Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS198408.roa
File: AS198408.roa (raw, json)
Hash identifier: 1nBAfOKW6XLyBbU/21eBCdkKjvh/LWe8cPhA3G7bsZM=
Subject key identifier: 2D:1A:A0:58:01:DD:8E:28:EA:CF:44:4F:DC:1A:98:FC:CB:BF:14:7A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 55E878833205E4A2C29A5A79755005CEFDA01055
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS198408.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 198408
IP address blocks: 2a06:a005:858::/46 maxlen: 48
2a06:a005:1190::/44 maxlen: 48
2a06:a005:26c4::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e8:78:83:32:05:e4:a2:c2:9a:5a:79:75:50:05:ce:fd:a0:10:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=2D1AA05801DD8E28EACF444FDC1A98FCCBBF147A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:d8:d7:15:bc:ff:fd:ff:15:70:d4:35:15:
b8:7a:9f:bc:0b:4a:9b:10:be:69:f0:b5:fd:46:c1:
45:58:e7:da:1e:51:91:b9:bd:d3:88:2c:9c:95:78:
bf:e3:94:07:04:cb:c7:84:41:47:b6:d8:dc:2a:2c:
c1:5b:4f:b5:70:85:38:d6:60:f8:75:9f:01:e8:65:
f9:f7:d4:e0:ab:6c:e6:08:35:8f:29:a9:97:94:65:
83:2a:86:c8:48:69:d3:77:96:01:a0:9b:cd:c7:81:
a8:7e:33:c7:c4:16:c0:29:b4:b3:b5:48:ec:e1:0f:
f2:9c:cf:5a:f6:5a:76:8c:da:a7:07:2d:a7:bc:88:
86:8d:05:18:bb:09:22:e2:96:aa:e1:c0:64:4c:f1:
ee:d7:e0:03:a2:84:cc:d9:41:8b:3e:af:06:fe:5b:
b9:a3:34:bc:29:9e:52:39:09:23:09:73:17:84:a6:
d1:72:64:32:d1:39:69:db:da:ad:1f:04:59:fe:6e:
9c:3b:a4:2f:c4:3a:a0:16:a4:99:46:70:d3:de:35:
2a:84:c7:32:50:8d:dd:32:6c:80:38:79:76:8c:52:
df:bd:4a:59:7f:11:3b:83:10:69:1d:90:dc:cb:74:
41:9a:2b:28:da:b3:d6:9f:75:d8:cd:7d:eb:7a:46:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:A0:58:01:DD:8E:28:EA:CF:44:4F:DC:1A:98:FC:CB:BF:14:7A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS198408.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:858::/46
2a06:a005:1190::/44
2a06:a005:26c4::/46
Signature Algorithm: sha256WithRSAEncryption
02:8c:ec:34:4c:26:32:ab:c0:0b:29:03:06:93:e2:42:e8:a3:
3c:d5:82:ab:b5:03:e0:fa:d3:1e:80:5d:bc:2d:68:34:60:80:
97:a5:0c:ae:a8:f1:ed:0c:41:5e:0f:1c:f8:fa:e5:18:ed:bf:
61:01:e4:36:2d:a2:fa:8e:85:b2:7c:0e:2d:18:ff:22:9c:20:
2d:9d:91:1a:ca:3d:81:5b:8b:0f:d9:39:c9:58:86:ab:29:5a:
98:e5:94:88:80:7f:61:e1:fd:df:69:e7:97:cc:c5:bf:95:23:
be:5c:2c:90:b2:3c:4e:58:8b:af:e5:0b:1c:1f:4d:ac:99:04:
55:df:2e:16:bd:5b:25:4d:5f:de:ee:d9:78:29:d6:7c:ec:ed:
83:3c:c3:6b:d1:df:09:75:e5:e1:1c:b1:6c:ec:29:c7:f2:8e:
ac:93:bd:c2:16:ce:ad:c4:ed:26:c2:f2:b9:84:6a:83:73:26:
7a:7d:90:c7:21:ef:0b:90:5a:12:cc:06:ce:94:69:08:d3:a2:
62:19:e6:1f:52:3e:46:c0:5f:0a:ae:9f:ad:b0:35:ab:35:1d:
51:22:ef:95:da:1b:8b:2a:2a:43:70:28:8c:57:ad:ef:e4:54:
9a:0c:f4:93:a5:dd:2f:97:c3:86:9e:44:14:5b:e0:33:ef:ff:
c4:f8:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:56 2025 by rpki-client