Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141694.roa
File: AS141694.roa (raw, json)
Hash identifier: V9MpErQ04SwoG+bsXwqcAoFmhSfcSwL1n8nU9WEghFo=
Subject key identifier: A9:98:12:3D:7D:9D:F3:41:6D:7F:95:97:90:E1:04:4C:B2:F7:15:95
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 43BC334A3A5EF22D968BF9333A81063765136500
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141694.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 141694
IP address blocks: 2a06:a005:f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bc:33:4a:3a:5e:f2:2d:96:8b:f9:33:3a:81:06:37:65:13:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=A998123D7D9DF3416D7F959790E1044CB2F71595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:d8:9b:73:c2:d7:b6:77:a6:8c:81:00:17:
e5:45:6a:0d:c2:65:c4:9c:f0:9a:09:c5:c7:42:2f:
8a:fc:62:4a:6a:22:7d:2a:1b:dc:c9:0c:02:e3:e0:
33:dd:49:23:46:6d:c6:80:f9:e9:01:c2:37:7d:48:
93:b5:be:a9:8b:3a:c8:3f:28:ad:9c:0c:d8:b9:aa:
6f:8e:59:34:f6:fe:c7:e0:a5:3b:4c:30:3d:a1:f6:
ff:67:61:a4:34:d2:67:b9:91:1c:e9:ca:ec:3b:d1:
20:35:bb:68:33:bb:f2:52:37:24:da:39:49:a8:1a:
89:ea:c2:1d:c3:a0:ef:a0:e6:56:84:c7:71:15:a4:
28:6b:17:67:6c:6e:de:c7:13:5b:96:de:9b:4f:67:
6c:ef:06:69:7a:9f:49:e0:25:22:60:8a:10:dd:c4:
33:a3:14:58:e4:c0:0c:f7:da:31:c8:7f:c9:88:91:
b7:3e:dd:0d:f8:80:1a:db:87:fe:91:da:f1:c4:05:
7c:1e:bd:7d:94:2b:93:99:b2:10:33:c0:ef:f4:a3:
9d:8d:e8:f7:19:38:6e:64:89:dd:8b:53:c4:3a:73:
5f:45:dd:3a:7b:15:58:fc:9a:69:7d:69:6f:b3:29:
00:62:c4:77:4c:b8:ca:9b:79:20:c0:5f:35:49:15:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:12:3D:7D:9D:F3:41:6D:7F:95:97:90:E1:04:4C:B2:F7:15:95
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141694.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f0::/44
Signature Algorithm: sha256WithRSAEncryption
51:66:83:7b:00:16:5e:30:8e:1e:29:d6:0d:49:c3:f2:17:d8:
36:80:a2:39:81:07:e6:b4:3e:8d:99:6c:87:91:57:1b:96:45:
fb:47:3b:d5:b1:82:7f:7d:22:95:18:8a:9d:a2:66:ce:a2:68:
41:4a:37:fb:77:c4:70:99:ef:20:b6:2b:07:51:cd:e9:e8:87:
61:bf:b6:74:24:4e:d5:1b:ae:e9:9e:da:0c:6f:fe:e5:dd:e8:
80:37:18:fb:7b:01:c1:e3:c8:e4:73:6e:a0:b8:a0:ae:7a:78:
9d:f6:48:8d:9e:fb:3e:01:49:f8:cd:db:2e:db:6e:29:13:c4:
d8:f5:46:4d:58:0e:34:92:fd:33:cd:18:33:8c:8a:19:6a:00:
96:6a:5d:58:16:50:de:c7:60:94:c8:5c:0f:16:c1:68:d0:c8:
06:40:be:e5:32:09:59:41:42:27:00:44:fe:a3:61:12:2e:e1:
0e:fd:63:99:a6:2f:98:27:77:36:cc:84:6b:8a:a6:04:91:3f:
e2:2f:b3:e1:38:cf:59:14:8d:13:18:51:27:de:9c:12:1e:96:
c3:6d:15:94:bf:b1:40:ac:7e:e0:7f:ea:a0:bd:9a:be:a4:f7:
a0:40:9e:fa:32:47:64:37:8c:5a:57:63:a3:2f:91:58:d1:62:
2c:32:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org