Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148996.roa
File: AS148996.roa (raw, json)
Hash identifier: bIG6cF7w8h2S2nQugCJ2wddVSl3W9UGJwYPG1gy3FlA=
Subject key identifier: BD:D2:B7:86:FA:33:2D:32:D6:94:46:B3:90:D9:61:7D:4B:38:12:3F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3E1CA0D16E929F1A8BC47ABBE2A1470C3774DAB9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148996.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 148996
IP address blocks: 2a06:a005:60::/44 maxlen: 48
2a06:a005:70::/44 maxlen: 48
2a06:a005:2e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:1c:a0:d1:6e:92:9f:1a:8b:c4:7a:bb:e2:a1:47:0c:37:74:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=BDD2B786FA332D32D69446B390D9617D4B38123F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:97:e3:34:96:a9:c9:db:26:d1:d6:0a:6a:
c0:b7:a3:2d:73:c5:a3:69:00:35:26:fb:42:4a:d0:
30:d0:ad:fe:e3:dc:1d:72:74:ea:a2:1c:a1:87:1b:
32:b9:a7:c3:15:98:0c:21:05:63:3a:5d:0f:3d:76:
cd:07:32:d4:11:48:ad:40:04:84:89:9d:07:c7:5a:
bb:9b:68:11:02:6b:6c:0d:4a:6b:e5:93:af:74:df:
66:90:70:f6:bf:f8:da:ca:6e:49:11:06:e0:92:22:
fe:50:66:bb:6c:4e:a0:75:9a:2a:bb:3e:63:ee:82:
9c:b3:66:ec:e4:9d:9b:37:c4:ad:25:72:e3:fc:f0:
8e:e0:3f:8f:a0:87:5a:77:7e:f9:a3:62:8f:6d:46:
98:24:97:94:ee:75:5a:e6:3c:8a:c3:28:ca:05:a0:
ac:19:17:36:93:8f:0c:11:55:c4:9f:cf:91:2b:59:
29:fb:58:ec:d2:b7:cb:ea:7e:29:4c:02:cd:86:58:
9c:02:d8:d9:10:d2:a5:04:39:c8:9d:21:df:b3:e9:
86:4e:95:ea:af:b4:11:c4:a1:36:e1:88:68:49:ae:
11:51:87:2f:a3:2e:b7:a0:ff:6a:d3:82:9c:e2:3d:
18:ac:f5:5e:26:e1:80:0f:38:dd:63:6b:68:11:cc:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:B7:86:FA:33:2D:32:D6:94:46:B3:90:D9:61:7D:4B:38:12:3F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS148996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:60::/43
2a06:a005:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:7a:04:5b:ca:eb:0a:ac:73:3b:4f:be:1c:eb:1e:08:9d:35:
0c:09:26:f5:f2:2a:a6:49:2b:ad:fc:0e:02:cc:3b:6b:e6:80:
64:27:f8:da:10:6a:cf:8d:54:b8:2b:e4:3f:dd:dc:39:fd:2c:
7a:67:54:5b:d1:af:8d:84:d4:bf:ae:e8:2c:87:04:50:9b:be:
f8:b2:0e:cc:ea:64:e6:e9:a2:73:af:e4:a3:bd:7f:a8:78:e5:
e2:e3:f9:1f:40:c7:65:e3:9b:63:77:a5:46:9b:8d:c1:92:39:
34:69:a0:9a:67:e8:57:3a:0b:99:d8:3a:e0:a2:53:a5:66:dc:
12:c9:35:d7:35:25:57:77:49:20:d0:37:eb:b8:2c:4e:fd:16:
9d:ec:43:bb:a5:59:f1:45:f8:e0:4d:b2:1f:5a:45:df:fb:dc:
88:b3:a0:3e:9f:bf:36:d6:4e:1f:2d:5c:d3:9d:2a:43:9b:b2:
09:5d:fa:0e:7a:6b:c0:99:f5:9a:15:00:93:ac:f4:ea:cb:94:
b4:65:fd:b7:08:e6:29:bc:88:12:52:cd:6e:81:4b:9c:f1:62:
86:c3:3d:75:aa:00:8d:7c:51:84:0c:4e:26:72:8f:06:eb:8a:
17:f1:1d:2c:49:fe:ec:4c:0b:d7:f3:04:77:e7:7d:eb:50:0d:
74:73:68:12
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUPhyg0W6SnxqLxHq74qFHDDd02rkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTRaFw0yMzEyMzEyMzU5MTRaMDMxMTAvBgNV
BAMTKEJERDJCNzg2RkEzMzJEMzJENjk0NDZCMzkwRDk2MTdENEIzODEyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZR5fjNJapydsm0dYKasC3oy1z
xaNpADUm+0JK0DDQrf7j3B1ydOqiHKGHGzK5p8MVmAwhBWM6XQ89ds0HMtQRSK1A
BISJnQfHWrubaBECa2wNSmvlk69032aQcPa/+NrKbkkRBuCSIv5QZrtsTqB1miq7
PmPugpyzZuzknZs3xK0lcuP88I7gP4+gh1p3fvmjYo9tRpgkl5TudVrmPIrDKMoF
oKwZFzaTjwwRVcSfz5ErWSn7WOzSt8vqfilMAs2GWJwC2NkQ0qUEOcidId+z6YZO
leqvtBHEoTbhiGhJrhFRhy+jLreg/2rTgpziPRis9V4m4YAPON1ja2gRzBRjAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUvdK3hvozLTLWlEazkNlhfUs4Ej8wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMTQ4OTk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcFKgag
BQBgAwcEKgagBQLgMA0GCSqGSIb3DQEBCwUAA4IBAQAsegRbyusKrHM7T74c6x4I
nTUMCSb18iqmSSut/A4CzDtr5oBkJ/jaEGrPjVS4K+Q/3dw5/Sx6Z1Rb0a+NhNS/
rugshwRQm774sg7M6mTm6aJzr+SjvX+oeOXi4/kfQMdl45tjd6VGm43Bkjk0aaCa
Z+hXOguZ2DrgolOlZtwSyTXXNSVXd0kg0DfruCxO/Rad7EO7pVnxRfjgTbIfWkXf
+9yIs6A+n7821k4fLVzTnSpDm7IJXfoOemvAmfWaFQCTrPTqy5S0Zf23COYpvIgS
Us1ugUuc8WKGwz11qgCNfFGEDE4mco8G64oX8R0sSf7sTAvX8wR3533rUA10c2gS
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org