Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136258.roa
File: AS136258.roa (raw, json)
Hash identifier: kVNHB7xPoVAESOPCDLkgLFdppiPf/iSt/m9pNGRracM=
Subject key identifier: 61:0A:CA:6F:2A:97:F5:EA:05:BB:8F:72:4C:70:93:09:97:0A:1B:D2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 58B8806BE82DE717EF800D5B144F4319F3FB784C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136258.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 136258
IP address blocks: 185.90.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b8:80:6b:e8:2d:e7:17:ef:80:0d:5b:14:4f:43:19:f3:fb:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=610ACA6F2A97F5EA05BB8F724C709309970A1BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:70:03:fa:b6:61:86:e1:3a:d8:66:d2:cd:
b9:f1:2b:ff:d7:09:07:e8:51:b1:4e:73:b3:20:e0:
a2:f5:83:82:51:a6:e1:e5:cd:e0:79:39:8a:66:f7:
bd:c1:d2:1c:0e:09:83:94:9e:a2:7b:f6:23:b2:52:
30:92:e9:e0:9a:c6:30:a0:cf:0d:0e:ee:88:1d:af:
78:b4:5e:8b:74:99:9d:07:4f:28:b3:ba:03:ca:9f:
b2:fe:98:9d:58:ea:19:a3:3b:e0:a3:97:1e:e9:20:
05:c8:53:eb:02:b1:7d:8e:35:5f:a5:d2:15:44:24:
05:26:f0:b2:95:1d:01:a5:a1:e3:22:fd:af:3e:f3:
b2:55:ae:7e:80:c1:81:ee:b9:05:12:ff:3d:d9:89:
d8:97:25:fd:ca:7a:29:7c:f1:2b:21:1b:3d:27:62:
ee:0a:66:33:d5:e3:86:ef:b6:69:a5:2b:1c:71:56:
b2:0c:3f:b5:10:30:1a:21:ae:fd:07:bf:ab:d1:87:
ef:39:ef:2d:12:26:8f:1c:30:a2:f6:7f:78:d9:f3:
a1:a8:76:c6:5a:d3:27:cd:4b:aa:47:01:e4:d8:4f:
92:ff:8a:d0:0c:59:0c:a7:0f:74:9a:bd:b8:06:e6:
0f:80:a4:37:f4:7b:96:f1:86:84:a2:98:ca:50:31:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:CA:6F:2A:97:F5:EA:05:BB:8F:72:4C:70:93:09:97:0A:1B:D2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.61.0/24
Signature Algorithm: sha256WithRSAEncryption
62:64:38:54:ea:e6:31:e9:d2:ce:78:b9:81:43:1a:49:65:5d:
13:3b:09:c6:cc:1f:28:3c:16:a3:b1:5d:a7:e6:72:86:54:9d:
9c:57:7e:c2:0b:1c:34:73:33:d7:00:74:85:56:29:80:f5:ee:
3c:a4:76:e5:c3:14:c6:7a:c9:ef:c6:6a:ba:37:ee:34:bf:12:
9c:1a:96:d4:9c:5d:cb:e1:8c:68:74:6b:60:54:73:d9:d0:63:
1e:1b:d7:05:e2:7d:1a:29:1a:15:73:ec:85:25:84:c5:2c:85:
3a:c8:65:54:67:18:a5:89:86:eb:0a:cf:23:ff:82:8e:c6:9f:
4a:b4:4d:55:15:80:09:ca:f7:49:1b:c3:7e:a7:9f:d6:5a:67:
74:f0:34:58:c2:e0:ff:e3:2d:eb:84:87:1b:d5:54:a3:0b:99:
be:5d:75:11:04:cd:d6:f5:e1:3f:13:29:99:c6:5d:1b:f2:3e:
f4:3c:ef:c5:0b:d9:e6:4f:93:d4:13:20:e0:1d:e5:5f:9b:fc:
38:f1:90:af:85:27:33:ce:fd:3b:ee:c3:09:9f:bf:f8:dd:17:
1f:41:e2:8a:25:51:b2:39:fb:f8:dc:d8:40:d9:33:24:9c:70:
6d:2c:d5:cb:5e:93:1d:2b:cc:69:a4:3f:8a:29:bc:38:76:87:
9d:a0:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org