Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134666.roa
File: AS134666.roa (raw, json)
Hash identifier: ZqaqbxFXOUw7mbTRRYdobYxXsXC2JHS+Oe4hvegaY1A=
Subject key identifier: E8:5C:C7:B8:B8:B3:52:10:4D:1B:6D:F5:55:6B:3F:E8:9D:0E:62:8E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 71F26623D2F3CA79539BE68B68811B3C387D5F4F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134666.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 134666
IP address blocks: 2a06:a005:a70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f2:66:23:d2:f3:ca:79:53:9b:e6:8b:68:81:1b:3c:38:7d:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=E85CC7B8B8B352104D1B6DF5556B3FE89D0E628E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:82:62:11:0d:20:7d:a5:15:03:3c:2d:c8:
8a:7a:a2:15:a9:80:71:6c:3b:cf:bf:89:d7:b7:d0:
71:b7:f7:6e:a6:77:7a:bf:1d:85:b1:8d:4d:08:75:
d6:5c:5f:34:90:43:eb:bd:60:69:90:4c:72:d2:89:
8d:8e:63:fa:a7:7f:17:3d:89:10:7e:4a:9a:5f:d6:
b1:aa:5c:af:0d:c0:ea:8d:84:83:43:af:0b:37:91:
f9:de:52:63:5f:b2:14:e9:b5:97:e2:0e:a5:e3:61:
06:57:7a:dd:68:ca:b6:9e:fb:d3:6a:34:a8:5f:11:
1e:88:f7:eb:45:48:94:3d:9d:e7:28:fd:0d:16:29:
bc:4c:71:74:7a:8c:92:49:3a:04:ef:dd:15:28:e2:
fb:fd:2a:15:70:85:a5:f9:12:98:16:cb:f6:cc:5a:
d7:77:31:1a:39:e3:1b:5a:67:49:cb:04:6b:fb:30:
e8:4d:e8:d9:5a:22:b3:99:ae:23:ea:a0:ef:d2:97:
97:18:c9:2d:0e:a0:39:f8:43:b2:94:56:a6:bb:c0:
d9:05:5d:7e:95:53:15:b7:a0:ab:ac:10:18:37:50:
fb:0b:44:cb:49:d3:af:8f:4d:49:94:af:30:92:b6:
70:7e:89:2d:e3:e2:3f:e9:35:ae:5b:9b:f4:5e:ec:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5C:C7:B8:B8:B3:52:10:4D:1B:6D:F5:55:6B:3F:E8:9D:0E:62:8E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS134666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a70::/44
Signature Algorithm: sha256WithRSAEncryption
43:8c:6f:14:6b:09:a5:d6:46:13:a9:25:14:95:b0:7f:6e:93:
8e:2a:42:62:f1:41:b9:8e:15:58:ad:da:8e:85:b2:98:08:19:
53:c2:e7:89:9d:3b:f5:75:03:a1:e8:f7:41:3d:7e:8f:e9:77:
0c:d6:95:ee:4e:02:e1:6f:c3:13:5e:6f:5e:4a:ea:23:17:94:
39:0c:bf:a1:eb:3c:45:92:75:0b:d6:de:8b:e7:8d:e7:20:87:
44:a8:f1:f9:86:47:61:d7:29:27:0b:7a:c7:49:71:bf:b5:f5:
6c:25:ad:a9:a9:0c:76:5f:27:de:16:bb:6a:d2:4e:28:1f:fd:
92:46:22:73:e5:1c:2b:77:f8:91:24:76:e8:99:ce:ba:f4:4b:
6e:57:79:45:a3:43:81:4d:b7:0f:79:d6:fc:e8:a7:90:05:af:
7a:82:59:bc:e5:76:02:ac:f8:88:b4:8f:ac:3e:75:1f:e1:e9:
1a:bd:b9:05:ec:0a:90:9c:48:f5:a2:15:f7:04:d0:0d:6f:d8:
97:49:75:d6:4b:c3:2f:b1:ce:d7:d7:87:be:2c:2e:36:02:ed:
0b:6f:0e:a7:d8:7d:15:e8:3e:ea:36:f8:85:31:d1:e0:05:55:
a6:76:06:94:94:bd:a8:73:a3:b6:21:25:21:ec:e9:13:59:ee:
26:c3:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org