Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS137425.roa
File: AS137425.roa (raw, json)
Hash identifier: /QBIxK6M0UVhEerGLYiuN1THNoOY82pIiN7fKh6RJ+8=
Subject key identifier: 22:F6:F5:DB:93:A3:87:9A:48:30:CB:D3:2B:8F:B6:7E:88:1B:5F:32
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2CD006638BBFB065E5C77989E8203D9B973DE998
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS137425.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 137425
IP address blocks: 2a06:a005:4d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d0:06:63:8b:bf:b0:65:e5:c7:79:89:e8:20:3d:9b:97:3d:e9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=22F6F5DB93A3879A4830CBD32B8FB67E881B5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:8d:51:a3:5c:5e:7e:75:8e:ff:80:3a:07:
60:09:15:4c:7a:20:30:a4:17:f5:63:f4:1e:0b:04:
9f:cf:a1:21:fd:6f:ec:9d:72:35:16:4c:28:7d:de:
48:29:3a:30:e9:a2:49:1d:46:8d:85:1a:85:a4:41:
7b:2d:7e:c1:43:41:83:e7:99:d3:76:97:9d:b3:2b:
b3:d4:25:05:ab:7a:8f:bc:cb:ff:75:3b:e9:84:7e:
6a:9e:8c:e6:76:a8:ee:c6:de:94:7f:0c:19:de:97:
fe:80:68:21:ab:e5:27:f6:b6:54:f9:53:33:75:15:
b0:84:5e:fa:52:5f:f0:f2:d0:fd:0c:2f:bc:e9:3c:
39:86:27:24:e8:62:e1:7c:6e:d0:ad:cb:03:d1:39:
e0:61:fd:ce:51:67:40:42:a7:b4:04:93:63:8a:ff:
c4:64:8d:b3:f4:56:72:27:1e:7c:c9:ad:15:db:27:
df:c1:92:22:9b:f4:b0:52:b5:93:bd:b4:05:42:99:
83:27:ce:1a:13:20:d2:52:ac:5d:ba:9b:ae:30:ef:
b1:2a:88:a9:4b:c0:91:67:62:c4:a4:0d:7b:6e:da:
e0:91:6d:cc:81:e4:93:19:bb:9b:5f:0a:8d:6b:ed:
d0:6e:15:ef:76:73:7b:93:96:d5:df:d4:2d:10:0d:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F6:F5:DB:93:A3:87:9A:48:30:CB:D3:2B:8F:B6:7E:88:1B:5F:32
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS137425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d8::/48
Signature Algorithm: sha256WithRSAEncryption
7b:83:e0:65:03:31:9e:a2:a9:8f:f6:ec:a5:ec:3d:b8:7a:39:
58:c0:c2:f6:89:66:62:23:38:c7:97:8a:17:c5:c5:9c:cb:3e:
5e:9b:70:23:0f:8c:86:a6:02:ab:1a:02:46:91:95:2b:c5:7d:
3f:64:6d:35:d6:81:99:24:52:37:23:0b:9a:86:69:67:ec:14:
a9:fd:8e:d1:2b:af:34:78:ae:8b:c1:53:d4:64:2f:72:61:6b:
7d:21:84:93:2d:8f:b5:20:2b:40:5d:f6:12:63:ac:67:5b:82:
e0:4d:6b:b1:2d:46:e1:91:85:8d:7d:d7:d0:6b:2c:10:ea:a0:
f3:0f:ac:12:bd:c9:9f:94:ea:e7:05:72:ba:79:a4:7d:4a:48:
da:52:0a:f0:31:3d:35:fb:6c:93:ee:fe:6a:2d:9b:2f:a3:1e:
71:3d:b3:61:57:c9:6e:6c:db:58:a8:5e:d9:4e:81:f2:d7:d6:
a3:bf:2a:91:5d:53:5c:f2:21:4f:a6:f0:12:7e:25:96:ce:5a:
45:71:b3:7a:55:fd:87:77:15:e5:52:39:b8:64:5b:e3:e2:60:
f5:6a:31:4e:78:61:6b:ad:43:6a:3f:fb:af:8b:ca:50:06:a0:
04:12:35:d6:4c:e4:e7:a6:e0:8c:aa:20:ee:d4:55:fc:ea:0e:
ab:7f:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:41 2025 by rpki-client