Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150184.roa
File: AS150184.roa (raw, json)
Hash identifier: c+uKTeVVoW8x74ImFpmCNEsVFe/JgbXC4+UvQuAkotY=
Subject key identifier: 11:99:BC:BB:EC:39:89:72:FC:F4:C2:C1:38:43:98:7E:C9:94:1A:D6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 72607C9186741AB4B9D5E40D122D69399D6A65AA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150184.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 150184
IP address blocks: 2a06:a005:5f4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:60:7c:91:86:74:1a:b4:b9:d5:e4:0d:12:2d:69:39:9d:6a:65:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=1199BCBBEC398972FCF4C2C13843987EC9941AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:9f:bd:35:d2:6c:bf:7d:3d:02:f1:22:59:
65:26:89:5d:b3:1e:ac:cb:8a:4e:51:09:4d:81:49:
38:a9:8b:4b:db:3d:55:3d:c2:8d:61:4c:9b:2a:14:
2a:10:cd:88:b7:87:36:d3:91:aa:8f:ea:dd:f8:cb:
7a:83:52:ea:14:3b:02:87:0b:4e:02:60:51:d9:09:
e8:7a:5d:fa:3d:2f:1c:51:31:8d:e0:7c:80:14:b4:
5d:6a:f1:c5:76:dd:24:80:e0:b0:11:42:1e:dc:dd:
95:7b:39:f9:79:e0:ac:0f:8f:83:15:4c:50:ef:40:
1e:31:89:86:ff:e9:e4:b2:54:10:1f:15:19:d5:89:
e9:ee:12:9b:45:52:34:08:ae:31:2d:4e:6b:2a:6b:
86:fc:c7:e4:18:a6:68:15:45:9d:4d:05:ff:f1:e1:
3a:67:c2:f0:9f:92:40:13:f6:ca:7a:3e:e0:95:57:
ba:81:4f:31:ed:68:07:77:48:5d:ae:32:67:40:8e:
7e:06:cc:75:51:56:d0:82:7e:db:04:cf:ab:82:ec:
2b:42:ec:d2:cd:20:11:6d:2c:b7:48:03:67:c0:d8:
09:4f:44:87:62:e3:8c:8c:a5:21:93:58:36:43:21:
ef:ec:77:66:f8:1b:45:c1:f1:7a:93:2c:84:ad:ed:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:BC:BB:EC:39:89:72:FC:F4:C2:C1:38:43:98:7E:C9:94:1A:D6
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f4::/48
Signature Algorithm: sha256WithRSAEncryption
47:66:ef:04:a9:cf:4a:9e:9a:27:ac:25:06:5c:ff:56:ce:ee:
3b:e1:62:38:34:b7:43:6b:80:f9:01:5f:2c:33:62:0d:14:cb:
9f:84:3e:a7:15:45:dc:ca:1f:5e:6a:2c:6a:36:c6:36:f3:0b:
35:cc:17:0a:8a:a7:30:cd:78:38:bc:e4:cc:93:82:46:f1:e6:
93:d4:1e:ef:cc:58:0a:73:2c:b5:b4:1e:fc:e5:be:5b:5a:20:
e7:79:7d:0f:d8:8e:a9:06:72:d3:41:13:10:d1:0e:5f:4f:b5:
49:1b:f1:a5:c9:33:bf:ff:1d:1a:d7:32:33:1f:0d:d4:a4:e4:
ad:b0:82:68:6c:33:f1:12:13:8b:9b:4c:90:70:1b:4d:3a:ba:
e3:f1:e1:55:89:be:b0:3a:2b:05:aa:36:f1:90:77:08:c2:77:
d6:d2:1b:0d:26:91:53:72:48:ad:e3:d1:3c:3a:4f:5c:1c:7a:
26:73:92:5b:6c:50:b0:d6:73:d3:49:c2:ca:70:86:0b:bf:1e:
51:af:0a:ea:76:7c:79:ff:39:b3:74:8f:5e:3c:72:3b:b4:ca:
8b:25:cf:ea:d3:96:1c:82:9f:e0:0c:79:4d:ab:e1:c6:3a:80:
d9:1c:04:77:55:c4:78:32:71:6c:f6:5e:1c:de:31:b8:75:1b:
c4:93:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org