Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS1018.roa
File: AS1018.roa (raw, json)
Hash identifier: 3BXNwKgo3gPq/6hHOf0j36K3DLNXLHdg/vLB1WQHKjk=
Subject key identifier: 87:93:37:9E:A2:65:3B:92:C4:4F:23:99:73:C0:C0:9E:3E:94:FE:18
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 47C87B90DE0A71877F7500435D03E29E0DB32EFA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS1018.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 1018
IP address blocks: 2a06:a005:5f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c8:7b:90:de:0a:71:87:7f:75:00:43:5d:03:e2:9e:0d:b3:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=8793379EA2653B92C44F239973C0C09E3E94FE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:f1:3b:2f:8e:ae:c7:41:8c:cb:22:c8:29:
e0:8a:ca:10:6a:65:87:0f:f8:ea:ec:45:3c:e6:4a:
0e:ee:11:40:86:7d:55:e2:65:77:62:ea:1a:0c:42:
bc:40:d6:6f:22:9b:b3:63:ab:a2:8b:46:83:bd:fd:
c5:3b:f1:e6:ad:4f:cf:27:3e:b5:6e:6b:ea:c3:8f:
25:ee:7c:fd:c6:9d:74:dd:6c:01:26:47:ca:53:f1:
19:3f:64:bf:70:80:8b:94:fc:d7:1c:26:d9:cc:b2:
60:cf:de:1a:3c:27:de:90:69:88:d3:3f:c8:c8:94:
d2:b7:59:be:77:bd:c3:43:0d:e5:bc:47:c6:54:70:
4a:31:31:ef:c3:dd:8e:52:2e:5f:87:30:40:9a:d3:
81:38:73:c6:2a:7f:35:b6:9e:4e:ed:0b:30:c0:9c:
9b:e1:bb:5c:ec:7e:dd:cd:a7:3a:6c:17:8c:79:3c:
21:b9:7c:93:52:d6:6b:40:f8:13:32:02:01:36:b7:
bb:47:38:39:ea:fa:c6:27:7b:8f:12:7b:f4:ee:01:
ab:23:46:1a:ef:0a:94:c8:85:5a:b0:0c:cd:bc:b3:
24:4b:eb:c6:de:a5:ef:10:6d:28:94:95:b1:f4:bf:
43:8a:b9:6e:70:ca:8a:de:32:36:a7:9e:f4:61:04:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:37:9E:A2:65:3B:92:C4:4F:23:99:73:C0:C0:9E:3E:94:FE:18
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS1018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f8::/48
Signature Algorithm: sha256WithRSAEncryption
1c:e2:41:80:33:d5:5b:57:57:4a:28:1d:7e:22:44:4f:e3:19:
c2:85:37:04:1e:94:36:22:e2:0f:15:a8:69:35:ba:44:25:45:
ba:59:be:7d:f4:39:22:f1:55:9c:53:c7:2e:71:bf:d3:5d:f9:
38:fb:c7:ab:f9:e7:32:82:a6:95:28:59:f8:7b:b1:d8:ab:38:
de:d0:1a:f0:b5:c3:6f:6e:7c:5d:b9:bf:c2:80:ac:ed:fc:02:
7c:9b:24:6c:ea:43:6a:c8:2c:88:48:32:fa:45:75:1f:d9:a5:
68:85:0c:e0:96:ce:f8:01:3b:e8:0f:d2:2f:ff:ba:1f:c2:d5:
68:43:c9:6d:cb:27:d1:ed:40:93:0f:3f:53:fc:f2:43:f3:62:
cf:5a:04:e2:8e:62:79:3b:a2:70:c7:79:bf:08:37:ee:9c:48:
c5:79:76:fa:40:ff:86:c8:8c:b6:90:9c:7d:40:57:54:6f:e2:
02:80:f8:66:ce:35:53:0d:7b:36:f5:4a:a5:42:03:60:a5:b7:
29:43:86:da:37:72:d1:f7:ba:09:82:83:0e:c1:bd:78:c3:ac:
0c:23:11:ba:14:d8:c7:54:cb:c7:23:5f:f1:d8:fe:09:d1:27:
73:f4:0b:c1:49:ae:b1:c5:3c:48:78:68:86:87:dc:21:c5:f6:
81:15:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:54 2025 by rpki-client