Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11849.roa
File: AS11849.roa (raw, json)
Hash identifier: Tj+TLfxxNXJGd57f3N1xwtP2nAveupOc9FtIF2XRt0Y=
Subject key identifier: 8B:B7:9F:5D:CE:8F:B9:AB:CF:7A:B3:7C:38:40:DB:77:E8:6B:20:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 071B397D1391A40A59901C62A2AE91E3B2C13CA4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11849.roa
Signing time: Thu 10 Apr 2025 15:59:09 +0000
ROA not before: Thu 10 Apr 2025 15:54:09 +0000
ROA not after: Thu 09 Apr 2026 15:59:09 +0000
asID: 11849
IP address blocks: 145.223.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1b:39:7d:13:91:a4:0a:59:90:1c:62:a2:ae:91:e3:b2:c1:3c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 10 15:54:09 2025 GMT
Not After : Apr 9 15:59:09 2026 GMT
Subject: CN=8BB79F5DCE8FB9ABCF7AB37C3840DB77E86B209D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:78:03:60:39:fa:20:be:0e:eb:c9:e2:2f:
fa:cf:0a:8f:94:d0:e8:b9:e2:a4:5b:d9:87:ba:9a:
c9:b0:a9:d6:3f:0a:48:00:46:78:58:39:12:f9:c2:
70:1c:5c:0b:ff:4e:7c:5d:25:16:88:ac:5b:86:68:
88:2d:eb:4e:17:79:1a:55:73:e7:e1:5b:f4:a1:d5:
c8:1b:c0:9c:09:38:3f:82:43:da:33:58:61:17:f2:
1c:d5:8d:2d:16:7c:30:28:c4:a8:f1:17:0c:bd:b8:
e0:bd:7b:fd:a1:da:22:bd:5e:1d:26:16:59:d3:a8:
19:ee:b2:58:00:f7:78:95:69:06:68:c6:2f:0a:31:
bb:77:fc:d6:cb:09:25:89:3a:df:e2:c1:65:1e:d2:
ff:99:f5:86:78:ac:92:e1:33:ac:c8:e2:ca:c3:9f:
c6:d0:6d:ec:b0:f0:a9:a0:1b:dc:55:0e:2a:01:16:
e5:f0:a8:94:f2:8b:ff:3d:01:e4:40:ed:b9:4b:67:
34:2f:57:6c:18:24:c0:d7:10:c4:23:b0:ed:8e:49:
56:b1:53:72:f8:90:47:f7:e3:bf:5d:68:64:40:2c:
ec:c0:c6:3e:c4:5b:b5:39:71:81:eb:6f:9a:f2:c6:
d6:02:44:bb:fb:98:2f:25:e2:1c:aa:31:14:1b:0c:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:9F:5D:CE:8F:B9:AB:CF:7A:B3:7C:38:40:DB:77:E8:6B:20:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS11849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:31:3f:3e:86:13:e1:46:d7:9e:a1:3d:23:b5:da:5b:87:f5:
26:6c:d8:db:b3:cc:4d:8c:51:46:91:8a:2d:8b:d9:c5:ae:06:
6a:75:1c:c8:95:cf:28:b7:6b:9d:eb:64:e8:c7:13:ce:03:d6:
12:70:e1:49:82:5a:88:98:9d:a2:4d:d4:3c:88:22:93:ed:29:
55:b9:9f:ad:a9:a4:ce:86:5d:55:db:a0:04:e3:50:48:d5:c3:
77:dd:c5:d7:2b:a6:76:39:ba:d5:08:c6:20:4b:75:0a:f5:23:
16:47:bb:e0:22:17:85:c6:af:25:f6:19:a2:6d:b6:00:d6:da:
99:36:d1:bd:3f:9e:43:c6:ee:1f:f1:f7:0d:2c:20:11:1b:2e:
e2:32:a7:ea:23:68:a0:aa:2d:92:41:e6:d0:5b:6a:38:fd:46:
1e:3d:78:45:a5:47:3d:f3:c4:24:67:50:03:ef:5d:1a:29:3e:
c8:00:6e:ba:ff:df:7d:39:c8:40:76:a0:e0:c9:a9:09:e6:ce:
2b:ed:05:7b:4f:23:02:13:d5:18:84:1b:8f:43:ff:95:9e:36:
91:80:d4:fb:39:b9:ec:2d:5c:91:51:42:3c:27:42:2e:a0:ea:
cd:f2:cf:32:6a:5b:bb:d7:6f:77:ac:87:84:0d:75:19:0f:50:
70:ef:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net