Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18250.roa
File: AS18250.roa (raw, json)
Hash identifier: kPdOT90Eawzw5XqJclTAeORls1ih5A/N/mC0nv8s4/o=
Subject key identifier: 85:E4:AA:6B:FD:76:1E:E0:2E:84:58:B7:F5:0C:70:7E:8D:56:F3:D3
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 12CA5B5733A5FAE529F13513E798F1B20CA4B5AC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18250.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 18250
IP address blocks: 2a06:a005:4e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ca:5b:57:33:a5:fa:e5:29:f1:35:13:e7:98:f1:b2:0c:a4:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=85E4AA6BFD761EE02E8458B7F50C707E8D56F3D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:f1:6d:25:3e:95:ce:ff:40:4b:ee:cd:ba:
9e:4f:4c:4d:61:f8:b6:c2:3b:a4:c8:72:3b:be:f2:
64:e6:70:98:4c:61:86:f9:5c:a9:7f:c9:22:b1:2f:
63:da:2f:f2:10:1c:d0:d5:a0:50:f4:5f:4e:9d:d4:
83:df:02:ec:8b:03:40:6d:a4:95:52:5a:38:31:cb:
89:fa:70:57:fd:5a:17:f3:6c:bb:1b:b7:0c:bf:fc:
42:a1:07:ba:23:59:36:5d:44:bd:f7:1e:bd:07:fc:
65:2a:28:56:ad:34:13:49:17:75:3e:37:33:4f:f9:
36:1a:8a:5c:f3:e6:a0:c2:46:c5:d6:dc:5f:bc:39:
1c:83:81:da:cf:17:8a:3d:5b:8e:1a:ff:ea:93:73:
0d:60:b0:b3:67:41:49:1f:f7:d4:ea:8b:ab:7a:37:
86:42:5d:a7:5b:47:90:2c:70:60:b2:b5:f7:b5:de:
d9:0e:d8:fd:50:9f:54:4c:37:0c:87:62:1d:a0:5a:
7e:06:a6:87:5c:00:94:e5:a7:65:ff:aa:99:33:61:
ae:64:48:e4:60:4e:64:21:64:2d:ee:f5:7f:44:aa:
ce:c6:2e:42:28:55:79:43:7c:30:3e:fd:ef:bb:25:
47:6a:3a:d7:8a:15:ad:56:46:c0:36:74:65:36:1c:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:AA:6B:FD:76:1E:E0:2E:84:58:B7:F5:0C:70:7E:8D:56:F3:D3
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
30:83:57:fe:8c:af:4f:fa:6a:9a:d3:f8:59:f0:e7:6d:f5:99:
d4:17:92:bd:b3:0f:54:f5:87:af:af:81:71:15:48:95:0d:16:
ac:5e:c7:64:10:37:fc:07:6e:bf:cd:31:4d:f5:8b:10:f5:21:
d0:a3:fd:d2:a6:3e:ba:b4:d2:94:5b:9c:3f:e4:fc:b0:57:f3:
57:b1:27:5f:bc:31:e0:86:cb:86:be:02:8e:dd:c0:04:2c:4b:
ae:67:9c:86:10:d1:9e:9e:1e:42:0f:68:df:04:80:1a:1f:e6:
ef:d6:be:d1:77:40:f1:61:23:ff:fe:c3:59:0d:1f:27:30:3e:
50:03:ef:e4:59:29:8e:83:2d:fa:7f:28:11:8b:f5:5d:92:13:
ac:9d:59:65:ea:93:f6:4a:43:8d:0c:89:35:97:a6:8b:7d:d6:
2b:be:43:8b:28:cb:7d:db:c8:af:59:b0:69:51:df:f6:87:fc:
8f:c3:a8:31:e4:4f:1e:48:fa:cf:f9:cc:a3:72:7e:22:4b:4b:
51:0b:c9:a1:ef:9b:19:27:0b:ae:49:9b:1f:16:78:ca:b8:2c:
2c:45:96:a4:49:6a:fb:81:67:a8:b8:f1:de:80:e9:a4:c1:4e:
8e:bf:43:78:a3:a5:15:ee:f9:cd:ab:64:de:92:b4:a9:f5:cf:
33:1c:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org