Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142419.roa
File: AS142419.roa (raw, json)
Hash identifier: b139pV/oxIfD+Eui4fqMLuDw0Y4J/teyXVTSO8yrUqc=
Subject key identifier: 5F:19:5F:22:93:48:88:14:B1:83:89:CB:2D:34:D0:50:FC:99:90:83
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1B225266045C260B50104DA2D31C9DF9BD46CD23
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142419.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 142419
IP address blocks: 2a06:a005:1c10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:22:52:66:04:5c:26:0b:50:10:4d:a2:d3:1c:9d:f9:bd:46:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=5F195F2293488814B18389CB2D34D050FC999083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:f7:c6:8f:fd:82:0d:f8:de:fd:63:84:e0:
76:ae:d7:18:e0:76:0c:b0:dd:85:98:47:e6:9b:8b:
d0:72:82:e5:01:30:01:b6:68:97:65:f2:92:e0:c1:
fb:85:cf:3b:f7:78:58:f6:2a:f0:3a:c3:04:bb:f0:
00:e3:63:c9:05:56:ad:19:29:a2:2b:94:5b:10:f7:
af:3a:5b:5a:08:25:53:ad:e0:54:82:0d:7e:75:fa:
24:34:3c:6d:41:2d:a9:28:ed:af:95:a6:f7:a5:d2:
f5:c5:2c:94:ec:6f:c4:9b:49:5a:e4:4c:c7:2a:04:
85:b5:23:61:ba:18:3a:c8:d1:1e:1b:43:2d:29:0d:
be:f4:34:bc:c8:55:cf:1f:0a:2f:c7:dd:83:4f:e6:
2b:72:c4:75:d8:06:62:ec:df:eb:02:12:46:c2:d1:
c1:89:e4:93:2a:74:d7:2a:88:24:98:d8:e0:c5:ea:
1e:01:1a:8b:ae:cf:62:fd:bc:87:08:0c:0a:f2:08:
98:f9:84:79:0a:7a:0e:e0:9c:ac:47:c7:ce:0b:0e:
47:f8:3e:36:f7:d3:34:92:6f:2d:a1:a0:a8:06:74:
0c:31:56:c3:a5:95:a6:7e:66:3a:86:5f:a9:90:b5:
98:11:be:02:6b:49:0d:ec:8f:57:51:f6:1d:fa:24:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:5F:22:93:48:88:14:B1:83:89:CB:2D:34:D0:50:FC:99:90:83
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c10::/44
Signature Algorithm: sha256WithRSAEncryption
63:47:d0:4e:88:e2:11:4d:05:5a:8c:8d:4e:ae:99:09:02:58:
cb:16:52:e0:62:5c:ca:41:7f:19:73:6f:20:eb:3a:98:3f:2c:
8e:c6:e0:29:21:fd:a9:1e:bf:98:ea:a1:7e:06:82:68:de:77:
d4:c5:d9:06:5b:9e:97:5c:0e:9a:43:60:79:e0:26:a6:0e:29:
45:18:9f:b8:88:c1:3a:9e:55:d1:cb:f1:7a:b1:0b:11:42:25:
7c:22:cd:92:86:79:a2:05:fa:ee:ec:7d:b2:97:11:49:7f:6f:
f5:f6:65:ea:d1:9b:e4:5b:55:6b:34:7f:ea:f2:6a:d5:3a:34:
3e:5c:04:6a:49:1e:e7:4b:bc:0d:c8:5e:36:ab:30:9a:4d:2a:
d9:49:48:3f:50:78:d3:6c:4c:1b:49:9a:58:81:dc:2b:9d:aa:
ad:c3:ba:88:91:af:0a:e8:78:7e:a2:e6:35:0a:25:82:9a:7b:
1d:6c:1c:b8:b6:d3:39:46:72:e6:07:be:62:77:3c:3c:d3:47:
88:9b:70:2a:ac:ce:5c:a4:32:67:05:fb:71:d0:ac:e7:11:7b:
b1:8a:4f:4e:dc:07:4d:e8:36:87:cf:c7:0d:75:e6:18:61:cc:
6b:94:22:08:83:52:f9:0a:22:84:56:fb:a9:98:4f:f9:16:5f:
c0:a9:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org