Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24676.roa
File: AS24676.roa (raw, json)
Hash identifier: 0lHVDQTeZfNuXGhnYQksdufBJ/odNiFkpqF+C1mXUYI=
Subject key identifier: 8B:B7:AB:F5:4E:71:B1:BA:AF:D0:47:EB:C6:DB:34:E1:45:A8:EA:14
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 676D874927199E96C3F98434C4811334C1A793E9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24676.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 24676
IP address blocks: 2a06:a005:19c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6d:87:49:27:19:9e:96:c3:f9:84:34:c4:81:13:34:c1:a7:93:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=8BB7ABF54E71B1BAAFD047EBC6DB34E145A8EA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:b6:8c:2b:44:14:4b:56:f1:3a:5e:d4:d7:
9d:87:97:80:2b:34:c0:73:82:7f:52:41:cd:35:32:
22:66:44:43:7a:52:32:13:78:fd:2f:43:75:8a:e4:
b5:3c:83:d1:ee:cd:89:5d:b9:7c:ab:e6:56:3e:dd:
dc:2d:4e:be:20:4e:4e:1c:44:90:89:85:6e:c3:1d:
b2:a6:92:d6:db:a1:0b:f4:78:7d:f9:f7:e6:3b:ee:
f4:0a:51:ea:e0:5f:3d:fb:f8:6c:a6:26:fc:32:06:
ba:4d:a7:88:4a:d1:84:b8:52:a2:a1:ab:d5:b9:8c:
fc:98:af:62:b6:fa:26:f9:cb:91:11:63:ce:c2:a8:
eb:42:89:c1:4c:16:d6:7e:1e:1f:da:ad:ee:13:b6:
18:d6:3d:23:9a:89:7f:e5:53:c1:ed:29:66:8b:e9:
b7:37:e5:73:42:e3:41:ab:81:01:ba:13:4e:20:c8:
50:f8:eb:d0:e9:2d:17:7a:f9:79:6d:69:ce:06:af:
af:48:c7:4d:06:c4:54:74:47:a5:2d:bc:20:8b:45:
4e:72:51:22:26:1b:e2:15:e3:5d:4c:f4:ed:e7:5b:
35:d8:e0:4b:2c:7d:6c:82:c3:c5:c2:2b:5f:29:de:
b6:39:c5:9d:63:9d:86:16:fd:d6:2e:c3:8d:9d:c5:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:AB:F5:4E:71:B1:BA:AF:D0:47:EB:C6:DB:34:E1:45:A8:EA:14
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS24676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19c0::/44
Signature Algorithm: sha256WithRSAEncryption
63:e2:ea:f3:b4:b6:5f:15:ff:5b:61:6a:12:cb:09:e3:d1:ad:
cf:a5:a5:9f:5e:bd:11:c0:c3:99:ac:e3:f6:87:d7:1b:99:13:
15:10:5e:27:90:97:7d:02:d3:f9:69:8d:f6:9c:c0:77:02:6c:
0d:3c:74:58:de:06:95:30:2d:66:c8:71:f6:45:3e:5a:0a:bc:
1c:ae:c7:87:49:d5:2d:c1:fa:d9:b8:4c:ff:d5:13:bf:b2:49:
89:0d:c3:25:35:6d:92:5f:a8:72:7f:41:7c:1a:5d:31:7d:6d:
1e:9c:d3:96:5f:6f:74:20:4e:c1:2f:3e:d5:57:5b:e1:49:07:
78:81:99:7b:f1:b3:d7:00:1d:94:e8:8d:b7:0c:6b:8d:65:64:
92:f5:17:33:d9:47:a5:01:3e:f9:cc:68:fe:89:70:4a:4a:f1:
51:ad:80:73:02:fc:ae:9a:96:3e:cb:73:6b:a1:20:c2:a1:4c:
02:66:0d:80:7a:ef:ed:e3:80:63:82:bb:e3:4d:4a:8a:48:42:
2a:af:d1:86:4b:82:53:00:22:45:e1:3b:c5:78:aa:8c:07:bb:
c1:a2:40:cb:ec:ac:2c:19:75:92:70:dc:e5:53:43:02:67:64:
a2:2f:9e:23:40:e9:43:60:5b:59:31:ef:5f:e8:e8:21:ac:f5:
26:e4:45:65
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUZ22HSScZnpbD+YQ0xIETNMGnk+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MThaFw0yMzEyMzEyMzU5MThaMDMxMTAvBgNV
BAMTKDhCQjdBQkY1NEU3MUIxQkFBRkQwNDdFQkM2REIzNEUxNDVBOEVBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhraMK0QUS1bxOl7U152Hl4Ar
NMBzgn9SQc01MiJmREN6UjITeP0vQ3WK5LU8g9HuzYlduXyr5lY+3dwtTr4gTk4c
RJCJhW7DHbKmktbboQv0eH359+Y77vQKUergXz37+GymJvwyBrpNp4hK0YS4UqKh
q9W5jPyYr2K2+ib5y5ERY87CqOtCicFMFtZ+Hh/are4TthjWPSOaiX/lU8HtKWaL
6bc35XNC40GrgQG6E04gyFD469DpLRd6+Xltac4Gr69Ix00GxFR0R6UtvCCLRU5y
USImG+IV411M9O3nWzXY4EssfWyCw8XCK18p3rY5xZ1jnYYW/dYuw42dxQNBAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUi7er9U5xsbqv0Efrxts04UWo6hQwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjQ2NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBqAF
GcAwDQYJKoZIhvcNAQELBQADggEBAGPi6vO0tl8V/1thahLLCePRrc+lpZ9evRHA
w5ms4/aH1xuZExUQXieQl30C0/lpjfacwHcCbA08dFjeBpUwLWbIcfZFPloKvByu
x4dJ1S3B+tm4TP/VE7+ySYkNwyU1bZJfqHJ/QXwaXTF9bR6c05Zfb3QgTsEvPtVX
W+FJB3iBmXvxs9cAHZTojbcMa41lZJL1FzPZR6UBPvnMaP6JcEpK8VGtgHMC/K6a
lj7Lc2uhIMKhTAJmDYB67+3jgGOCu+NNSopIQiqv0YZLglMAIkXhO8V4qowHu8Gi
QMvsrCwZdZJw3OVTQwJnZKIvniNA6UNgW1kx71/o6CGs9SbkRWU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org