:03:
88:fa:a5:c9:b9:23:12:5a:83:c9:60:66:26:0f:6f:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:65:E9:91:F4:EC:F2:88:12:1E:25:BF:A9:20:5E:1C:5F:81:45
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS49981.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:cf:4c:1f:b4:a2:78:bf:4d:95:08:f4:6c:9f:5c:df:fe:69:
98:db:88:c9:0c:a5:50:b0:b7:3d:e7:bc:28:5d:2e:28:10:ab:
71:d0:a5:b8:ac:8d:37:ee:69:48:8b:a2:9d:14:a5:42:b8:ed:
22:2c:69:e1:77:8b:90:e4:bd:9a:08:4a:36:27:26:1e:62:a4:
a8:74:73:4a:c2:e7:30:b4:20:88:f0:41:c9:4d:a4:d6:8c:56:
ba:20:20:00:5b:11:7c:f6:75:fe:f9:7b:36:5d:91:75:60:c9:
36:c2:0f:6a:2c:83:af:ed:ef:b3:7f:d1:cb:76:e8:79:fc:d6:
b0:9d:a7:0b:09:0e:4b:54:36:b3:59:28:a8:87:8b:5f:37:38:
78:a1:bc:0f:7f:1e:e0:58:31:7f:cb:5a:48:f0:34:7a:7a:21:
7f:2a:97:9a:0b:4b:20:59:be:54:7a:83:df:c4:12:1c:94:70:
5a:8f:26:c3:be:c9:4f:cc:37:66:9c:0b:e8:e3:e9:b5:c8:13:
76:b9:1c:db:a8:d4:95:57:29:54:5d:39:a0:e9:94:5a:95:d4:
7f:d4:16:62:0f:70:fa:76:24:a3:7b:48:f5:f2:b8:6b:b2:bf:
0e:75:8c:58:d2:e5:ce:7c:4d:af:5d:c0:b8:fe:f6:1d:9c:bb:
5b:7c:51:44
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGInB02etjfXwvlVHtMKBKZmXUsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTAyMTIwMDQ4NTVaFw0yNjAyMTEwMDUzNTVaMDMxMTAvBgNV
BAMTKEM2RTk2NUU5OTFGNEVDRjI4ODEyMUUyNUJGQTkyMDVFMUM1RjgxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQUfV48A0tk698za1fDLMNfnB
V0sB7/Dg24/wcXKvqH6Jr20d9JWNP4E4gKIOjUdyK184TcTIIQTOaK53oXEGhrjM
rQ6ItxFYQ20s3cwAXalqG1at+sqb/rS5kxaTbOJIi8qPkKgz85+bV8nVHknluaOI
G72bv7WRisqUQ0u2GLu25/qy+NlbIL7VSL/KoD3EnJq9wtJ2rz7n8/pG+U70HZDu
t+bPHRaZJT9Hr1txfERDs/NMWMuEVp44g6H6dAc2DqdkYuxczz7YaRSNBsSYh31l
fPgxCZaUHeZORoeaC2+DLwJn1BGZgw41jjjxA4j6pcm5IxJag8lgZiYPb9gHAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUxull6ZH07PKIEh4lv6kgXhxfgUUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDk5ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNCwAw
DQYJKoZIhvcNAQELBQADggEBAM/PTB+0oni/TZUI9GyfXN/+aZjbiMkMpVCwtz3n
vChdLigQq3HQpbisjTfuaUiLop0UpUK47SIsaeF3i5DkvZoISjYnJh5ipKh0c0rC
5zC0IIjwQclNpNaMVrogIABbEXz2df75ezZdkXVgyTbCD2osg6/t77N/0ct26Hn8
1rCdpwsJDktUNrNZKKiHi183OHihvA9/HuBYMX/LWkjwNHp6IX8ql5oLSyBZvlR6
g9/EEhyUcFqPJsO+yU/MN2acC+jj6bXIE3a5HNuo1JVXKVRdOaDplFqV1H/UFmIP
cPp2JKN7SPXyuGuyvw51jFjS5c58Ta9dwLj+9h2cu1t8UUQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:09 2025 by rpki-client