Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149953.roa
File: AS149953.roa (raw, json)
Hash identifier: YEXABNRQloA/rqDvhmeDwV9pTH5AFCSNi2E374BzA74=
Subject key identifier: 91:DF:00:63:5E:A9:B0:11:6A:AE:64:50:E5:E4:13:05:38:2D:A8:B2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1B56F2F3CDF7A61673BDBCA957C3F3B889D111A2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149953.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 149953
IP address blocks: 2a06:a005:d2e::/48 maxlen: 48
2a06:a005:1081::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:56:f2:f3:cd:f7:a6:16:73:bd:bc:a9:57:c3:f3:b8:89:d1:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=91DF00635EA9B0116AAE6450E5E41305382DA8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:ab:a4:be:3e:c7:81:7b:99:b9:c9:b5:5a:
35:de:28:af:16:0b:1d:89:c4:26:dd:61:57:73:61:
69:74:51:16:ac:9c:f1:83:62:7f:68:c6:3c:69:c2:
d0:a2:a1:17:dd:b6:7e:e9:b4:91:b3:3a:8b:42:66:
80:87:1c:2f:7a:cc:dd:fc:1b:77:49:0e:5b:72:36:
8d:cb:87:de:97:22:88:20:be:82:ff:48:75:c9:03:
61:93:82:6f:cd:f1:2d:d6:e1:eb:55:d8:e5:be:50:
89:9f:e2:76:ea:87:40:aa:aa:8d:d9:56:e3:db:ec:
34:2e:77:70:75:e5:dc:56:37:11:d5:b4:29:a5:89:
c3:32:98:6d:54:69:53:3c:9e:19:8a:98:c1:3f:5e:
82:a0:10:0a:cb:f9:d2:88:5b:ad:3e:db:17:aa:a8:
03:43:e5:4a:52:30:93:cc:e1:a8:05:89:aa:28:9a:
8a:45:57:36:3d:36:1a:d1:05:cf:dc:e0:ba:d0:8a:
f3:2a:8b:06:c5:21:47:05:53:75:04:2e:29:1e:ce:
c8:2d:89:07:88:3c:cc:0c:b9:8a:1e:de:9b:00:37:
58:bb:ce:73:28:2a:75:30:f2:bb:4c:7e:14:c5:da:
70:45:6d:74:90:09:1b:93:64:95:c2:d9:c2:f7:c4:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:00:63:5E:A9:B0:11:6A:AE:64:50:E5:E4:13:05:38:2D:A8:B2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS149953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2e::/48
2a06:a005:1081::/48
Signature Algorithm: sha256WithRSAEncryption
61:c1:25:8d:94:a2:f5:79:20:62:e5:4c:d4:f4:cc:ee:80:91:
67:7d:46:9c:29:43:33:3d:7d:09:3b:fe:9e:fb:11:d3:b9:d1:
5e:97:2b:2e:8a:89:e7:1b:b7:8e:41:db:69:16:54:87:66:9e:
6b:6d:d7:8a:c3:12:4c:67:3c:55:31:6f:29:76:12:82:04:8c:
73:09:d1:cb:21:09:0f:7c:27:ca:c5:0e:d5:25:7f:9b:06:7e:
55:10:a4:75:1b:54:65:88:45:a3:fb:31:0a:45:eb:e6:c0:4c:
03:02:27:aa:db:e3:7a:9a:63:df:95:46:ce:00:d3:b5:69:47:
15:54:e3:83:7c:92:29:d5:73:6b:03:46:7c:23:d4:96:78:c3:
99:78:b3:bc:a8:b0:79:14:33:2a:6e:e8:77:d4:74:70:c7:ce:
c2:2a:c2:34:69:f2:92:c9:9c:ed:06:13:b9:e8:2a:65:5a:c1:
a9:28:60:bd:7d:8c:25:80:48:c9:83:51:7a:0a:e3:d8:db:85:
1a:81:2c:44:8a:b9:c7:b6:1f:e8:3f:e7:16:9c:59:16:ef:0c:
7b:60:9c:e6:27:18:5a:d4:a8:d8:9c:cc:7a:80:07:5a:3e:8f:
ab:e2:b8:87:30:58:ea:14:12:c2:a8:3e:48:19:7b:0e:99:4a:
e4:fb:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org