Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134478.roa
File: AS134478.roa (raw, json)
Hash identifier: EAym2eZXpIjiwkNjiqqzqdbZTeeyZGYvWGSGHnSyiK0=
Subject key identifier: 58:1F:17:6E:11:E2:6E:7C:E9:04:BA:0E:87:15:C4:28:B3:E4:EF:34
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 65C6DA5869D11BBB72C1320CBF1773019B8CA92D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134478.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 134478
IP address blocks: 2a06:a005:580::/44 maxlen: 48
2a06:a005:950::/44 maxlen: 48
2a06:a005:d00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c6:da:58:69:d1:1b:bb:72:c1:32:0c:bf:17:73:01:9b:8c:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=581F176E11E26E7CE904BA0E8715C428B3E4EF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:b4:08:57:ff:de:a9:45:f7:76:81:14:d4:
3d:48:9d:d0:ff:57:1a:79:88:48:15:bf:a2:69:6e:
3c:c0:c5:1f:95:1c:67:75:52:eb:b8:96:a0:9e:b3:
c5:20:5b:5e:76:72:a9:e0:7e:9d:97:84:c5:b9:77:
2d:21:7a:a5:b5:22:6e:54:ad:86:11:ac:21:5b:2f:
7d:62:a0:ac:44:78:74:3d:19:43:82:ba:fe:73:20:
1a:bd:fb:b0:e4:ba:ea:30:e7:67:c9:80:32:45:46:
bd:2d:e6:4a:58:02:cb:6f:e7:70:90:b6:c7:a8:6f:
44:27:7f:fb:b7:da:09:fd:41:9a:00:8f:a0:db:f3:
c7:5d:a3:46:ea:f7:e6:42:bd:51:00:3b:e8:3c:98:
74:ff:06:9d:38:a0:15:24:8d:f6:7e:60:86:31:25:
fc:4c:47:6e:8b:c7:4b:12:ef:74:21:fb:f7:65:d6:
74:0c:5c:44:6d:f5:0f:e9:e4:33:52:28:13:0f:2a:
ed:ca:0d:c5:06:00:30:10:47:9c:37:4c:67:fa:dd:
94:7a:5d:61:15:ff:44:9e:7d:7c:38:93:50:c1:9c:
70:c0:f6:3b:32:92:93:ce:73:ba:8a:e6:9d:c9:99:
2f:88:04:da:58:0d:0f:57:94:aa:98:ab:40:dc:b5:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:17:6E:11:E2:6E:7C:E9:04:BA:0E:87:15:C4:28:B3:E4:EF:34
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:580::/44
2a06:a005:950::/44
2a06:a005:d00::/44
Signature Algorithm: sha256WithRSAEncryption
94:b8:70:72:03:b6:85:51:13:1a:f4:bf:89:9a:85:38:ec:7a:
68:92:4b:3f:02:f7:98:7c:90:ff:62:3b:76:a6:6b:03:cb:c5:
36:00:e9:7b:02:e4:76:34:1a:d1:9e:e3:4d:e9:eb:9e:4a:03:
64:b2:f1:41:df:b9:6d:c3:06:26:a6:ff:50:98:7f:d8:e8:43:
17:de:e6:0c:22:1c:db:7e:a5:2e:2d:3b:a7:02:b9:9e:f9:cf:
41:63:67:b9:70:b8:46:bd:6f:69:64:c9:2f:77:5d:62:a6:5f:
08:45:2f:bb:5e:61:2f:91:49:93:a1:af:2d:9a:06:a8:0b:f6:
e7:b2:9e:e8:b9:69:c5:99:b3:0b:89:58:d4:db:22:c2:5e:95:
78:8e:5e:9f:0e:df:e0:ec:e4:d3:86:ac:a9:a8:ad:9c:8d:40:
2e:9f:a2:b6:6f:0d:8b:ce:a4:15:c3:ed:55:28:30:26:b3:13:
09:51:ca:ae:93:f8:f2:1f:32:d3:0c:2e:21:23:3d:63:89:b0:
e3:bc:21:14:3a:d5:5c:de:6d:50:41:18:c2:13:fc:66:79:34:
96:84:8e:4c:2e:5b:53:bd:e4:39:18:31:8b:a0:e2:db:2d:6c:
8a:20:6c:b1:01:f0:99:4a:d2:89:77:2f:ac:ae:ad:43:97:f2:
0c:cf:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org