Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18041.roa
File: AS18041.roa (raw, json)
Hash identifier: JPjUZ8e7Fp+n3kF/TDZ2AVbSasy39Ua3uVmo3skqT5I=
Subject key identifier: 24:3D:1B:B9:1D:D1:26:D8:E0:07:B6:E1:EB:70:03:2B:6A:C4:9C:30
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3C70C686D919BB6A820E8F462D6384AA99097ADC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18041.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 18041
IP address blocks: 2a06:a005:500::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:70:c6:86:d9:19:bb:6a:82:0e:8f:46:2d:63:84:aa:99:09:7a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=243D1BB91DD126D8E007B6E1EB70032B6AC49C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:6a:16:a6:94:de:f5:dc:9f:6f:12:9d:3a:
77:22:05:1e:81:bd:ab:1f:39:24:14:28:c5:c5:1e:
0d:2e:0a:68:81:86:78:1c:de:ee:61:a2:0b:49:7f:
20:06:f8:38:ca:79:5b:2c:e1:cf:dc:e3:71:f1:67:
5d:54:49:57:80:c1:d7:53:16:27:b3:00:3e:5a:d2:
d6:10:27:49:4e:7e:47:02:33:6c:4f:a1:d5:1e:06:
8d:b7:ba:f5:41:8c:df:13:6e:6c:90:a7:ca:5e:14:
7c:63:39:3b:82:d2:ce:98:00:3c:0a:b5:f1:17:14:
d9:4e:92:9f:df:5f:9a:b4:67:89:89:1b:b3:26:53:
43:57:ad:2e:56:18:06:e0:16:a7:03:6d:36:ee:b7:
a8:90:d8:1f:29:06:ef:33:b4:dc:f3:86:52:b2:05:
2c:20:02:2a:61:9f:26:5c:c7:16:43:f4:bb:a3:76:
8d:78:19:a7:90:df:a7:c4:be:69:fe:1d:3d:bf:46:
6d:38:38:b6:10:f7:53:91:b6:fb:b1:62:00:c6:4d:
cf:ba:1f:4c:60:c3:54:2f:90:b7:1b:66:c2:2a:67:
3a:28:fc:23:14:b2:8d:70:c8:54:54:40:f9:b2:15:
a2:22:1b:e6:6c:49:d3:a6:2b:ef:8c:0b:66:0f:9d:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:1B:B9:1D:D1:26:D8:E0:07:B6:E1:EB:70:03:2B:6A:C4:9C:30
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:500::/44
Signature Algorithm: sha256WithRSAEncryption
04:e4:a8:bb:fb:2f:74:a9:81:00:6d:cf:b4:a9:65:90:b6:91:
bd:f6:f1:f9:39:f2:a7:28:f2:c5:22:ca:1a:ee:87:85:24:f6:
ae:aa:ce:c4:e1:a6:f1:b7:d3:f1:3f:a7:88:7d:48:2d:cb:f9:
f2:20:0d:fe:7c:e7:c1:d3:c2:bd:a0:1a:11:6b:6d:4a:c7:ac:
b5:08:37:e6:57:5c:99:5b:00:1e:88:aa:7e:ac:dd:96:3b:08:
8f:cb:ea:a4:e9:4b:5c:71:c9:0a:d9:1c:35:99:73:ae:13:81:
e1:f5:9b:f8:c2:6b:a6:51:d9:8d:fe:22:fa:f8:e9:f9:0b:b0:
8a:44:da:aa:10:ba:dc:b9:a8:f2:4a:11:1b:3f:44:b4:90:13:
eb:fd:c0:e3:1d:e7:7a:96:d1:ca:f5:25:3a:92:1f:72:a2:fc:
e8:69:f3:26:1b:88:fc:91:9c:e6:fb:bf:54:11:26:07:35:dc:
81:30:18:f6:c5:0d:03:28:4e:f4:5f:1b:61:ac:9c:58:9e:1d:
51:cd:4f:c6:ac:37:b3:3a:ea:b0:63:d5:97:69:7d:fc:4b:fd:
ea:0d:e7:0c:be:a8:5c:70:69:1b:a4:65:11:73:d6:27:3b:ca:
cf:ee:ff:a2:9d:e1:fe:56:91:be:fc:6e:b4:63:33:59:cf:1e:
0f:b2:b4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org