Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148971.roa
File: AS148971.roa (raw, json)
Hash identifier: nz4ob6RJ+d5qixU6js+dBVyjXRyxOFI4eHDxb+jxypA=
Subject key identifier: 58:54:AC:FB:74:0A:65:D0:CA:F4:7A:11:7F:6B:E7:7B:03:72:F7:D3
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7E865E883D9A6DAEE28D8846AF98C6928B42CCC1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148971.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 148971
IP address blocks: 2a06:a005:25a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:86:5e:88:3d:9a:6d:ae:e2:8d:88:46:af:98:c6:92:8b:42:cc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=5854ACFB740A65D0CAF47A117F6BE77B0372F7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:58:1c:ff:e3:dc:71:01:af:6f:c3:b5:42:
8d:cf:61:5c:e8:fa:c5:4d:45:fc:19:bb:8f:98:50:
d9:2d:5c:dd:d1:14:fe:8b:c2:3b:b5:da:9c:bc:07:
d1:2b:a2:17:f6:2f:9d:cf:b3:ac:5d:b3:98:97:75:
90:06:df:5a:85:e3:3d:9b:af:b9:79:3c:47:ab:8f:
c3:3b:74:a6:46:26:02:85:e2:e5:b8:ce:7b:59:09:
63:ff:00:af:8f:5a:6b:11:77:39:cc:de:a2:cc:25:
cf:d2:68:1b:79:7c:6c:aa:b3:d1:0a:52:4a:94:44:
a8:d9:f5:da:6d:d1:5e:32:97:68:78:d8:56:f3:f0:
a8:0e:a4:57:3f:37:b4:6b:fa:57:8f:21:1f:d9:53:
04:d7:f9:73:73:6e:e8:84:bc:2c:0c:6d:fd:32:c2:
46:47:78:38:4d:c6:50:10:9f:d8:28:bd:75:f5:d9:
b9:0c:96:e4:cd:ea:d3:1c:97:96:b8:dd:bd:a6:21:
f4:26:9b:77:bc:a1:f1:8e:76:4d:90:b7:4f:6a:3d:
fe:c0:3e:41:8a:d6:eb:6e:2c:d5:c2:24:2e:3c:c0:
a4:74:09:ad:a3:7d:29:cf:85:e3:48:ca:bf:a6:17:
17:d8:43:51:6f:61:1e:42:29:92:d6:0f:24:7d:ac:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:AC:FB:74:0A:65:D0:CA:F4:7A:11:7F:6B:E7:7B:03:72:F7:D3
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:25a0::/44
Signature Algorithm: sha256WithRSAEncryption
86:b5:5f:80:8b:36:d2:c2:4f:58:b3:53:6f:86:a9:23:eb:3b:
e7:c5:81:f1:21:1a:a9:02:13:01:c3:65:67:9e:af:0c:4d:82:
1d:2b:e8:19:66:59:ff:53:8a:f1:8e:45:88:11:59:77:0f:7d:
74:e3:16:9a:9e:02:3c:40:f7:df:b1:e6:88:19:67:62:97:28:
24:cf:1c:23:8e:a1:f9:39:b2:6a:cf:10:bf:3f:34:a9:85:36:
5f:54:d0:1e:29:10:d6:a3:94:3c:52:06:d0:87:29:fe:c2:5b:
6a:35:4a:8c:1c:c6:c0:eb:6c:c6:6e:47:ba:df:0b:75:79:2c:
4f:c5:e8:aa:ad:0e:dd:e0:53:46:c0:4d:8b:c7:86:64:5d:d6:
ff:a2:fe:e0:f3:07:16:c8:85:8d:12:13:25:fe:31:fc:2b:43:
9e:0d:e4:7b:32:c9:8d:c5:ca:57:e8:dc:ca:a1:c3:3e:28:0d:
19:76:23:a1:17:7f:4d:5f:27:43:ec:b8:cb:61:97:58:5d:9d:
51:46:f7:c9:21:42:02:29:ab:2a:4e:c3:d9:34:5a:f5:dc:46:
3e:86:81:2c:64:63:30:51:7a:06:8b:f4:c7:b3:f4:b6:be:0e:
b6:13:33:b3:4d:d6:84:13:0c:71:55:f5:48:b7:26:d2:06:ed:
7e:7a:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:10 2025 by rpki-client