Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139328.roa
File: AS139328.roa (raw, json)
Hash identifier: u+YmV5oErcolBjfTK1dbtNTUsT9pK/oL5+SIFjnU9T8=
Subject key identifier: C3:23:98:DB:75:29:CB:54:7B:0A:A5:B7:2D:5C:A1:63:DE:0F:EB:9E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7431955D675EACC4976BB744060E6E73ABC3DF14
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139328.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 139328
IP address blocks: 2a06:a005:4c0::/44 maxlen: 48
2a06:a005:510::/44 maxlen: 48
2a06:a005:520::/44 maxlen: 48
2a06:a005:530::/44 maxlen: 48
2a06:a005:540::/44 maxlen: 48
2a06:a005:550::/44 maxlen: 48
2a06:a005:660::/44 maxlen: 48
2a06:a005:1150::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:31:95:5d:67:5e:ac:c4:97:6b:b7:44:06:0e:6e:73:ab:c3:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=C32398DB7529CB547B0AA5B72D5CA163DE0FEB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:7b:be:f1:e3:64:d3:d9:87:ad:3a:f6:38:
80:c8:a2:97:20:7f:fa:e5:ed:d3:7a:45:32:2e:fe:
c1:b2:ff:64:b4:36:80:a4:38:51:5b:8b:4b:7f:8b:
45:3a:52:e7:9c:3f:0f:3f:7f:d0:07:9c:fd:62:5e:
ec:17:50:e2:e5:0e:03:cf:fb:76:58:17:d4:b5:a9:
07:a5:f9:14:b6:d7:99:12:f1:36:22:66:b3:65:6f:
54:78:32:ee:54:18:93:21:7f:f6:bb:24:1b:8d:0b:
18:e5:20:fd:be:49:fb:56:37:a4:29:48:8e:c9:07:
26:ad:9e:e3:cf:a5:0d:28:51:7c:0e:cc:d4:67:c1:
25:bc:e0:08:40:84:57:14:39:25:1d:72:9e:38:0a:
7c:4a:30:29:40:5a:5b:90:11:f4:53:e2:18:f5:2a:
3f:4b:db:27:27:4a:59:81:5f:d5:c1:d0:8a:17:a9:
4a:4f:a8:47:d4:c4:ab:0c:67:05:6d:e8:61:86:9d:
c5:86:60:38:30:57:37:02:1b:ff:84:c9:43:fa:fe:
a9:d2:2b:66:6e:38:46:46:6a:69:0e:87:ca:7c:2b:
aa:49:0f:28:9b:0e:6e:69:0c:d8:73:10:68:17:2f:
15:12:da:39:ef:c9:82:f8:d9:f9:b1:fd:ca:c5:43:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:98:DB:75:29:CB:54:7B:0A:A5:B7:2D:5C:A1:63:DE:0F:EB:9E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4c0::/44
2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
2a06:a005:660::/44
2a06:a005:1150::/44
Signature Algorithm: sha256WithRSAEncryption
98:7a:81:0c:6f:f7:fa:71:1c:4e:18:4d:59:cd:fd:19:d5:a1:
f4:18:20:ef:41:98:83:70:a8:e8:fe:34:00:be:6b:a9:a5:f3:
9f:f5:b7:7a:be:38:67:99:ef:13:7f:3d:73:df:f1:fd:dd:a7:
44:6a:e5:6e:15:89:9a:21:25:63:fc:b9:d4:27:05:c2:39:67:
7c:57:4b:6f:07:f6:e6:f4:ca:27:bd:6e:7a:5f:d3:82:62:f2:
50:4f:1a:c4:a6:de:49:55:65:2f:34:a7:f2:77:04:b5:7c:e7:
9a:66:a3:b3:57:eb:5d:68:f1:1f:c7:77:c3:ad:8b:1f:c9:3f:
a9:03:24:fd:38:eb:7a:73:1b:26:31:2f:b0:8b:73:7b:81:26:
0d:dc:ac:75:d8:20:3b:36:49:17:58:be:50:5b:73:eb:b4:d9:
7a:47:2c:d4:fa:84:b3:98:db:28:8a:f2:3b:b9:45:ac:12:2b:
6f:ed:82:56:04:6f:e7:4a:ee:f0:5f:2c:b5:10:cb:e5:1c:ea:
f0:08:78:b9:61:af:90:2c:a3:69:69:9b:c3:03:cc:a0:e9:c7:
53:7d:1f:7a:a9:72:d1:a4:6c:7e:85:0b:f4:89:cf:c2:91:f4:
86:e4:8b:00:b9:ee:ab:a7:6e:c2:05:8b:d0:2d:5b:d7:b6:6b:
ef:29:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:24 2025 by rpki-client