Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139882.roa
File: AS139882.roa (raw, json)
Hash identifier: s76THbzqEMebCnjNh+LjSBzkCkVJn5nNzNq1QGZgOzg=
Subject key identifier: D0:D6:F3:9C:75:E1:04:87:E6:2B:BA:0E:99:7E:88:7D:0C:EE:C1:BC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7DC78CBE54FCBD9F42C332E5DBC8ABF01EBEE319
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139882.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 139882
IP address blocks: 2a06:a005:360::/44 maxlen: 48
2a06:a005:370::/44 maxlen: 48
2a06:a005:380::/44 maxlen: 48
2a06:a005:390::/44 maxlen: 48
2a06:a005:3a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c7:8c:be:54:fc:bd:9f:42:c3:32:e5:db:c8:ab:f0:1e:be:e3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=D0D6F39C75E10487E62BBA0E997E887D0CEEC1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:38:86:50:67:c6:62:fe:74:08:1e:67:b7:
66:43:9f:d6:ae:79:61:1e:f4:b4:fc:05:5d:06:6c:
a6:5f:be:05:4a:7a:84:dd:14:7b:2c:e9:3c:e8:86:
76:8e:03:a4:1f:7b:e9:1d:88:f7:5c:08:43:21:7b:
f2:d7:32:d4:aa:86:ed:1b:52:ef:b5:d1:4e:3f:9e:
a2:07:0c:db:37:57:17:12:bd:1e:69:4e:05:16:1d:
3a:71:16:c7:45:d3:e5:63:11:1c:45:78:ae:b9:5e:
ca:af:8f:10:13:e2:c1:3e:a9:1b:ce:6f:d9:8d:07:
c0:f5:d6:e4:a2:ea:0c:a7:da:af:a5:80:31:e5:23:
06:26:92:72:ab:e9:5b:08:2f:b7:e7:aa:e8:f2:35:
a8:ed:2f:66:5b:6c:05:89:88:65:46:7f:a5:d2:28:
b9:b9:43:13:ad:85:40:31:8a:27:56:81:70:3f:2b:
f2:bb:3b:f7:70:cc:ce:ed:5e:e0:f7:a3:2e:d6:49:
2a:f6:c1:73:c8:70:67:7e:1f:2d:77:4c:86:c9:a2:
6d:ab:da:fb:ce:c9:b2:78:e2:75:4f:bf:1c:48:db:
db:d8:77:e2:9e:f8:c2:80:cf:06:a0:2e:00:cd:fd:
b0:ef:92:2a:6e:c8:f9:7e:fb:d0:32:06:27:85:cd:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:F3:9C:75:E1:04:87:E6:2B:BA:0E:99:7E:88:7D:0C:EE:C1:BC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:360::-2a06:a005:3af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:51:45:e9:c4:6f:cb:f5:b8:49:25:86:db:16:88:cc:31:3a:
b7:70:e8:02:8b:d9:0b:d3:4d:09:56:34:43:bf:cf:e5:aa:ac:
fb:52:d8:7e:c5:c4:84:0f:57:1d:30:1c:bb:89:d0:19:38:04:
5c:af:2d:e6:12:f6:29:de:79:78:d6:56:72:ae:7c:1a:dd:7e:
ad:29:81:c2:f9:f0:0c:71:9b:6f:22:42:3d:59:97:7a:bd:5a:
d6:55:f1:90:e8:f7:45:9e:fa:ec:0a:d6:31:0f:f8:41:f2:ca:
b9:0d:8a:7f:74:0a:27:06:18:a5:a2:bf:93:14:ae:80:6a:09:
fe:35:0b:df:0c:6f:4b:1e:eb:9e:23:9c:51:0f:3b:47:a1:18:
86:5d:21:2d:29:e2:63:85:49:95:b3:3a:cb:e7:04:cf:d4:1c:
d7:71:9b:bc:08:ef:28:13:f0:96:5f:a9:e1:ef:b3:94:d5:3a:
06:84:56:c0:96:3e:0b:78:ce:c6:ce:81:a3:a7:67:3d:4b:bb:
17:d6:b5:b0:78:63:06:dc:bb:f1:58:41:21:54:d6:7a:cf:01:
99:d7:a9:ed:a5:41:c8:8d:2e:5e:0f:9a:d7:46:db:58:87:ca:
12:84:44:2d:07:9b:75:7d:2c:37:3a:1d:fa:78:eb:85:c6:e7:
c7:87:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org