Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS131745.roa
File: AS131745.roa (raw, json)
Hash identifier: phb/EhN595qKFCr50w1RbRVcFdYQA91nDrdiL1b7GKY=
Subject key identifier: 47:DA:59:99:DC:63:55:0A:5D:75:25:D1:EE:1B:A5:6C:BB:0E:B8:85
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 03E26FD26866CBD3DE3357B361D8802D5E83E11C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS131745.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 131745
IP address blocks: 2a06:a005:457::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e2:6f:d2:68:66:cb:d3:de:33:57:b3:61:d8:80:2d:5e:83:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=47DA5999DC63550A5D7525D1EE1BA56CBB0EB885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:29:01:17:e6:e4:5d:8e:78:a6:70:f3:51:
21:cb:74:d6:30:3e:98:98:b2:ee:cc:e0:43:d3:a6:
f5:42:21:dd:37:4e:32:14:47:dc:47:b2:4c:59:85:
b5:ec:6f:22:0c:cd:e5:14:7d:4c:ff:e1:a7:b4:36:
fb:0a:74:d9:a5:fa:db:6c:78:d4:5c:3d:3b:8e:e7:
fe:88:10:0e:38:21:23:6d:80:51:88:f4:54:44:c0:
59:5c:22:65:18:d8:d9:f5:d6:67:2b:a7:02:a5:6c:
01:ca:1a:cc:f5:59:5a:4a:9b:ae:3f:6f:3d:ba:e3:
55:60:e1:bb:b4:7f:17:36:70:49:61:5e:4f:b1:18:
ff:73:f7:02:e2:35:f1:27:10:f8:55:22:e3:95:5c:
81:12:2c:da:5f:9f:91:f0:b8:e5:51:dc:52:c9:35:
52:4c:1c:9e:85:bd:5e:55:e6:07:a9:ac:d6:6a:c5:
7f:bc:47:86:10:89:72:cb:c3:ec:d1:04:58:05:40:
a5:bd:26:a8:ea:65:a6:63:9c:4b:52:8e:a2:e7:2a:
a8:a4:62:7a:29:8a:18:f4:de:5a:fa:d1:c1:0e:b0:
4a:3f:b0:b3:73:7e:e5:07:62:75:a4:bd:c7:7c:39:
1a:bd:4a:bb:fd:82:db:2c:58:62:5d:ca:01:26:e1:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:59:99:DC:63:55:0A:5D:75:25:D1:EE:1B:A5:6C:BB:0E:B8:85
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS131745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:457::/48
Signature Algorithm: sha256WithRSAEncryption
01:95:f8:33:28:04:3c:d9:5c:94:95:4c:30:a3:e3:a3:ba:02:
00:9d:47:e6:2f:0a:6e:37:0e:e9:61:96:a1:33:a8:d6:95:62:
d0:c7:27:12:8f:54:2f:0f:2c:b7:73:f7:d1:04:73:f4:62:fe:
20:da:b2:29:3b:aa:6a:63:df:f2:b9:80:6a:20:46:1a:c9:a0:
62:70:9f:af:49:b1:7c:6a:50:08:0e:1f:02:e0:c6:42:0b:08:
b6:bc:25:35:f9:72:4c:ce:92:24:07:d0:c7:aa:2b:df:a7:1e:
b8:9d:4c:42:99:ac:a1:ee:03:77:ff:5d:3c:a0:02:09:37:0f:
35:2d:00:64:99:04:1e:91:0c:05:7f:07:bd:3c:61:e6:c4:c1:
75:bc:ca:86:1a:7b:4d:73:16:21:96:c7:f8:ec:af:1f:2a:ed:
2f:76:3f:01:30:ae:9f:b7:f3:89:b4:08:c0:4a:8b:ac:05:7c:
fa:f3:3f:5a:97:aa:13:7c:59:98:32:83:6b:20:41:7e:b2:d0:
7d:22:b0:dd:39:21:fe:f7:5b:00:71:7b:5c:f2:9d:74:68:95:
4b:b4:2f:03:ed:e0:b7:59:66:2f:3a:de:1a:6c:54:4e:24:9e:
57:ba:21:20:75:69:94:4f:22:2b:f8:86:a8:05:0b:de:b2:9a:
46:08:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:47 2025 by rpki-client