Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: Pnikr/d2VemtUTqcwTrHtb5+XvpBFCLXYyIDBqOUPyQ=
Subject key identifier: A6:4F:1E:5D:4B:11:C7:36:91:B0:B5:A8:82:99:56:A8:E5:6D:45:8F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5712D4AA6967BE3BD9385D161027036402293C47
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139311.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
2a06:a005:10c0::/44 maxlen: 48
2a06:a005:10d0::/44 maxlen: 48
2a06:a005:10e0::/44 maxlen: 48
2a06:a005:10f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:12:d4:aa:69:67:be:3b:d9:38:5d:16:10:27:03:64:02:29:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=A64F1E5D4B11C73691B0B5A8829956A8E56D458F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:67:c8:a1:f0:46:fd:12:4b:3c:76:79:0b:
aa:42:78:6a:53:73:27:a1:7e:8b:cf:98:72:9a:bc:
f0:58:88:b8:18:02:94:62:89:f8:8a:58:26:7d:13:
02:06:5b:ff:3b:1b:73:bb:be:77:2a:6d:76:fa:ee:
3d:6a:68:69:ce:3d:f1:f5:10:b8:82:60:a4:e3:25:
6b:d1:59:a0:12:59:67:c9:c1:53:fa:18:ab:8f:12:
a6:3d:7a:e5:2f:ad:47:e3:c4:dc:45:70:a4:2e:f7:
37:d5:c7:d5:2a:66:6f:38:96:51:bb:d5:09:a1:cb:
03:74:8e:b3:27:01:20:08:91:21:ca:da:fd:79:ab:
94:bf:88:5a:dc:6c:d4:ff:c9:4b:1a:ba:e5:6b:7e:
34:3f:52:4c:7d:87:bb:a1:ef:1b:f0:19:a8:5d:4a:
f3:bf:46:e3:30:8a:16:17:f0:4d:4b:e7:ec:21:0d:
30:90:2f:07:9d:2b:ab:58:7f:fa:2a:c7:b4:7c:71:
aa:53:e0:7b:94:77:da:2f:d6:e7:1b:18:18:16:94:
8a:86:26:44:cd:44:1d:4c:3e:2c:13:e8:fb:b3:32:
c4:c6:fb:0a:b1:1b:3e:39:a5:c3:30:1e:0f:66:c7:
6d:9d:84:d0:08:31:9f:ab:1a:07:d2:50:46:23:48:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:1E:5D:4B:11:C7:36:91:B0:B5:A8:82:99:56:A8:E5:6D:45:8F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::-2a06:a005:10ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7e:ab:2b:d5:12:0b:d1:02:15:ba:fb:b4:59:71:e5:fd:b1:28:
4d:40:2f:c9:ca:83:0c:5c:a3:9b:7f:e3:d8:5d:55:6a:51:99:
06:53:23:d5:1f:e4:1f:09:d2:21:21:c1:58:e5:25:c0:36:b2:
6c:4e:66:fd:81:a0:21:c4:2c:e9:c5:eb:1b:fb:c7:e9:b7:be:
ac:d6:eb:0b:da:62:38:e2:1d:97:8f:94:e2:8e:12:49:93:1d:
09:e6:bd:dd:22:54:a2:56:56:a5:8b:35:ab:66:c3:b6:72:d0:
00:c3:bc:8a:af:d0:15:8c:cf:fb:f8:28:5c:69:dc:05:34:66:
35:43:0f:5a:fc:84:44:0b:ee:11:6e:8f:b6:42:88:70:da:6b:
72:d3:75:6d:53:0c:14:ed:7c:70:93:a9:01:04:86:9a:54:88:
ed:54:b4:73:83:66:79:50:f3:d1:22:d2:9f:81:49:c5:84:bb:
6a:4e:dc:3b:ec:41:0c:6f:63:3e:69:5f:84:6f:15:3c:3c:47:
e8:90:1f:8c:67:28:cd:3b:6d:47:21:0f:dd:44:07:8e:29:e5:
b8:27:08:24:87:99:d7:14:cc:4a:49:88:a3:98:05:88:67:fe:
04:de:39:60:ce:5c:34:92:00:40:d0:f7:4f:67:10:ca:a6:6d:
82:5e:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org