Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147016.roa
File: AS147016.roa (raw, json)
Hash identifier: gWtbZzab8J+yocB17VJwNnzNfEAxsWrQtlWA7R+ewy8=
Subject key identifier: 96:B0:E6:2A:1B:8F:1E:3F:11:D9:1B:A8:8A:41:59:A5:82:A1:93:3E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4B038580CC2C7E96C9860AE48929A6A3D9B115B0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147016.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 147016
IP address blocks: 2a06:a005:baa::/48 maxlen: 48
2a06:a005:bab::/48 maxlen: 48
2a06:a005:1502::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:03:85:80:cc:2c:7e:96:c9:86:0a:e4:89:29:a6:a3:d9:b1:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=96B0E62A1B8F1E3F11D91BA88A4159A582A1933E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:7f:be:99:b0:78:bd:a7:17:73:eb:b4:33:
47:5f:b5:d3:f7:8b:2b:47:1c:06:82:0d:a2:4b:75:
67:3c:2e:c5:8d:87:b5:fa:7c:94:21:97:78:8e:a4:
dc:6e:3f:8c:11:3c:1b:5b:79:b7:0e:64:7f:c1:3f:
43:13:06:09:1c:b0:58:57:3e:2f:83:c8:1b:9b:10:
6e:e1:e6:87:7f:37:b9:11:e4:35:b0:3f:f4:06:a3:
e8:5b:0e:c8:1c:46:7f:2f:e3:f4:54:2b:72:47:03:
b9:ef:c9:6c:a4:63:fe:6e:74:c6:df:2e:c9:68:31:
59:c5:24:49:17:f3:7d:d0:b4:98:4b:87:9a:d5:da:
28:1c:08:53:2e:55:95:ae:b9:d0:20:21:68:fe:13:
ea:90:f6:2b:99:8f:33:6c:90:89:14:1e:d9:18:5a:
63:c2:ae:90:d9:cc:28:36:12:37:5f:dc:0a:c3:fa:
79:c1:93:ca:7c:8e:7b:a0:07:ab:a4:3f:07:23:a3:
90:f8:c2:6b:e3:bb:64:c3:68:be:cd:c6:16:48:51:
b3:88:0e:5c:1c:90:ec:26:75:5f:4a:0b:0a:73:ca:
db:ef:6b:42:02:48:7f:4d:17:b8:5b:f5:3c:8e:0b:
08:39:c8:76:94:8b:71:92:74:4a:c3:60:23:c0:c4:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:E6:2A:1B:8F:1E:3F:11:D9:1B:A8:8A:41:59:A5:82:A1:93:3E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:baa::/47
2a06:a005:1502::/48
Signature Algorithm: sha256WithRSAEncryption
53:97:a1:15:23:33:c9:48:c7:e5:1e:90:06:de:56:fd:f8:94:
1c:f1:b7:fb:00:6d:3f:3c:a4:52:4d:b7:4e:18:cf:d6:a7:8f:
7c:1c:66:30:5c:95:c5:ed:88:d8:31:1a:ef:1f:44:b2:1f:d2:
45:15:1f:4e:d0:85:0e:f3:2c:8a:df:c0:4a:02:3d:5a:66:0d:
49:24:93:0d:fc:5f:f2:93:5f:7e:9d:99:a3:e5:60:f1:eb:0f:
4f:c5:cc:54:db:68:48:65:bd:33:32:cb:02:1d:74:0a:6d:ff:
2e:a9:13:5e:21:52:ec:14:99:97:92:ab:dc:37:1a:e2:19:14:
94:e5:ce:94:f0:e9:c6:5d:c5:71:95:e8:ba:9d:15:38:72:c2:
b9:3b:0a:be:41:ff:f8:9d:14:f5:19:fa:67:1d:a9:93:c5:66:
db:c5:ee:7c:22:73:f4:ee:e5:a9:7b:da:9f:8b:a3:28:33:77:
1a:42:a1:50:59:32:a9:75:e9:fc:93:44:bf:29:a2:80:f9:2e:
99:86:6a:dc:1d:dd:2a:28:9d:f7:36:f9:7e:2d:9d:ae:03:25:
88:33:c3:5a:e3:05:11:3e:88:19:20:94:85:6a:e3:c7:95:6e:
2d:73:d7:f7:68:6c:a0:39:da:0d:b3:cf:f5:24:75:d6:0b:4d:
9a:83:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org