Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136479.roa
File: AS136479.roa (raw, json)
Hash identifier: uW4Q3YuSzLLNfIuecAMAzo+pe+GDF2Yc11DMxrTd7ds=
Subject key identifier: 3C:5B:2F:98:7D:6B:32:01:B3:C3:1B:C0:18:32:77:7B:10:36:A8:D0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 07FA4DE6EB4DD4D916722A89C7FC2B498B7F5CCB
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136479.roa
Signing time: Mon 02 Jan 2023 14:45:54 +0000
ROA not before: Mon 02 Jan 2023 14:40:54 +0000
ROA not after: Mon 01 Jan 2024 14:45:54 +0000
asID: 136479
IP address blocks: 2a06:a005:5e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fa:4d:e6:eb:4d:d4:d9:16:72:2a:89:c7:fc:2b:49:8b:7f:5c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 14:40:54 2023 GMT
Not After : Jan 1 14:45:54 2024 GMT
Subject: CN=3C5B2F987D6B3201B3C31BC01832777B1036A8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:f6:4f:49:81:9d:5f:99:75:b1:63:ac:ae:
c3:62:0e:be:20:a2:3a:0f:9e:f1:72:3b:d0:f1:7b:
7b:b3:17:34:69:9f:34:eb:49:bd:e6:0a:8f:8e:f7:
ce:9c:c5:4a:28:6f:28:20:ea:65:32:74:9b:04:36:
0d:60:1a:eb:be:cd:db:98:86:e0:10:de:6f:6a:ae:
e5:e9:d3:78:48:62:02:62:3c:bc:cc:17:05:44:e7:
ac:4f:25:ef:7c:f5:be:7b:90:3d:f8:56:d8:5a:89:
86:ef:fd:4f:96:92:91:c5:19:2a:32:b6:3c:37:c6:
b6:03:cf:b2:2d:68:e2:b8:18:d0:a4:ce:33:86:a0:
9b:8c:1c:7d:e2:a9:5b:e1:4e:99:18:45:93:e7:43:
ab:08:d2:71:43:d5:0d:c8:12:d4:18:46:37:83:8e:
95:15:d2:96:6e:27:b8:29:32:72:c2:9c:9b:11:e3:
59:f3:40:46:fa:42:50:93:65:1e:8f:b4:5a:e3:92:
74:2c:26:c1:92:89:f7:4c:9d:a9:64:51:de:8e:45:
b9:4a:0b:d9:69:d9:18:27:89:5a:d9:bf:4e:9a:d0:
92:87:bd:e5:b7:6f:f7:e1:91:84:36:d2:2d:65:01:
9c:70:26:3d:9c:ce:47:1b:68:fc:5c:2b:e0:b0:d8:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:2F:98:7D:6B:32:01:B3:C3:1B:C0:18:32:77:7B:10:36:A8:D0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS136479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ce:8e:7b:af:77:96:5c:32:bb:0a:68:9d:57:ef:00:69:03:
1b:3c:c6:e9:f9:71:4b:85:99:ed:58:01:a4:36:91:98:55:3b:
68:f9:08:11:0f:23:d9:49:7f:ca:dc:7c:ed:c9:7e:b8:7a:df:
6e:e1:c4:ed:f4:74:bd:dc:4e:cc:11:32:82:54:fd:6e:b0:dd:
bc:39:3a:bd:2d:87:d0:cb:9e:50:e1:e6:2a:6a:07:bd:b1:39:
cf:bd:3b:2b:75:4e:f5:b1:44:5e:77:fc:58:12:3c:d6:c3:c6:
a5:22:cb:bb:10:4f:28:77:5e:1f:56:1e:5e:7f:4b:1a:07:a6:
87:2d:be:ba:1c:f9:13:46:87:47:43:97:b4:20:2a:3f:b8:06:
6f:1b:d2:37:37:11:4e:da:c0:cb:68:74:2b:61:65:ce:47:df:
4b:99:51:13:a3:d8:19:23:cd:8f:f5:c5:89:41:86:77:e4:75:
26:17:35:64:57:2c:ac:17:2c:1a:24:f1:70:1f:3b:fa:4e:2f:
71:93:2e:1c:76:92:52:e7:b1:66:18:a5:bb:e9:bd:8e:b3:8f:
aa:98:75:63:f3:cf:c5:f1:48:51:83:b2:40:42:e0:46:81:e6:
2e:9e:a6:fd:86:04:ef:fb:97:3f:63:83:01:ac:2d:b8:3d:59:
cc:db:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org