Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS140506.roa
File: AS140506.roa (raw, json)
Hash identifier: /RfgELaAuofSpinXj8Yju8MWqoZvhzxFHvKuVFY4wl8=
Subject key identifier: 8B:DF:3F:63:48:AA:DA:81:34:14:A6:E8:C2:81:7C:98:A1:A2:51:AD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2C4E963F34B99FBE1951EF7BC5DDC06EAC37D85D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS140506.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 140506
IP address blocks: 2a06:a005:d70::/44 maxlen: 48
2a06:a005:e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4e:96:3f:34:b9:9f:be:19:51:ef:7b:c5:dd:c0:6e:ac:37:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=8BDF3F6348AADA813414A6E8C2817C98A1A251AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:45:90:0a:53:e0:e1:27:01:a5:63:3c:67:
80:38:23:a2:e8:4b:8e:3f:00:7a:77:b8:d8:9b:d0:
47:3f:60:54:b5:d8:8d:6d:83:21:2a:10:6f:0d:27:
61:2d:e3:25:d6:b1:58:b8:4f:ab:74:43:c2:26:a7:
a4:77:a0:37:7a:d0:92:08:e2:59:32:d2:a0:cf:48:
de:16:71:a7:61:c1:45:e6:8f:a0:69:b1:e0:a6:f5:
87:47:ee:91:c5:91:74:38:83:e1:d8:af:21:95:e0:
4b:7e:b7:7a:da:47:08:56:ce:69:d3:61:a2:37:92:
58:ed:05:cc:74:c1:9c:c4:1e:f4:20:6e:2f:c4:1d:
98:c3:f5:54:8c:53:99:4d:53:ab:56:f4:ea:e3:2e:
b6:1e:fa:10:7c:66:c5:21:ce:08:5f:89:28:da:7d:
85:4e:6e:41:fa:3c:36:e9:89:05:f2:58:cc:55:51:
70:69:40:3f:6b:30:77:36:56:f9:98:c4:d0:2b:ad:
81:7b:5e:ea:ad:28:2d:a0:b4:65:8e:05:d7:b9:b5:
11:b3:70:1a:0c:60:ce:07:9c:3e:a6:bb:b7:1f:d5:
e9:54:e2:fb:24:0b:dc:1a:22:52:41:00:75:cf:50:
c4:6c:71:32:4a:39:4d:c4:42:fb:f3:92:20:05:e3:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DF:3F:63:48:AA:DA:81:34:14:A6:E8:C2:81:7C:98:A1:A2:51:AD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS140506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d70::/44
2a06:a005:e60::/44
Signature Algorithm: sha256WithRSAEncryption
08:fa:a0:ca:a0:f4:7a:e5:d3:61:19:6e:ba:c8:da:df:bb:3d:
68:b6:6e:bd:a8:2f:30:11:da:72:9c:88:df:65:c5:d6:51:88:
26:d1:0f:c4:38:c1:0f:29:c2:8a:2d:bb:b7:3f:5b:3e:15:66:
db:94:08:f7:16:af:13:5e:e0:d6:21:2b:2a:17:c3:6a:38:1f:
8b:bc:e3:e1:6e:20:3b:b9:a5:93:0e:5d:83:c2:b7:26:59:d0:
ff:9f:83:2f:73:00:ca:7f:fd:81:9b:cc:1d:af:7a:94:ce:e6:
ce:ca:84:66:a8:5c:af:0c:ab:ba:65:ad:55:8a:a0:8d:da:7c:
c5:5e:c8:e8:59:b4:15:10:9b:d3:06:5a:b0:83:05:26:8d:9c:
a3:25:2b:5d:5a:b0:37:8b:d1:a9:e2:db:36:54:0e:62:d7:ab:
92:7f:4a:c3:2c:77:76:d8:62:e3:87:1d:90:8a:f0:35:bd:66:
cf:bc:6a:ca:02:32:cb:db:02:72:08:1c:33:cc:46:54:df:9e:
95:5e:ec:7f:2c:f6:b2:2d:3e:b3:b5:37:16:12:48:de:d8:6a:
6c:74:27:2f:b3:8e:a5:1a:f8:f8:cc:27:03:50:26:bf:54:96:
ff:fb:18:96:37:08:a4:b1:71:a8:6d:c4:a5:fd:16:b8:37:7f:
0f:78:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org