Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147297.roa
File: AS147297.roa (raw, json)
Hash identifier: +reUWYxSxAvxsZawMZ74QDeEQqi/fRIjnCNfdmrG/xw=
Subject key identifier: C2:7D:06:C4:3C:AB:40:16:50:11:A7:DA:47:CB:9A:26:73:90:34:F0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5E9A25619A53033A124A83E7DCAAAE55CE7E60EA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147297.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 147297
IP address blocks: 2a06:a005:48c::/48 maxlen: 48
2a06:a005:48d::/48 maxlen: 48
2a06:a005:48e::/48 maxlen: 48
2a06:a005:48f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9a:25:61:9a:53:03:3a:12:4a:83:e7:dc:aa:ae:55:ce:7e:60:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=C27D06C43CAB40165011A7DA47CB9A26739034F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:71:7b:4b:c8:40:b1:01:ec:c2:b7:8e:40:
87:1a:8f:5d:24:7f:c9:d2:74:68:a2:01:82:76:9c:
44:f1:69:13:84:ba:d4:96:95:01:e1:9b:ff:16:27:
d8:05:15:8f:c2:f3:fc:c7:22:51:ce:d5:ba:a4:25:
73:19:6a:a7:04:01:74:54:70:88:85:25:8f:ec:b3:
50:cb:a8:c9:b9:e1:e6:2d:67:e3:aa:24:d6:3d:44:
e5:57:27:38:97:fe:20:e4:dd:1b:0a:30:78:cb:13:
16:f0:db:55:8d:ca:13:7b:52:ef:22:b6:f7:0c:53:
e4:af:8d:5d:3e:a9:6a:48:f8:68:e1:30:79:a1:5a:
79:9f:f3:73:6c:d4:61:5e:ea:ff:b3:f5:ba:fe:30:
d5:f5:73:b4:ba:3b:79:72:4b:bd:c6:f5:eb:49:a6:
2e:9a:c7:40:56:09:6c:31:a8:44:ac:ec:09:02:e9:
3e:a3:b5:19:65:ab:f0:d1:f6:ce:d6:30:3e:a3:0a:
a5:a8:81:54:0b:9c:cc:e5:56:cb:9a:cb:4b:b4:42:
7d:6c:2e:52:2c:14:a3:de:63:ec:67:02:03:50:e1:
7d:30:5a:5c:56:c0:3b:cd:dc:ec:c9:a4:0e:17:a8:
fb:cb:65:58:7b:b6:5d:71:b0:87:a9:8d:b4:0b:bc:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:06:C4:3C:AB:40:16:50:11:A7:DA:47:CB:9A:26:73:90:34:F0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS147297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:48c::/46
Signature Algorithm: sha256WithRSAEncryption
3a:90:e0:07:d3:19:ef:72:80:04:dc:86:22:51:29:4b:d8:1b:
03:24:ab:8c:90:7c:b2:87:11:1d:c6:c6:9c:1a:bb:fa:ca:a2:
db:f9:3b:6f:3a:8e:95:fc:6a:04:18:1f:8c:8f:c4:b3:ed:d0:
bb:04:00:ce:1f:cd:63:b0:d6:95:21:84:e9:d8:d2:4f:9c:3e:
30:85:4b:a4:08:6b:7b:6e:c3:b5:8c:33:80:8d:5d:73:25:aa:
9b:00:3b:21:f4:ea:78:57:47:f5:ed:10:19:8c:9d:d8:47:ed:
77:ec:80:47:f8:94:88:9e:33:39:dc:7f:7e:81:56:e9:bf:d5:
a7:2e:df:d4:36:5c:0c:85:e3:5f:c2:50:5d:69:c9:a8:92:90:
2a:aa:74:a9:90:55:44:5c:fc:41:43:7f:83:5c:24:70:83:4a:
15:a1:76:67:98:28:0b:25:bc:60:af:86:93:b5:47:42:6f:29:
f1:db:9a:2c:2d:da:bf:77:68:5b:0e:d1:dc:68:66:86:ae:74:
8a:97:6f:a6:3e:9d:29:a3:41:ab:63:ea:ba:9e:10:fb:30:d7:
c1:8b:3b:b0:a6:b5:e9:54:e7:11:c0:c8:4c:0f:29:53:86:35:
2c:c8:3c:ad:04:d0:5e:ca:ce:f8:69:db:98:ca:28:c1:8b:ec:
47:85:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:52 2025 by rpki-client