Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149296.roa
File: AS149296.roa (raw, json)
Hash identifier: Lvk8dVh222d5pWFnC0V+/Tiz6vcb7mX6s3+zl9u9atw=
Subject key identifier: 2C:B2:97:1C:76:50:93:87:50:74:C7:8D:87:B5:B6:A5:42:C6:15:B0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 74D07E6F2B38E6573E72A3F500C499368333AD27
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149296.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 149296
IP address blocks: 2a06:a005:3c0::/44 maxlen: 48
2a06:a005:3d0::/44 maxlen: 48
2a06:a005:3e0::/44 maxlen: 48
2a06:a005:3f0::/44 maxlen: 48
2a06:a005:410::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d0:7e:6f:2b:38:e6:57:3e:72:a3:f5:00:c4:99:36:83:33:ad:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=2CB2971C765093875074C78D87B5B6A542C615B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:37:34:98:ae:eb:0e:d7:9b:67:10:fc:c7:
50:89:66:db:04:c1:a3:30:6c:45:0f:9d:95:e5:de:
2e:7e:1e:3f:1a:16:92:4a:ce:4e:50:2b:07:61:f9:
59:d4:32:0b:2e:cb:80:f2:2d:33:c4:dd:d6:b9:4d:
ed:58:0a:87:dc:e1:12:53:ab:37:40:38:a8:a2:df:
b4:ce:a3:cf:90:06:0d:1a:c9:82:80:9d:3f:83:8c:
33:34:56:83:4b:dc:c7:a1:47:a3:05:60:75:36:57:
45:fb:3d:26:69:24:80:5a:c9:a7:89:d0:4d:15:fb:
5b:8e:97:98:8d:99:ee:32:8d:48:b1:87:ef:47:e9:
f6:08:88:9e:5e:d8:f6:9b:0d:47:24:e8:d7:78:1c:
d5:22:e3:df:74:cc:71:26:14:42:69:07:89:c5:77:
8f:03:cc:3c:e8:34:86:4a:27:f8:b3:cd:18:51:29:
20:cd:66:f6:f3:1e:8f:f5:b6:7b:fb:32:99:22:4b:
05:17:ba:4a:fa:f5:dd:01:bf:e0:c7:3e:fa:73:bc:
c2:d5:11:7b:e6:bb:10:cb:b5:4f:ca:de:b3:21:5f:
09:22:e9:54:db:df:4c:cd:b7:2c:b9:74:78:2f:24:
70:0c:25:46:bb:97:3b:98:cd:01:a5:67:a2:23:ef:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:97:1C:76:50:93:87:50:74:C7:8D:87:B5:B6:A5:42:C6:15:B0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3c0::/42
2a06:a005:410::/44
Signature Algorithm: sha256WithRSAEncryption
2a:2c:74:66:65:bc:d6:88:9e:c8:d6:9e:d9:96:69:89:e7:17:
02:b4:2f:8f:2a:d8:12:70:69:7f:3c:0e:e5:26:80:32:dd:e8:
bc:91:8d:e2:8b:90:74:92:8e:68:90:47:67:3a:f6:76:f7:e0:
cb:ae:8b:ca:dc:63:80:44:0c:20:8e:0d:88:c2:42:a4:06:1f:
52:eb:a4:66:16:f4:23:c4:48:b2:ce:49:7a:40:57:08:b2:e0:
f7:73:ca:db:ae:79:85:a7:dc:db:be:5b:83:27:40:80:1e:26:
1e:54:61:22:69:16:4c:53:d8:a8:26:ef:b2:0a:37:7b:d3:59:
84:6f:c5:07:1a:8e:84:8f:9b:ff:02:aa:45:ab:f5:b2:d0:05:
f5:bf:23:75:ee:c9:28:6f:bb:b9:25:70:f8:e1:6c:af:32:c7:
d8:eb:7d:ae:89:e1:a7:cb:37:00:d6:0b:3b:9d:f8:f7:f0:d2:
fe:75:f8:6e:d6:57:91:24:90:f0:74:01:87:52:a7:fc:d5:46:
d5:ab:a6:96:e0:80:da:98:eb:3c:55:c9:22:3f:d5:bd:25:1d:
d6:97:0a:ff:f0:80:72:a7:8a:ae:10:5f:b7:59:5d:05:7d:6f:
c7:7f:e6:34:67:8a:75:fd:8e:6a:0f:ed:af:4d:6b:68:45:71:
2a:67:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org