Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150298.roa
File: AS150298.roa (raw, json)
Hash identifier: CHu6DUwVZtlOadw9wUCQin80whJPg3W1AKr23cjaoOw=
Subject key identifier: 4B:E2:2D:DE:7A:BD:A1:44:1F:9D:09:50:3A:49:93:60:56:C8:70:0D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0EC47FD2C274A62F9F8718E9EDEFCBE358D5EEFC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150298.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 150298
IP address blocks: 2a06:a005:1278::/48 maxlen: 48
2a06:a005:1c50::/44 maxlen: 48
2a06:a005:1c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c4:7f:d2:c2:74:a6:2f:9f:87:18:e9:ed:ef:cb:e3:58:d5:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=4BE22DDE7ABDA1441F9D09503A49936056C8700D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:86:54:9d:20:f1:8c:29:52:9a:5f:f1:88:
bc:c1:30:8b:7a:45:56:84:3d:e8:86:3f:8c:72:e3:
49:52:1a:3a:53:f2:3a:a2:98:9c:68:a4:73:39:a4:
bc:49:55:bd:dc:61:6c:a6:b5:14:b1:20:fc:c5:38:
1b:02:8a:9c:12:37:ed:b2:8f:fe:96:63:f3:67:89:
d7:50:5d:65:c7:e6:0b:ee:8b:b2:76:38:88:4c:91:
96:0c:d3:3f:7e:a6:a7:d8:9e:52:19:40:a6:c1:a3:
17:de:73:b8:80:ce:93:da:83:a7:3b:74:93:06:b5:
c3:1d:8c:61:f7:95:ef:5e:29:5c:3b:f4:7e:a3:6b:
e9:a0:66:6c:8a:6a:10:64:a7:ce:15:d3:bf:32:2d:
f0:83:77:b5:48:8b:dd:2d:13:a6:52:ab:ef:8b:1e:
f4:d2:1d:1a:b7:9f:e6:e5:45:45:5d:f9:fe:66:11:
f6:9b:b4:c2:14:43:41:83:37:cb:62:96:ac:d9:00:
f2:8b:d3:77:6e:eb:a9:a9:62:b5:cc:95:dc:87:58:
ae:09:60:3d:95:76:50:20:a3:73:1a:ac:e7:9f:9d:
e9:20:da:2e:65:38:1f:6f:4c:e1:09:32:14:77:97:
95:d1:87:33:cf:36:14:b7:5b:ae:d2:3a:29:30:70:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:2D:DE:7A:BD:A1:44:1F:9D:09:50:3A:49:93:60:56:C8:70:0D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1278::/48
2a06:a005:1c50::-2a06:a005:1c6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:c4:ed:a5:40:e2:40:3d:61:b8:72:06:2e:41:e9:11:b0:4b:
2a:3e:07:2d:c9:25:c8:40:46:d4:01:00:5e:c6:c5:8d:80:5d:
03:0f:ac:08:13:e3:c6:36:02:f2:c1:3e:6c:76:9a:fc:c1:5d:
fa:7f:b5:37:c0:d4:5b:88:4a:99:a7:29:67:09:79:8f:6e:77:
de:fd:ad:60:90:f4:8c:6f:05:d1:19:62:53:80:ff:13:d9:b2:
33:d4:3d:eb:4c:30:3b:5a:d6:9c:63:71:3a:5c:19:ed:2c:5c:
07:0f:19:db:ca:cb:3b:d4:01:8c:61:1c:f1:92:34:bf:6c:e7:
15:23:b9:54:43:74:af:62:dc:1b:e3:c5:51:ee:50:56:f5:ff:
05:f2:2f:81:63:bf:a7:19:7e:ef:b1:1d:00:96:30:b9:7e:75:
9e:be:00:21:b7:7a:53:cf:40:56:bd:e0:26:c0:17:dd:4d:ef:
9b:43:53:a8:21:55:c9:b4:de:ad:4e:71:74:1d:c2:48:c3:af:
af:8f:11:3c:00:dd:84:f7:95:37:1e:0b:45:30:4c:59:93:12:
fa:28:0f:dd:ca:5e:bb:31:b5:d9:b1:e3:c3:72:2e:0e:65:53:
09:cb:9c:b4:e8:1f:5a:ce:a1:89:83:7e:4b:cd:6d:74:aa:43:
f9:2b:c5:7c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUDsR/0sJ0pi+fhxjp7e/L41jV7vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjNaFw0yMzEyMzEyMzU5MjNaMDMxMTAvBgNV
BAMTKDRCRTIyRERFN0FCREExNDQxRjlEMDk1MDNBNDk5MzYwNTZDODcwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsoZUnSDxjClSml/xiLzBMIt6
RVaEPeiGP4xy40lSGjpT8jqimJxopHM5pLxJVb3cYWymtRSxIPzFOBsCipwSN+2y
j/6WY/NniddQXWXH5gvui7J2OIhMkZYM0z9+pqfYnlIZQKbBoxfec7iAzpPag6c7
dJMGtcMdjGH3le9eKVw79H6ja+mgZmyKahBkp84V078yLfCDd7VIi90tE6ZSq++L
HvTSHRq3n+blRUVd+f5mEfabtMIUQ0GDN8tilqzZAPKL03du66mpYrXMldyHWK4J
YD2VdlAgo3MarOefnekg2i5lOB9vTOEJMhR3l5XRhzPPNhS3W67SOikwcPzXAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUS+It3nq9oUQfnQlQOkmTYFbIcA0wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMTUwMjk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKgag
BRJ4MBIDBwQqBqAFHFADBwQqBqAFHGAwDQYJKoZIhvcNAQELBQADggEBABLE7aVA
4kA9YbhyBi5B6RGwSyo+By3JJchARtQBAF7GxY2AXQMPrAgT48Y2AvLBPmx2mvzB
Xfp/tTfA1FuISpmnKWcJeY9ud979rWCQ9IxvBdEZYlOA/xPZsjPUPetMMDta1pxj
cTpcGe0sXAcPGdvKyzvUAYxhHPGSNL9s5xUjuVRDdK9i3BvjxVHuUFb1/wXyL4Fj
v6cZfu+xHQCWMLl+dZ6+ACG3elPPQFa94CbAF91N75tDU6ghVcm03q1OcXQdwkjD
r6+PETwA3YT3lTceC0UwTFmTEvooD93KXrsxtdmx48NyLg5lUwnLnLToH1rOoYmD
fkvNbXSqQ/krxXw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org