Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS38041.roa
File: AS38041.roa (raw, json)
Hash identifier: NYslsfJetg3jvF4oiNLeKGX4cMcWlP4Ebccn2lFxBYE=
Subject key identifier: 70:21:DF:CD:68:CE:94:53:D0:B5:43:E7:1C:03:DD:A3:74:8E:42:DA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2F5A34B8FA63E1A8D7A53E26D2F4DD1825A823B3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS38041.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 38041
IP address blocks: 2a06:a005:127c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5a:34:b8:fa:63:e1:a8:d7:a5:3e:26:d2:f4:dd:18:25:a8:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=7021DFCD68CE9453D0B543E71C03DDA3748E42DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:24:c5:35:c1:e6:e2:7e:53:a0:b8:2c:6a:
a3:61:23:9f:c3:a3:ba:8c:a3:dd:1c:5b:64:f4:ea:
76:56:2d:02:76:ff:81:04:e1:1d:ce:ab:fd:64:d0:
92:3e:18:c8:6a:0b:2b:98:35:53:10:80:50:4a:8a:
38:fe:6b:9d:8b:bb:b1:da:66:aa:39:aa:2f:0c:30:
27:66:cc:ab:ea:fa:60:c7:97:c4:44:1a:0f:5c:c5:
c7:76:e4:92:c9:2b:b6:fa:06:5b:47:2b:85:a2:f9:
9a:55:08:61:e0:6c:7b:18:0a:0c:b5:d9:01:36:f1:
9a:1b:1b:f8:ee:9a:0c:7e:22:54:21:e6:9a:e0:37:
2f:c3:ea:a6:70:0c:5a:c2:54:62:8d:96:13:28:08:
29:93:df:24:dc:19:c6:b3:99:5e:17:ef:1a:93:d4:
f1:26:a5:70:b0:f8:8f:82:f7:0f:c4:72:e0:49:c0:
50:a1:c9:23:40:e2:14:16:1f:8a:28:40:23:67:06:
c0:7e:74:ec:3c:8a:e2:4f:4f:d7:bd:7a:85:58:e8:
36:b4:ec:76:64:7d:70:e6:40:5b:1a:8d:d4:c7:0a:
88:18:be:29:63:54:5a:9d:c7:9a:74:72:bf:43:a9:
1d:d4:47:85:0a:a2:8b:42:5e:14:0b:6b:9a:e9:f1:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:DF:CD:68:CE:94:53:D0:B5:43:E7:1C:03:DD:A3:74:8E:42:DA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS38041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127c::/46
Signature Algorithm: sha256WithRSAEncryption
15:af:64:fa:93:ae:3d:1a:48:43:b7:b3:7e:d6:8f:24:f0:c5:
6d:65:59:c8:85:4c:46:a0:d5:c8:f3:33:8b:5d:3d:90:42:c0:
d6:f4:a3:d1:5b:ac:8b:ac:a6:8a:11:2d:88:e7:a1:81:54:63:
d6:11:cf:11:45:b4:13:ad:84:75:a0:cd:70:de:3a:87:67:ef:
a0:be:ae:3a:63:2b:f9:f6:77:83:f2:61:3f:27:e5:ae:31:b3:
23:93:8b:18:90:7c:ac:68:ba:5c:94:81:ce:df:b8:d1:d8:99:
0f:65:6d:b4:8f:e6:c6:1e:d3:cc:fd:07:a3:ae:4d:60:7a:79:
04:af:69:98:4e:c3:e7:6e:3f:1a:b4:f4:61:0a:64:b6:56:3f:
16:7d:d8:d9:01:40:2c:a1:7e:4c:c5:5e:be:6b:85:4a:58:f7:
26:87:d2:d9:d3:dc:d4:76:a4:63:6a:6b:58:c6:b0:a4:3a:66:
c9:11:5d:f9:9f:63:ea:18:92:83:48:04:c2:f5:65:63:4b:2f:
22:ae:89:31:1a:8a:1a:f5:26:90:74:be:c7:67:65:7f:82:24:
11:e0:80:07:6c:47:0c:30:bd:4f:52:f7:0b:03:fa:cb:99:a8:
08:82:59:02:45:4d:68:17:1e:ff:fb:97:b4:42:9a:b7:5d:35:
e3:f8:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org