Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139967.roa
File: AS139967.roa (raw, json)
Hash identifier: A9e0eveC34TQJE/+dDoMYddH13kbbAmK3FFE3aXWpCI=
Subject key identifier: 29:60:81:B2:46:1B:F3:6B:A9:59:AC:A0:DB:AA:5D:27:AF:D7:E0:91
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2D17614C3883317CC2BDC6F103F320068C24530C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139967.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 139967
IP address blocks: 2a06:a005:45f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:17:61:4c:38:83:31:7c:c2:bd:c6:f1:03:f3:20:06:8c:24:53:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=296081B2461BF36BA959ACA0DBAA5D27AFD7E091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:55:dd:7e:16:cb:e7:05:58:c5:24:78:54:
1f:89:70:83:2d:8b:9f:8d:16:62:62:f4:69:1d:92:
3b:cc:27:75:2d:6a:0f:7d:21:75:ab:d5:50:12:78:
a9:a1:81:09:09:ad:c3:fb:83:c4:43:d3:5f:3d:b9:
f9:6c:9f:23:b8:2d:5c:33:8c:b4:cf:4c:f9:36:92:
cb:06:af:a5:a2:8c:b6:59:d0:cc:a4:78:66:72:d3:
7c:3c:aa:ed:76:c3:21:d3:4c:9a:75:39:f7:9c:0f:
20:7c:fd:ee:06:86:01:b4:71:ca:95:a4:72:4d:f1:
c6:e1:f0:a0:3f:c5:9a:14:4c:32:86:77:64:5d:56:
cb:28:11:d9:6a:80:5a:75:09:0a:ff:51:9c:f2:f9:
b1:f7:b4:0f:84:d2:ce:b8:0d:f1:9b:13:35:fb:ed:
fb:2a:3e:09:ec:15:99:a5:d6:68:64:bf:56:03:c3:
77:5e:4c:fd:2a:00:37:2d:da:88:1b:ae:17:5f:98:
95:2b:1c:49:ce:61:3c:5e:84:dd:ee:27:cb:d6:29:
20:f0:38:dc:80:8c:48:7e:c7:be:7d:41:1f:5d:54:
6b:65:d2:fc:b1:1e:b1:d7:18:dc:90:84:b0:3c:e5:
fe:a9:da:77:5f:e3:f0:6d:2b:03:b6:33:a8:54:f7:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:81:B2:46:1B:F3:6B:A9:59:AC:A0:DB:AA:5D:27:AF:D7:E0:91
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45f::/48
Signature Algorithm: sha256WithRSAEncryption
0f:43:af:9f:4c:66:03:58:bf:1a:36:d0:72:c7:52:b3:8c:ec:
08:ca:1d:90:76:4a:b0:ea:50:95:ff:f5:e7:b8:77:bd:27:48:
1f:b6:13:23:75:90:94:2a:77:4e:ed:4f:f5:a9:13:5f:c0:09:
1e:c4:38:f9:a3:4c:52:5b:f7:2f:eb:d2:96:9d:f3:a6:12:65:
57:e8:ae:d3:45:49:43:a7:74:46:3d:5f:bf:06:00:f5:14:57:
82:e0:b4:ab:50:0c:05:bd:b5:df:67:34:e9:48:08:2d:7e:14:
12:20:6f:f4:36:eb:18:7a:fb:da:c9:81:7b:af:cc:09:a2:fb:
e8:08:b9:f6:2e:53:e0:16:2b:9e:a5:9a:ca:bb:94:57:76:99:
e9:53:45:86:16:2d:5b:92:e3:1e:ca:2a:6e:d4:d2:8e:c7:6d:
1f:79:9e:c4:ff:1a:ba:8d:d1:31:05:86:52:ef:ce:1b:75:72:
7b:1b:52:97:20:9a:b7:ed:b9:a2:50:b4:b2:16:53:81:94:39:
83:f2:21:71:59:ab:58:c1:16:d6:20:74:65:b3:3f:5b:fc:8c:
95:34:a3:d9:d6:9f:25:25:7d:fa:33:b2:8d:cd:75:f5:dd:5e:
97:89:b9:a7:f1:28:be:b7:bb:84:cc:58:67:ee:a5:96:65:71:
f7:e1:0d:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIULRdhTDiDMXzCvcbxA/MgBowkUwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTVaFw0yMzEyMzEyMzU5MTVaMDMxMTAvBgNV
BAMTKDI5NjA4MUIyNDYxQkYzNkJBOTU5QUNBMERCQUE1RDI3QUZEN0UwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1flXdfhbL5wVYxSR4VB+JcIMt
i5+NFmJi9GkdkjvMJ3Utag99IXWr1VASeKmhgQkJrcP7g8RD0189uflsnyO4LVwz
jLTPTPk2kssGr6WijLZZ0MykeGZy03w8qu12wyHTTJp1OfecDyB8/e4GhgG0ccqV
pHJN8cbh8KA/xZoUTDKGd2RdVssoEdlqgFp1CQr/UZzy+bH3tA+E0s64DfGbEzX7
7fsqPgnsFZml1mhkv1YDw3deTP0qADct2ogbrhdfmJUrHEnOYTxehN3uJ8vWKSDw
ONyAjEh+x759QR9dVGtl0vyxHrHXGNyQhLA85f6p2ndf4/BtKwO2M6hU96W5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUKWCBskYb82upWayg26pdJ6/X4JEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMTM5OTY3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQRfMA0GCSqGSIb3DQEBCwUAA4IBAQAPQ6+fTGYDWL8aNtByx1KzjOwIyh2Qdkqw
6lCV//XnuHe9J0gfthMjdZCUKndO7U/1qRNfwAkexDj5o0xSW/cv69KWnfOmEmVX
6K7TRUlDp3RGPV+/BgD1FFeC4LSrUAwFvbXfZzTpSAgtfhQSIG/0NusYevvayYF7
r8wJovvoCLn2LlPgFiuepZrKu5RXdpnpU0WGFi1bkuMeyipu1NKOx20feZ7E/xq6
jdExBYZS784bdXJ7G1KXIJq37bmiULSyFlOBlDmD8iFxWatYwRbWIHRlsz9b/IyV
NKPZ1p8lJX36M7KNzXX13V6Xibmn8Si+t7uEzFhn7qWWZXH34Q3D
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org