Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS197561.roa
File: AS197561.roa (raw, json)
Hash identifier: MNUAkny1oqLo5hZNKToBVnie3U2tyPnjZ7D7mSdJUZI=
Subject key identifier: D1:46:F6:62:9F:12:8A:E6:C4:CC:80:E8:89:9A:72:AB:53:6C:41:AE
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 65837D2115B52672B27B317BE19236A70AADA5AD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS197561.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 197561
IP address blocks: 2a06:a005:1c7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:83:7d:21:15:b5:26:72:b2:7b:31:7b:e1:92:36:a7:0a:ad:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=D146F6629F128AE6C4CC80E8899A72AB536C41AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:1b:89:c6:23:04:60:a9:08:03:70:85:d0:
f7:7e:42:1b:a2:93:f2:98:06:e8:0a:fd:06:24:22:
1c:ed:4d:ba:ec:06:49:3d:bb:11:16:ae:68:fc:ee:
c8:a2:fb:6d:51:2d:ee:76:f3:67:18:b7:13:fd:4d:
9d:97:1e:be:1e:e2:bd:65:6a:82:ed:76:b1:50:03:
78:d4:be:96:a3:81:a3:0c:5a:b6:55:5f:09:0d:d4:
88:04:84:d8:13:77:28:1a:1b:03:ea:b7:a0:8d:82:
58:4a:f7:3e:f0:16:57:5c:7c:d1:da:fc:b3:20:68:
d9:87:1c:2b:26:41:cc:d5:56:b0:60:fd:ab:b5:4a:
92:48:84:cb:f6:aa:ef:5f:af:5e:aa:6d:63:53:a4:
e7:c6:b6:1b:9e:08:78:48:c0:6b:98:fa:47:20:7b:
82:00:d3:69:c1:1b:52:1d:40:30:d9:17:19:3f:7f:
d5:df:e1:8c:62:d1:c4:d7:d7:c3:ca:8a:da:45:f7:
1c:ef:2d:c7:92:b7:65:37:6d:c3:36:70:3c:33:78:
26:b2:7a:d0:f0:d7:bd:fb:ac:8e:80:4d:55:6b:25:
af:3e:93:de:44:f8:9e:0d:aa:2d:37:68:91:cc:fc:
ee:37:bb:db:75:9b:e2:96:45:84:4d:c4:3b:0c:ba:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:F6:62:9F:12:8A:E6:C4:CC:80:E8:89:9A:72:AB:53:6C:41:AE
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS197561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7c::/48
Signature Algorithm: sha256WithRSAEncryption
55:11:8d:a2:4b:e8:0f:16:5d:bd:f3:bb:41:8d:c6:f0:5c:37:
5d:df:4c:ef:2e:cd:20:d1:4a:9e:1b:d7:27:d7:2a:4a:29:42:
db:1a:b6:79:77:b4:84:08:fb:23:65:3a:b7:40:a6:71:41:33:
36:54:14:e2:cc:03:c2:3a:c9:fe:7a:59:2d:d0:a1:51:8d:f6:
48:8c:4b:16:1f:8c:dd:72:a5:75:5c:0f:bd:58:c8:33:95:11:
13:95:a8:f0:58:ca:64:51:1e:c7:80:d5:54:02:53:6c:48:51:
c6:0f:11:34:ec:07:e2:4d:74:2e:8a:0b:fa:ff:4c:af:f2:54:
22:fa:03:89:36:bb:64:f9:50:e5:70:05:20:1e:8f:e8:c0:51:
03:3f:b9:22:15:08:70:d1:66:87:9d:e6:ec:0c:3b:e5:1a:77:
6a:2b:00:e7:89:1a:5b:2c:9a:f2:3a:9a:c3:43:89:71:b2:98:
48:17:1f:c3:0a:c6:16:13:a9:ca:94:11:61:31:6f:64:ea:c6:
37:2b:c3:20:56:17:d9:15:32:dd:ab:6f:1f:d8:66:d6:02:34:
82:23:d0:0b:a4:4f:0f:3d:50:ec:84:24:51:5e:6b:8f:25:9e:
a6:03:ca:f0:25:7f:c0:49:2b:ec:e1:88:d5:29:53:d0:c4:ca:
53:ad:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org