Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149835.roa
File: AS149835.roa (raw, json)
Hash identifier: R7tVqMw/P1zWl+cWbFfyuQxPOGOu+ggYYQilOnpg2kA=
Subject key identifier: 99:2C:1C:4D:92:D1:D8:C6:F5:9A:9A:02:D5:A5:E7:07:6B:F3:A2:E3
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 67E6F79A95C11EA8DC5AB95C158F698114CB337A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149835.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 149835
IP address blocks: 2a06:a005:10a0::/44 maxlen: 48
2a06:a005:2850::/44 maxlen: 48
2a06:a005:2860::/44 maxlen: 48
2a06:a005:2870::/44 maxlen: 48
2a06:a005:2880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e6:f7:9a:95:c1:1e:a8:dc:5a:b9:5c:15:8f:69:81:14:cb:33:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=992C1C4D92D1D8C6F59A9A02D5A5E7076BF3A2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:1c:08:12:61:fb:03:23:4a:42:f9:82:07:
13:ba:a8:40:98:97:4a:c7:45:b1:41:7a:0b:3a:c4:
51:2a:8c:8d:90:b4:dc:9d:b8:0a:25:87:10:0d:ac:
72:af:78:56:de:7a:8e:9e:50:f0:70:ea:a5:77:c8:
cb:7c:1d:d4:27:da:c5:e3:d8:c6:d0:9d:77:d5:bc:
5e:43:f5:92:82:09:08:6d:e7:33:c0:5e:78:5c:c9:
76:69:33:b3:56:8b:2a:2a:fb:c6:3d:c6:aa:23:1d:
3b:93:34:9a:bf:0e:64:9b:4e:0e:e7:48:50:9b:39:
4d:30:d4:65:f7:77:71:d9:d4:fa:a3:41:29:5a:fa:
80:26:13:f3:1c:20:3b:c7:cf:7f:3f:a2:4a:f9:3f:
92:b7:37:e1:f8:c4:4f:00:09:5d:b8:9c:b3:ed:ed:
f1:c1:1b:6c:ed:49:cb:31:6f:bf:d2:6b:7b:1e:6c:
53:3d:12:57:7a:79:8e:50:e9:4f:42:06:5a:cb:90:
31:2a:b4:d0:5c:2d:29:72:2f:8d:30:a8:99:bd:ba:
9a:c3:65:ab:03:8f:14:28:94:6c:e4:cc:53:e3:e8:
7a:24:dc:73:ed:a8:95:9a:70:f4:e1:68:d1:40:af:
cf:ce:41:79:05:6c:52:d3:9e:c8:da:19:38:3a:64:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2C:1C:4D:92:D1:D8:C6:F5:9A:9A:02:D5:A5:E7:07:6B:F3:A2:E3
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10a0::/44
2a06:a005:2850::-2a06:a005:288f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:60:86:f7:7e:80:ab:65:b5:a8:3d:ab:51:7f:67:58:1e:93:
47:fe:a0:2a:1d:af:2f:f8:14:d6:50:90:91:21:69:ce:d2:68:
72:92:ff:7c:97:45:2e:d7:ca:09:0c:cb:f5:21:37:55:f6:49:
d9:d7:c8:2c:49:b7:92:ae:58:c3:94:25:40:9a:52:3b:11:30:
8e:8f:72:45:46:0f:62:32:ea:32:e7:b7:4a:e7:a9:d7:c3:ee:
80:6f:14:0a:8a:65:0b:63:97:07:60:4b:d8:1f:40:9b:4c:25:
fa:4b:da:e5:45:43:85:5a:b7:4f:01:10:65:4c:4a:d5:5e:5f:
9e:72:64:2c:11:1e:4a:50:b6:62:c6:c9:82:80:0c:77:dc:db:
72:50:01:da:64:44:7b:4b:28:0c:6e:4d:ef:0e:f8:8f:52:0c:
a3:cb:f1:45:a9:c1:40:8f:fe:bc:62:39:7f:d4:41:db:8b:73:
19:cf:ad:7c:17:6b:9c:09:bf:d4:bf:83:88:b2:cd:41:cb:7c:
bf:60:6a:34:3c:a1:5d:52:ec:88:80:8f:b3:34:64:e0:f8:09:
f6:2e:77:9a:50:91:08:75:f5:8e:3e:db:57:96:37:77:dc:3d:
37:d9:96:ce:54:df:a1:84:8c:39:25:98:b6:1e:81:b0:71:21:
66:f2:87:8c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUZ+b3mpXBHqjcWrlcFY9pgRTLM3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MDlaFw0yMzEyMzEyMzU5MDlaMDMxMTAvBgNV
BAMTKDk5MkMxQzREOTJEMUQ4QzZGNTlBOUEwMkQ1QTVFNzA3NkJGM0EyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8xwIEmH7AyNKQvmCBxO6qECY
l0rHRbFBegs6xFEqjI2QtNyduAolhxANrHKveFbeeo6eUPBw6qV3yMt8HdQn2sXj
2MbQnXfVvF5D9ZKCCQht5zPAXnhcyXZpM7NWiyoq+8Y9xqojHTuTNJq/DmSbTg7n
SFCbOU0w1GX3d3HZ1PqjQSla+oAmE/McIDvHz38/okr5P5K3N+H4xE8ACV24nLPt
7fHBG2ztScsxb7/Sa3sebFM9Eld6eY5Q6U9CBlrLkDEqtNBcLSlyL40wqJm9uprD
ZasDjxQolGzkzFPj6Hok3HPtqJWacPThaNFAr8/OQXkFbFLTnsjaGTg6ZBcJAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUmSwcTZLR2Mb1mpoC1aXnB2vzouMwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMTQ5ODM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcEKgag
BRCgMBIDBwQqBqAFKFADBwQqBqAFKIAwDQYJKoZIhvcNAQELBQADggEBACVghvd+
gKtltag9q1F/Z1gek0f+oCodry/4FNZQkJEhac7SaHKS/3yXRS7XygkMy/UhN1X2
SdnXyCxJt5KuWMOUJUCaUjsRMI6PckVGD2Iy6jLnt0rnqdfD7oBvFAqKZQtjlwdg
S9gfQJtMJfpL2uVFQ4Vat08BEGVMStVeX55yZCwRHkpQtmLGyYKADHfc23JQAdpk
RHtLKAxuTe8O+I9SDKPL8UWpwUCP/rxiOX/UQduLcxnPrXwXa5wJv9S/g4iyzUHL
fL9gajQ8oV1S7IiAj7M0ZOD4CfYud5pQkQh19Y4+21eWN3fcPTfZls5U36GEjDkl
mLYegbBxIWbyh4w=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:12 2025 by rpki-client