Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18526.roa
File: AS18526.roa (raw, json)
Hash identifier: gKOIdIAjcbx7i7nq6WBSbkRbQEe6zr3+BvZXXY42FAs=
Subject key identifier: 64:8E:97:62:31:FF:2F:AE:C0:DF:C3:11:C9:D4:92:AA:1F:D4:AA:7F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 27B8FBB4AAC5DA616EB6B6B2E6CCBE93ABC34D1D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18526.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 18526
IP address blocks: 2a06:a005:5b0::/48 maxlen: 48
2a06:a005:5b1::/48 maxlen: 48
2a06:a005:5b2::/48 maxlen: 48
2a06:a005:5b3::/48 maxlen: 48
2a06:a005:5b6::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b8:fb:b4:aa:c5:da:61:6e:b6:b6:b2:e6:cc:be:93:ab:c3:4d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=648E976231FF2FAEC0DFC311C9D492AA1FD4AA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8b:26:a9:54:eb:ee:89:56:49:61:c8:aa:2f:
bd:ef:f3:15:25:3e:98:0e:27:db:d7:3e:06:da:6b:
1c:ea:1d:1f:12:e1:47:35:1d:d0:38:bd:dc:a3:f6:
2b:15:ab:fd:60:d7:a1:2a:08:a6:e8:92:a9:fb:d3:
60:c9:a9:04:2b:d7:12:ba:e2:ca:2f:08:c6:95:e3:
f1:66:9c:78:8d:4c:e1:fa:79:74:59:0d:ea:40:fd:
96:4b:f6:7e:ad:62:de:39:97:ed:05:5a:33:b0:32:
d2:f4:7e:e5:99:01:85:71:4e:5f:48:f0:a2:9d:66:
24:0e:5c:da:f2:80:69:01:af:6d:f6:1a:74:85:e9:
fe:e7:b2:4e:92:0d:89:8e:9a:5d:59:0d:fc:a6:47:
0c:74:e0:61:61:4c:43:fc:fb:db:79:63:bf:4d:ae:
ef:42:3a:6b:55:bf:93:6e:47:66:b2:a9:54:17:87:
0d:b0:19:1b:c9:75:f1:69:c5:b5:21:fd:9b:9d:76:
86:9a:56:18:9a:37:be:e1:ac:ee:eb:e4:ed:c0:f7:
3c:52:b8:f0:d7:97:11:41:04:d2:3c:53:24:ab:cf:
aa:6b:e5:e9:81:e7:ab:57:1f:2c:6d:57:31:4f:81:
bc:23:54:62:81:a2:9a:4b:04:bb:ba:00:17:2e:47:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:97:62:31:FF:2F:AE:C0:DF:C3:11:C9:D4:92:AA:1F:D4:AA:7F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS18526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b0::/46
2a06:a005:5b6::/47
Signature Algorithm: sha256WithRSAEncryption
92:01:61:71:37:1f:6b:3b:4f:d8:e0:3d:70:ff:87:50:2b:0b:
3a:56:43:1f:1e:28:4e:5d:0b:a6:10:ff:91:a4:4f:33:17:22:
df:d3:9b:b0:49:f4:4a:f7:24:c9:97:04:25:dd:3c:de:9d:20:
a2:9f:2a:4d:c3:ed:b7:ef:2e:ca:05:bc:ff:0c:a6:5a:39:c7:
2a:51:4b:fb:44:4f:5e:b0:e0:c2:c7:86:bd:6a:83:f9:e9:96:
b7:48:8d:b1:71:34:bb:17:41:96:b4:86:22:a2:c8:b4:dd:c0:
68:67:a9:ae:cb:c7:ca:bc:5b:bf:9d:13:4d:92:b8:ef:a5:05:
b0:7b:0f:3b:97:ad:26:89:ee:71:79:bf:63:f0:ab:01:d3:b3:
c2:26:a8:e9:31:ba:7a:c0:b0:ff:a1:97:7c:0e:77:bb:66:5c:
c7:e1:17:74:96:f2:4a:4e:02:2c:de:42:72:69:24:62:72:d6:
ed:e7:d2:da:8d:a6:1d:93:b7:d7:61:d4:a9:cf:cd:58:93:6d:
81:a0:8a:83:f6:6c:b1:11:61:8f:46:c7:2f:d4:27:cf:41:6d:
2d:6e:6a:b4:dd:82:14:19:2d:85:a9:63:76:3f:47:e8:bd:c9:
8c:cf:74:c1:3a:37:6c:86:f4:b6:5f:36:f6:6d:55:fe:48:87:
b0:95:11:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:39 2025 by rpki-client