Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS15780.roa
File: AS15780.roa (raw, json)
Hash identifier: IX4OL9TMo1EzyqP/DSWyY5ohJnTXWbeHXUaXgJ5+Euo=
Subject key identifier: F0:06:76:FE:51:59:0D:B0:F0:AD:0D:52:3F:D9:25:C6:16:D2:14:F5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 14E7BBDF5D741AB86659A81B68422A2ED2ED6A2E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS15780.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 15780
IP address blocks: 2a06:a005:dd0::/44 maxlen: 48
2a06:a005:de0::/44 maxlen: 48
2a06:a005:df0::/44 maxlen: 48
2a06:a005:e00::/44 maxlen: 48
2a06:a005:e10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e7:bb:df:5d:74:1a:b8:66:59:a8:1b:68:42:2a:2e:d2:ed:6a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=F00676FE51590DB0F0AD0D523FD925C616D214F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:8e:19:6a:2b:16:d5:70:f2:fc:5b:f4:6a:
ad:bf:45:c6:0a:1e:9d:52:d6:85:0a:66:21:2c:3e:
eb:a5:00:31:27:b7:a7:9b:58:54:06:55:dd:48:83:
30:05:0c:b9:0d:b6:a9:51:87:4f:ba:20:75:6b:7d:
52:4f:ec:85:5d:5c:cb:3d:63:d6:51:36:4f:27:50:
9e:c6:30:1a:7e:e8:dc:45:5f:c1:11:d8:cd:90:88:
6e:47:91:0a:74:6b:04:8f:5d:c0:24:56:b6:cc:5c:
14:93:fd:d8:62:2b:80:95:fe:3d:7b:df:7d:a7:4f:
0e:a9:51:00:01:df:ff:d0:1d:92:10:06:3e:e1:7f:
cb:00:71:44:27:01:86:5f:2d:b3:8b:ee:ec:85:8e:
dc:e1:3a:27:cf:21:66:aa:a5:dd:99:19:af:25:73:
f2:75:89:80:ec:ee:3b:05:82:79:32:28:c9:36:9c:
41:c3:7b:cd:48:d0:44:8a:f6:ac:9f:26:6f:24:eb:
59:06:cd:86:57:d5:f9:d7:30:4c:d3:c7:9f:14:bb:
1d:9b:be:3d:87:d3:d7:65:50:71:bc:ab:0c:2c:4a:
66:58:e2:09:b4:3f:18:5e:18:b2:9c:40:bd:ee:58:
27:c0:1a:b6:db:ce:11:74:21:b7:bd:74:41:db:88:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:76:FE:51:59:0D:B0:F0:AD:0D:52:3F:D9:25:C6:16:D2:14:F5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS15780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:e9:67:22:85:7a:6d:60:61:a2:85:89:eb:5c:99:6a:92:db:
16:ba:a8:cb:28:83:b5:8e:94:5f:a7:1c:d9:96:60:4a:1c:1e:
b8:31:85:ea:90:fb:a5:33:56:ff:4a:5a:bf:2c:18:05:0e:79:
c6:da:79:11:52:15:d5:3a:19:ec:52:93:be:dc:bf:50:f1:ae:
1a:90:52:22:69:57:e9:ee:fc:32:b5:c2:6e:e4:d2:cf:97:83:
b1:7e:a2:c9:0c:36:15:75:7c:fa:69:fe:6f:b5:69:fe:38:31:
c3:b2:70:28:39:e3:11:b1:b5:b1:57:8b:db:09:50:68:ef:73:
3d:62:4c:a2:e0:5e:5f:52:76:65:68:c5:13:87:1a:84:6f:10:
a9:37:99:a1:5b:bc:4a:3c:95:e9:06:93:9d:60:40:2b:cf:ad:
a7:82:57:ea:78:b1:56:a7:de:b4:0b:9d:a1:0d:eb:1d:72:ba:
98:cd:b6:87:7c:d7:c6:8f:c1:83:36:0e:75:f1:c6:32:55:fb:
49:12:3b:fc:f2:5e:b4:98:c5:29:b7:c6:89:5a:ba:c7:28:fc:
c8:ef:41:a9:82:58:ee:55:0c:f5:6d:08:4e:aa:3b:a0:8e:56:
11:03:3a:4d:72:e2:0f:31:72:4d:6e:05:0b:55:f1:98:95:93:
ec:c3:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org