Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139859.roa
File: AS139859.roa (raw, json)
Hash identifier: QUWii3990nIFSd4O8AALTPDU6tOQhTUdj2MJ3a8CjJ0=
Subject key identifier: 0A:30:95:DE:2C:61:D4:0D:AD:37:49:92:2C:AE:9A:92:9B:6C:9F:C5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7B2C3DFF57E874DA65B452F5C2E0257D7FD7DB66
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139859.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 139859
IP address blocks: 2a06:a005:1c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2c:3d:ff:57:e8:74:da:65:b4:52:f5:c2:e0:25:7d:7f:d7:db:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=0A3095DE2C61D40DAD3749922CAE9A929B6C9FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:67:c5:f4:07:e4:63:6c:f2:ac:3e:6e:27:
7a:e5:eb:63:49:84:8c:dc:53:1d:ce:9f:bd:10:43:
f5:82:9a:25:39:99:82:20:44:0c:4b:13:6a:94:02:
8d:8b:bc:6b:1c:82:38:64:e4:60:22:5f:0f:11:1b:
73:f4:be:5e:93:26:0b:49:0b:7c:84:4c:4d:7a:08:
98:4a:b5:58:45:36:99:68:cd:c0:2c:c8:9f:a4:be:
1f:86:f1:15:0f:75:7e:b6:be:f8:4c:e5:85:c9:a4:
8a:b5:d8:66:86:21:05:0a:52:97:23:82:16:c1:d8:
d8:d7:dd:46:66:1b:56:e1:ba:4b:0f:e1:b9:9e:d2:
4a:5b:4d:d2:aa:5a:76:b3:77:0f:b9:9a:8e:6a:cb:
af:1e:b3:cd:8e:86:79:8d:74:d8:0b:a3:61:ac:34:
9f:4e:ce:38:33:35:15:28:0f:c7:17:7f:cd:f8:df:
24:57:7b:8f:2f:8e:cc:82:46:e9:2d:12:3d:23:40:
e8:8e:7b:1a:f6:03:a7:85:f5:24:45:5f:0c:29:2b:
62:c7:b6:f6:e5:1b:1c:92:e1:b4:41:f4:05:59:60:
e6:6f:fc:56:71:88:ca:71:a1:f6:ab:45:db:8c:14:
bd:e1:2a:75:63:2c:ca:72:a8:43:63:6e:91:28:fe:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:95:DE:2C:61:D4:0D:AD:37:49:92:2C:AE:9A:92:9B:6C:9F:C5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c::/48
Signature Algorithm: sha256WithRSAEncryption
31:1f:46:4e:15:62:31:c6:0a:8c:1f:10:d8:8e:c0:c4:42:ca:
a9:80:65:6b:ef:75:01:13:11:39:10:56:c8:e5:a6:1e:15:16:
de:02:ca:f0:a3:c9:76:dd:12:2d:25:64:04:65:d1:12:23:83:
a9:8d:a9:e9:61:d4:24:ba:05:ec:85:91:61:a7:2d:e8:d1:f2:
97:91:10:9b:44:f0:7c:64:72:c4:fb:e1:3c:c2:29:87:47:e4:
9a:14:09:0a:4a:85:79:7d:20:cd:c3:5f:c4:94:30:a8:e3:32:
b0:8a:7c:6c:88:56:a5:18:97:1a:4a:66:67:20:f4:18:95:da:
25:de:d9:64:6c:23:8c:ab:10:df:22:25:18:3d:1d:5b:3e:b0:
f7:60:30:f5:84:6a:27:4b:08:9d:f5:67:56:d9:3c:29:17:f8:
b0:87:99:cf:58:7d:1a:92:62:95:d3:59:66:6b:b4:d6:10:83:
8d:44:31:22:31:7f:e9:e3:53:7b:3b:46:74:c9:7f:41:cd:a8:
5b:9e:cd:bd:94:78:08:11:96:7f:a4:34:6f:05:13:d3:2c:c8:
86:7d:35:b0:a0:97:9f:e7:e6:bf:53:2c:29:0b:c8:34:1c:b7:
e6:76:28:42:ac:fa:47:6a:fa:b5:51:41:32:66:71:38:43:bf:
7d:52:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org