Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS19625.roa
File: AS19625.roa (raw, json)
Hash identifier: 1qv0M5GS1leT12cJgbUfZoidSCUVPN73p7xBqRirH14=
Subject key identifier: C5:06:C3:7C:8E:04:8C:BE:3D:F4:2B:87:BE:BB:C6:D2:BC:4D:37:07
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7E0B6A8625E807CBF93514CFE44A9E28776095D9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS19625.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 19625
IP address blocks: 2a06:a005:1530::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0b:6a:86:25:e8:07:cb:f9:35:14:cf:e4:4a:9e:28:77:60:95:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=C506C37C8E048CBE3DF42B87BEBBC6D2BC4D3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:51:24:85:59:cf:cb:a1:d4:ab:eb:fa:55:
b3:54:44:1c:5a:17:50:0d:f2:2c:44:57:c5:a6:0f:
f1:b1:5f:35:87:27:de:b9:5e:5f:1b:ba:53:15:e0:
d6:c5:c2:ad:9f:92:70:01:8d:b5:c5:df:06:c0:97:
2c:35:fa:68:46:b7:e6:a1:36:ba:00:96:c8:54:eb:
43:27:06:ab:00:2e:55:c4:7a:13:43:08:15:7f:ce:
fe:f8:cb:e3:2c:e0:dd:3f:b9:60:39:8b:6a:7a:56:
a3:dc:e3:1a:8a:bf:76:e2:d0:39:66:9f:23:65:be:
e1:69:fd:e2:47:ec:ac:ad:c3:ac:15:f9:88:94:e0:
bf:7d:28:46:51:02:f2:97:2e:a3:be:bb:21:d4:28:
68:36:73:1c:82:48:b8:a5:af:af:32:a5:37:c2:5c:
ef:28:d4:f1:15:5d:ba:be:2f:d3:a0:40:61:02:b1:
77:8e:77:75:36:f3:af:f0:e4:12:bd:4a:8e:d3:fe:
4d:03:41:14:ba:62:83:90:54:fb:25:32:eb:4c:e5:
41:ff:dd:68:57:c4:22:49:8f:84:42:16:e5:82:84:
37:14:b8:80:20:4f:32:af:6c:77:a6:dc:18:ea:f6:
c1:86:07:75:ff:ca:88:ea:7e:eb:ae:e0:c6:4c:dd:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:C3:7C:8E:04:8C:BE:3D:F4:2B:87:BE:BB:C6:D2:BC:4D:37:07
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS19625.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1530::/44
Signature Algorithm: sha256WithRSAEncryption
5e:7c:12:e6:b1:ef:8d:d2:7a:d9:71:d9:9f:71:eb:c6:3e:e7:
da:84:55:3e:f0:a6:90:47:62:2f:f6:58:ce:e9:2c:b8:d8:46:
b0:c4:09:43:82:e0:e1:c6:3c:6c:d6:58:ae:ed:29:2a:33:ff:
0e:35:1d:4b:d8:c9:0a:5c:1d:2e:04:1b:65:fe:39:c1:87:a0:
3a:76:ed:b0:af:73:84:1e:58:69:a1:e8:cf:70:de:23:d3:bf:
39:55:a4:ab:8a:b7:e9:8d:11:e7:d6:28:9d:c5:bd:c5:e2:e1:
3a:a8:f7:b0:94:b6:65:70:9e:2f:f7:66:7f:87:81:4a:9e:d9:
ae:ad:27:f0:38:74:e3:f5:fa:ca:ec:bd:ca:64:7a:22:c5:e1:
32:e8:1a:a1:c9:02:20:a2:a1:e3:1b:c7:71:86:95:f6:50:65:
10:ae:b1:50:b5:54:bb:11:f7:19:14:3b:e0:86:80:f5:d2:04:
7e:7d:95:1c:cf:73:98:3b:37:f3:6c:af:3a:ce:0e:6a:4a:c7:
54:9e:48:60:e7:24:38:f0:79:1b:ed:97:e7:76:6e:49:35:41:
8e:f4:1f:d5:f0:7e:a0:62:6f:ab:e5:61:89:6a:3e:03:2e:62:
52:ff:65:f3:2f:6f:69:81:80:35:89:13:ae:96:0a:5b:7e:09:
0b:95:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org