Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141776.roa
File: AS141776.roa (raw, json)
Hash identifier: ctO1/1eZPBrf7nQltZOCoRYK1I7Zj+8Am0ng2G11PLI=
Subject key identifier: 91:6A:4A:D3:7F:5E:C6:95:AC:89:23:B5:5D:58:2B:5A:6F:B2:66:F2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1DEC5CA21798CAA5781AD8886073F9148807D9DB
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141776.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 141776
IP address blocks: 2a06:a005:100::/44 maxlen: 48
2a06:a005:170::/44 maxlen: 48
2a06:a005:340::/44 maxlen: 48
2a06:a005:630::/44 maxlen: 48
2a06:a005:640::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ec:5c:a2:17:98:ca:a5:78:1a:d8:88:60:73:f9:14:88:07:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=916A4AD37F5EC695AC8923B55D582B5A6FB266F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:ef:60:ac:2b:b4:bd:73:b4:a4:38:35:f7:
9c:e4:bf:c2:5b:e4:f8:0e:e4:67:f3:17:ec:1f:c6:
ca:3c:f0:d9:b4:8e:d0:9b:27:8c:10:14:04:d3:8c:
e1:ed:2e:08:06:e0:8c:ae:83:4a:5a:5d:4c:46:15:
6c:42:c2:68:ab:2f:b9:cc:98:8b:1d:fa:bc:56:44:
6c:88:15:69:61:99:dd:47:7c:10:c9:0d:31:6a:45:
85:db:a1:6a:1b:e4:51:91:9e:1e:ad:d3:4d:54:aa:
43:fc:82:c0:6d:ca:e5:06:76:e0:0b:db:4c:ca:3f:
70:54:72:b9:14:28:34:d4:26:f3:16:05:ed:60:38:
a3:05:f5:f6:b3:9a:95:41:29:cd:23:71:85:41:9d:
4d:4f:ac:ac:d3:31:68:f1:5b:7e:2d:25:22:cf:c0:
23:28:cc:be:fa:77:5c:05:29:63:f3:ec:00:69:91:
8b:8b:20:83:1e:3b:9a:14:9c:33:4c:01:7e:a1:b4:
bd:fa:64:26:54:44:0c:08:12:d8:78:50:1d:fe:1f:
29:23:67:46:b4:e4:2d:aa:7e:65:8a:cf:28:c2:24:
7c:37:0d:84:56:21:7f:ac:3f:8a:b5:31:68:22:31:
c7:47:c8:e5:70:e0:e9:a8:c1:af:63:b9:ed:ed:af:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:4A:D3:7F:5E:C6:95:AC:89:23:B5:5D:58:2B:5A:6F:B2:66:F2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS141776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:100::/44
2a06:a005:170::/44
2a06:a005:340::/44
2a06:a005:630::-2a06:a005:64f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:ae:f4:96:82:b6:a9:05:ff:48:58:d2:32:16:c3:c0:16:e1:
86:5a:6f:3e:1e:25:4e:59:c0:de:b2:17:56:f7:d4:60:6c:88:
b5:6f:71:5b:8f:dd:db:33:13:1c:97:f6:f0:6f:07:ed:5f:00:
3c:9b:07:60:39:4e:e5:bc:8a:5b:ff:a5:f2:97:70:fe:8d:78:
72:a3:8e:3d:e1:a7:f3:c7:1c:26:2e:ed:38:66:7c:8b:89:19:
87:d5:7b:f5:9b:38:02:35:88:a0:39:25:ef:a3:45:62:6f:e5:
84:4e:b4:89:36:18:59:3f:4c:3d:e8:15:28:c8:8c:1c:67:4d:
a3:9a:13:d2:e3:84:ba:b5:b0:28:ae:20:f9:02:3f:8d:e8:91:
a8:b5:64:90:56:b6:22:f2:08:10:d8:c4:5f:c0:83:fc:10:26:
cf:16:2a:91:d1:7b:8f:23:11:7a:e8:fb:e1:61:ec:a7:a1:a0:
c3:57:9c:77:d6:be:30:b3:cb:93:4b:23:6d:4d:8d:52:c1:88:
7f:22:62:c1:29:62:4d:0e:e6:b1:5d:66:64:67:7b:93:8c:50:
d4:a4:bd:28:4c:28:ff:48:fa:8f:7f:09:cc:f8:cd:63:95:ee:
c5:49:c4:2a:9c:57:89:d5:4a:4d:e4:ac:3e:26:20:6f:ba:4e:
fc:15:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org