Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: 3KOhopidnYlgEXho1CAzqwjToQyBANA8TDUxjn3DnGU=
Subject key identifier: 0E:C5:1B:C7:16:4B:E1:51:B4:3B:A2:E1:22:6D:FF:D6:63:14:C5:33
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 09FE08D46056173E2828098C32D84E7A8E09EE19
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139989.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 139989
IP address blocks: 2a06:a005:a10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fe:08:d4:60:56:17:3e:28:28:09:8c:32:d8:4e:7a:8e:09:ee:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=0EC51BC7164BE151B43BA2E1226DFFD66314C533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:4b:3b:07:24:37:9c:6c:d9:90:d8:9b:5f:
35:fb:d9:a0:24:b4:6b:24:83:ed:f8:99:2f:4a:e7:
71:27:92:4f:13:2f:b9:0a:42:59:28:a6:67:bd:d6:
a9:a2:63:5b:41:49:89:56:62:02:d8:aa:95:46:c5:
df:25:89:f6:73:01:a7:77:86:dc:17:e0:81:9a:1b:
ae:e6:09:c9:1d:1f:ef:65:2c:c5:53:8e:0a:4c:f8:
a7:c7:89:4b:0a:29:fb:e1:7d:d4:90:fd:c7:56:5b:
62:81:25:35:56:40:e2:36:ec:19:d5:1c:70:c9:f7:
d2:ec:88:4e:06:77:92:a1:98:7b:e4:56:29:3c:65:
62:76:04:96:98:ee:8e:a9:29:93:cb:3c:45:fd:23:
39:01:40:ed:fd:7c:28:a8:94:c9:e2:7e:76:44:1e:
ef:ae:5c:e4:e8:cd:18:b6:1f:f9:44:d1:42:d1:55:
83:cf:c1:90:d8:f8:9e:c9:37:c3:6f:56:f1:d8:35:
52:a8:75:81:d1:c8:2f:78:1c:99:96:ce:0e:56:1d:
4b:23:f2:c9:0e:44:d7:21:6f:b0:45:60:6f:60:1d:
67:bf:89:99:75:b5:5b:97:73:9f:df:98:10:e4:d1:
af:48:40:11:8b:21:c6:0c:e5:9b:a9:0d:ec:9f:eb:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:1B:C7:16:4B:E1:51:B4:3B:A2:E1:22:6D:FF:D6:63:14:C5:33
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a10::/48
Signature Algorithm: sha256WithRSAEncryption
70:0c:13:dd:5e:7d:ed:60:e9:4e:db:90:cd:47:be:f8:76:a6:
76:ea:53:ca:87:4c:a5:2f:ca:db:c2:c2:c4:04:b3:33:a4:7f:
01:f6:d3:9c:38:d6:70:8b:b7:2e:21:c9:d5:a6:8a:7e:79:3e:
d8:c7:c8:ee:ac:77:d6:2d:27:bc:17:d1:21:e4:f3:09:6f:db:
fb:a3:12:a6:15:42:bc:9b:fb:df:ff:ff:02:cd:43:a4:f8:89:
69:22:15:c1:46:ba:38:76:72:25:11:33:85:1b:91:7d:56:77:
14:96:42:e5:2a:9b:ef:d3:92:ea:37:a2:e5:2c:15:30:5e:79:
a6:f7:cf:07:1a:b8:bb:0e:b1:00:8e:f4:59:18:da:68:ee:08:
77:80:d9:12:41:78:a1:75:c9:35:6f:49:99:3d:0b:03:a5:cc:
34:12:9c:fc:33:d3:3b:8a:cb:86:23:70:be:82:04:68:cf:c7:
cf:e2:9e:f6:11:56:fe:7c:96:01:fc:eb:ad:b6:a9:b5:5c:a3:
96:fb:6b:6d:da:5d:23:18:1b:ea:6d:36:40:22:65:77:c8:5b:
75:a8:aa:77:29:9f:68:6b:bf:dd:26:27:6f:43:00:f6:4f:bc:
f1:c3:1b:99:75:31:77:c1:f0:0c:51:39:7d:70:f4:e6:c7:9f:
c4:cc:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org