Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150325.roa
File: AS150325.roa (raw, json)
Hash identifier: Qs26oZ4GJ+PToepFvfik/vdyhMcVdoU8BhCa/CYBXTg=
Subject key identifier: BF:22:A0:2E:77:80:79:9F:C2:84:FF:6F:F7:7C:54:A1:4F:9E:36:5E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 656A8968A600FDCE51CD33AE2262F77E0B883A1D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150325.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 150325
IP address blocks: 2a06:a005:3::/48 maxlen: 48
2a06:a005:16c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6a:89:68:a6:00:fd:ce:51:cd:33:ae:22:62:f7:7e:0b:88:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=BF22A02E7780799FC284FF6FF77C54A14F9E365E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:45:04:93:7e:2e:ac:33:fe:b7:8b:6b:9b:
5f:d5:0e:fd:d7:25:8e:ca:9d:ff:20:7b:9e:30:9f:
73:ad:df:a4:bd:a0:ca:67:82:a6:10:70:14:0b:b1:
5e:9e:58:61:c9:de:33:19:dc:10:ca:b3:d1:25:c2:
f9:17:c2:92:5e:96:ba:7f:6e:c0:60:ea:8c:e1:fb:
ad:57:4a:38:0a:9b:34:3c:bc:e7:cc:a6:46:46:87:
fc:48:dc:16:a7:e1:31:54:26:64:01:61:2d:4e:4f:
68:89:85:0f:18:72:24:7d:03:bb:67:df:bf:4f:7f:
fe:5f:43:c0:18:4d:4d:e3:ba:fc:d2:6d:7b:27:c0:
d0:33:fc:6e:f0:7b:69:6b:be:d5:28:83:1c:37:73:
76:24:e8:8e:1c:b3:c8:c2:c7:bb:ce:f1:97:16:c0:
be:0c:f7:a4:f1:26:76:03:10:7f:26:cb:e3:d3:be:
4a:7c:ac:49:6a:60:4b:b5:67:04:0a:76:30:e3:7a:
01:61:06:88:34:5a:32:29:07:cb:f2:e1:4a:63:27:
92:60:9b:4b:13:e3:09:c0:6b:23:63:8d:48:80:9f:
99:4e:df:24:6c:f4:1c:05:e1:19:09:ef:69:1f:19:
aa:17:12:ee:42:e2:48:06:8e:7e:60:52:35:9d:02:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:A0:2E:77:80:79:9F:C2:84:FF:6F:F7:7C:54:A1:4F:9E:36:5E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS150325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:3::/48
2a06:a005:16c0::/44
Signature Algorithm: sha256WithRSAEncryption
4f:f0:71:d2:0a:eb:e6:b0:57:e7:d3:a1:eb:b7:31:f1:83:ed:
f7:a5:ec:01:2e:f2:c9:e3:ab:e8:70:7a:29:81:c8:3a:7c:aa:
fc:63:16:a5:a4:ef:58:4e:5a:7f:98:96:dd:38:18:ba:a0:db:
c3:7e:4c:be:69:a3:2b:4e:d2:e6:d6:a0:d6:0c:b1:72:43:23:
12:06:85:07:d5:45:2e:02:7d:ee:d8:f0:fe:e5:21:62:f3:d2:
62:a4:91:80:d9:e2:39:d5:78:3d:91:22:92:7a:ad:03:cd:c6:
cd:44:7f:47:d0:0c:0d:59:44:ec:43:1a:fe:17:ac:01:e8:c1:
90:bc:05:26:91:16:e4:50:87:d2:68:32:f4:08:44:fb:0f:3c:
76:77:58:1c:4c:50:cd:0e:72:a7:54:c3:99:55:2d:f9:42:f0:
c9:bc:64:12:a3:0d:fc:7f:48:d4:03:88:c0:c7:cc:d8:c6:33:
97:83:a8:8c:1d:e2:f0:68:03:a2:c3:11:c7:6b:fd:13:1f:7e:
5e:1a:11:e0:c7:21:6b:ea:05:cb:1e:91:e5:6f:01:c0:c1:cb:
37:9b:11:7a:c3:09:a9:69:29:18:b2:26:72:e8:0d:38:1e:9e:
19:ee:60:99:18:94:e2:8f:5e:6f:d5:ce:aa:ba:c9:f2:43:d0:
31:97:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:33 2025 by rpki-client