Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133555.roa
File: AS133555.roa (raw, json)
Hash identifier: MrzvetfGjE59I/oWxx3ttMiIIs+LwU0UkQeBqms48a0=
Subject key identifier: 30:6B:FA:2F:87:50:86:68:32:1F:8A:BF:0D:43:3B:95:C5:AA:C5:FA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 340C4855AC501AE69BA7B526620BA3B0375A5835
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133555.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 133555
IP address blocks: 2a06:a005:260::/44 maxlen: 48
2a06:a005:270::/44 maxlen: 48
2a06:a005:280::/44 maxlen: 48
2a06:a005:290::/44 maxlen: 48
2a06:a005:2a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0c:48:55:ac:50:1a:e6:9b:a7:b5:26:62:0b:a3:b0:37:5a:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=306BFA2F87508668321F8ABF0D433B95C5AAC5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:b7:90:08:04:59:6d:50:7a:db:19:c0:d3:
1e:8f:bf:3a:40:38:54:cc:95:9a:f6:ab:6c:57:be:
5a:9b:b8:52:53:0f:82:1a:f2:60:9a:a8:ba:54:c8:
ac:31:a1:f0:a8:60:b7:a5:a8:58:2e:f0:15:da:71:
86:15:54:3d:48:a6:da:83:45:6e:44:03:70:21:bf:
58:6e:b3:9d:9f:90:00:b7:73:00:61:d8:55:fc:6c:
e2:cc:59:7c:fe:03:c9:84:7f:b0:43:d6:01:5d:49:
b5:a6:a2:9e:d9:d0:ed:c9:18:e8:44:4c:ef:8f:d0:
31:9c:50:d3:47:b9:ec:40:66:fd:1f:b4:b3:84:7a:
06:57:11:6c:8e:ee:ca:ec:92:fc:d3:2d:27:92:17:
95:af:f3:e3:cd:08:30:5d:2c:8b:5b:51:3b:ce:1c:
7f:76:40:2e:33:41:b8:bc:3b:2b:ec:4c:9c:88:c6:
45:68:0c:8a:42:7f:41:a1:be:31:a7:62:ad:d0:3b:
32:ee:aa:37:55:5f:0d:af:4c:76:6a:2e:52:d2:72:
5a:a9:96:86:c4:ab:16:1d:bc:dc:38:fa:b5:b1:cc:
f8:db:87:66:8e:92:b3:76:77:7f:21:0d:ed:d2:49:
20:bf:ec:9c:07:dc:77:1d:ff:14:90:7a:e5:46:da:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:FA:2F:87:50:86:68:32:1F:8A:BF:0D:43:3B:95:C5:AA:C5:FA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS133555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:260::-2a06:a005:2af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:50:bf:12:e9:e7:63:21:3e:5d:7d:9f:8e:88:05:58:33:f4:
50:8b:72:20:f3:62:8a:62:a5:5a:1d:62:c7:68:00:1c:3f:02:
39:a9:00:b2:fe:a9:c2:a4:9a:78:7c:c8:19:7d:39:26:62:82:
6d:ce:60:e2:c8:9e:01:99:6d:15:71:b4:8d:35:cf:24:1a:c6:
16:8d:fc:23:a4:b4:c9:e3:9f:38:18:ac:87:f8:ec:29:16:f1:
cd:ad:d3:30:4b:a8:9c:a4:31:29:16:99:dc:dd:ff:f8:6f:46:
b7:b8:51:09:8a:42:5e:6e:62:59:c1:6f:f9:7b:76:2a:22:0e:
f1:6f:84:eb:18:4d:e3:60:16:5d:72:99:04:2d:db:43:12:77:
46:09:42:0d:c3:8e:0e:0c:eb:ec:30:b5:86:b6:5b:bd:df:76:
a0:81:06:d3:fc:c5:1f:ff:bd:c9:50:b4:ed:be:57:e2:4f:5e:
f0:51:73:3b:a0:aa:73:09:b1:d7:de:8f:de:9f:4a:e1:11:e4:
74:4f:df:c5:b9:2f:4d:3c:16:38:69:67:a4:fa:d6:3e:a5:ea:
43:16:88:23:9d:46:9c:c1:b7:a6:7f:ba:b1:19:ae:90:76:58:
dc:5a:7a:d9:b4:33:fd:71:bf:39:8a:dc:98:4a:1b:48:73:6f:
62:4e:ea:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUNAxIVaxQGuabp7UmYgujsDdaWDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTZaFw0yMzEyMzEyMzU5MTZaMDMxMTAvBgNV
BAMTKDMwNkJGQTJGODc1MDg2NjgzMjFGOEFCRjBENDMzQjk1QzVBQUM1RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26beQCARZbVB62xnA0x6PvzpA
OFTMlZr2q2xXvlqbuFJTD4Ia8mCaqLpUyKwxofCoYLelqFgu8BXacYYVVD1IptqD
RW5EA3Ahv1hus52fkAC3cwBh2FX8bOLMWXz+A8mEf7BD1gFdSbWmop7Z0O3JGOhE
TO+P0DGcUNNHuexAZv0ftLOEegZXEWyO7srskvzTLSeSF5Wv8+PNCDBdLItbUTvO
HH92QC4zQbi8OyvsTJyIxkVoDIpCf0GhvjGnYq3QOzLuqjdVXw2vTHZqLlLSclqp
lobEqxYdvNw4+rWxzPjbh2aOkrN2d38hDe3SSSC/7JwH3Hcd/xSQeuVG2mIvAgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUMGv6L4dQhmgyH4q/DUM7lcWqxfowHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMTMzNTU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUq
BqAFAmADBwQqBqAFAqAwDQYJKoZIhvcNAQELBQADggEBAAdQvxLp52MhPl19n46I
BVgz9FCLciDzYopipVodYsdoABw/AjmpALL+qcKkmnh8yBl9OSZigm3OYOLIngGZ
bRVxtI01zyQaxhaN/COktMnjnzgYrIf47CkW8c2t0zBLqJykMSkWmdzd//hvRre4
UQmKQl5uYlnBb/l7dioiDvFvhOsYTeNgFl1ymQQt20MSd0YJQg3Djg4M6+wwtYa2
W73fdqCBBtP8xR//vclQtO2+V+JPXvBRczugqnMJsdfej96fSuER5HRP38W5L008
FjhpZ6T61j6l6kMWiCOdRpzBt6Z/urEZrpB2WNxaetm0M/1xvzmK3JhKG0hzb2JO
6go=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org