Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142553.roa
File: AS142553.roa (raw, json)
Hash identifier: J0PLBRflt3IsBjW17JMzmor5Ur64d/+uOuGK4Pmp+3M=
Subject key identifier: B9:E3:5E:BC:87:44:11:54:77:72:95:00:63:78:45:D9:29:61:38:BD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 58093CE00AC49EDC8328BF2D68BEAD3B0F3221FF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142553.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 142553
IP address blocks: 2a06:a005:560::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:09:3c:e0:0a:c4:9e:dc:83:28:bf:2d:68:be:ad:3b:0f:32:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=B9E35EBC8744115477729500637845D9296138BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:69:0a:17:75:f5:45:a2:e7:5b:ff:6f:e5:
77:11:6d:22:df:cb:5e:19:62:d6:01:5a:ae:4c:ce:
ac:86:94:ac:28:e8:9e:1d:86:7b:b4:5c:6c:47:1d:
df:0c:e0:23:e9:d2:3a:24:c3:9b:b6:b0:26:81:b4:
7b:8e:7f:c0:7c:f3:f2:0a:db:d3:e9:d3:71:62:63:
e2:b4:be:53:1e:36:73:af:65:9a:b6:ca:04:66:2e:
b1:bd:6e:c9:3c:f0:de:4c:9b:c8:97:83:c8:b8:d7:
bb:27:9f:a1:2f:1e:3d:d7:61:89:26:f5:dc:08:6a:
e8:09:98:82:ae:1c:39:a1:b0:6e:94:e9:7a:4f:78:
57:c3:fd:79:28:aa:75:6a:b1:a3:b4:51:66:79:22:
79:0b:93:5a:e6:e2:56:f6:97:f9:38:ce:37:8f:27:
a9:54:18:30:ff:c5:21:c3:4e:72:10:91:6a:7c:16:
f7:ae:4f:cf:47:f9:63:cb:3e:65:2e:bb:7f:3f:da:
02:e0:cc:01:f7:dc:83:40:dc:9d:d3:0e:72:40:76:
81:69:36:da:87:fe:8a:ec:d0:49:58:be:6d:72:6e:
db:7a:13:99:a2:56:d2:ea:d7:c4:cb:e1:d4:72:d6:
24:25:90:93:5f:09:a5:2f:82:8c:1f:63:bb:21:17:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:5E:BC:87:44:11:54:77:72:95:00:63:78:45:D9:29:61:38:BD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS142553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:560::/44
Signature Algorithm: sha256WithRSAEncryption
76:c6:65:3a:e4:83:c9:df:27:a0:64:67:14:ed:7a:25:84:2f:
e2:ee:29:c7:f6:e4:dc:89:5c:f3:10:3b:a0:87:ec:de:0c:ad:
1d:00:31:a9:8f:05:14:cf:3b:ea:ee:a4:ee:15:2e:c8:0d:92:
63:1f:e2:37:81:e7:5d:56:67:15:60:cc:34:c6:5c:0c:09:04:
29:3a:c0:fa:f6:62:c6:da:ec:1a:63:cc:7c:b4:54:25:41:6d:
71:dc:eb:c6:56:af:56:a2:80:3b:fa:7d:b6:a0:ce:e1:23:2b:
3b:b2:0e:5c:43:64:71:8a:04:1a:31:f4:f7:bd:94:cd:be:e0:
e4:09:61:e1:75:5b:38:b8:ab:37:2b:2e:57:e2:b4:46:db:22:
6f:b5:b2:c9:f9:2b:02:3e:80:96:27:bf:aa:0e:bd:35:1b:f4:
7c:ef:6c:1b:57:7d:06:48:2e:d7:fe:7c:25:c9:f1:a5:86:14:
69:eb:80:32:96:20:c7:c0:e5:bb:a3:15:85:54:5f:f0:ad:8f:
08:37:c4:5b:b1:3a:e5:34:8c:11:88:f6:88:38:b4:3f:1e:14:
68:61:27:64:07:35:26:1c:44:8c:ea:36:21:71:38:79:e2:53:
2d:ff:31:ad:d7:36:2f:a6:6e:7e:ad:62:a3:76:7c:f9:66:cb:
5f:16:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org