Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142289.roa
File: AS142289.roa (raw, json)
Hash identifier: TKth6nDq3pl1d6HhqMa43Q8PnQKjCC4CQhknB8mcpwk=
Subject key identifier: 58:94:1A:76:09:53:EA:95:02:20:F2:EA:17:EF:1D:40:55:B7:32:16
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 019175F99705BF63324F5615A4B38B923FA6AE77
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142289.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 142289
IP address blocks: 2a06:a005:700::/44 maxlen: 48
2a06:a005:a30::/44 maxlen: 48
2a06:a005:a40::/44 maxlen: 48
2a06:a005:a50::/44 maxlen: 48
2a06:a005:a60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:f9:97:05:bf:63:32:4f:56:15:a4:b3:8b:92:3f:a6:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=58941A760953EA950220F2EA17EF1D4055B73216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:36:2b:58:07:98:10:41:fb:fa:45:0c:b8:
bb:21:64:5d:0d:38:b0:b2:98:bf:ab:da:4b:8b:c2:
bf:d9:9e:b6:9e:c1:48:2d:33:b8:d9:d3:d1:cd:8a:
4f:9d:a9:da:8b:d7:67:d9:02:f5:f4:e1:b9:f6:0b:
48:95:bd:8d:01:42:9f:96:bb:03:1a:a5:dc:02:d6:
ec:a2:75:35:d6:41:e6:52:e1:8a:bc:1a:60:92:95:
c5:82:86:3a:b3:e1:cc:90:ce:cc:7a:6a:bf:18:d1:
7c:5c:e9:7c:26:96:18:37:18:3e:28:b7:c9:41:ea:
08:f4:33:1a:02:1d:fc:4c:74:16:6a:1b:5b:65:93:
06:b1:00:6d:de:de:dd:45:49:a6:97:e2:62:75:c6:
e7:ca:0d:33:d7:e9:c7:53:cb:53:bf:34:04:47:d2:
42:48:7b:11:75:d2:a8:4d:a2:fd:f0:3f:87:de:33:
ea:40:e6:82:2b:95:77:38:cf:10:05:90:7c:22:39:
04:64:bb:cc:e8:44:f0:9e:91:eb:09:f5:9b:c0:da:
23:7a:ad:16:93:75:c8:94:a0:97:8b:f7:92:1f:df:
69:c2:f5:98:a1:5b:68:02:0f:4c:52:60:7e:7e:cd:
10:14:f1:1c:ab:69:21:df:d4:4c:67:7b:21:c0:05:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:1A:76:09:53:EA:95:02:20:F2:EA:17:EF:1D:40:55:B7:32:16
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:700::/44
2a06:a005:a30::-2a06:a005:a6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:0d:20:c5:a7:33:f2:1c:19:6a:a5:02:30:9c:28:4e:65:a8:
d4:54:c3:a8:ef:b9:69:b1:e3:45:20:94:4e:6a:cb:e5:06:b9:
14:0d:2b:81:df:f8:fc:8b:3d:f1:a2:1f:50:b1:4f:29:27:0b:
cf:13:1d:e1:d0:df:64:bd:ac:ef:06:13:e8:57:92:41:c3:a5:
50:14:06:bf:b1:cc:b7:90:ac:7b:71:89:56:0c:cc:3c:9c:60:
80:ed:44:5f:92:0d:6b:cd:10:2a:ef:5a:7b:15:d4:81:28:10:
aa:e2:f0:d4:ae:b4:67:01:89:f6:a9:d5:5a:f5:30:c7:a9:6c:
32:eb:3f:9f:a7:ef:aa:f2:9c:61:fe:b8:99:e6:e2:61:ae:d3:
02:cf:2c:83:ad:10:7e:08:b5:e4:01:7f:9c:e5:7c:36:11:8e:
6e:d3:5c:61:b6:e4:ea:f4:97:0f:10:93:94:0c:68:aa:7a:71:
a2:cf:5d:31:22:89:85:3e:05:fa:77:e5:d9:ca:f1:74:76:22:
9f:f3:b4:00:a6:54:ff:a3:8b:5a:f2:be:df:07:9c:ae:84:4c:
5b:99:71:32:d7:bb:ab:d6:30:af:1e:ef:27:1c:6e:1b:4a:c0:
59:50:29:3d:de:dc:76:2a:3c:5d:6d:bf:0e:70:65:23:17:48:
33:4a:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org