Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS394414.roa
File: AS394414.roa (raw, json)
Hash identifier: gxT07FlsoqWUjTG+McZc51/UbpZ8m2/vDXuUmp3wi4A=
Subject key identifier: C3:5D:0F:6A:EA:9B:DA:92:B8:6A:D1:5D:38:72:AC:14:E8:14:A1:1F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 18E0EB613C7DE628B44C3827C494DBC23898528D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS394414.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 394414
IP address blocks: 2a06:a005:2d8::/48 maxlen: 48
2a06:a005:ae0::/44 maxlen: 48
2a06:a005:19a0::/44 maxlen: 48
2a06:a005:19f0::/44 maxlen: 48
2a06:a005:1a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e0:eb:61:3c:7d:e6:28:b4:4c:38:27:c4:94:db:c2:38:98:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=C35D0F6AEA9BDA92B86AD15D3872AC14E814A11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:6e:c0:b4:ae:a1:2b:2f:1c:de:37:00:9f:
36:ec:8e:ff:30:1d:4f:82:94:b2:dc:de:06:e9:c6:
87:5a:b0:cd:96:15:99:f8:3e:65:70:07:5a:a7:ba:
e9:e9:5f:ae:04:77:8d:f3:7c:4e:a9:0b:03:03:2c:
f6:ec:a2:73:63:89:01:b0:62:bd:54:4c:06:2b:a1:
01:92:4f:1c:4c:8b:d9:bb:74:0d:f5:23:ec:9e:cc:
e8:1e:fb:fd:a9:b5:8e:84:8a:11:b8:70:d0:94:06:
3f:53:d6:b3:93:f1:93:a8:2a:2b:f6:22:19:2a:76:
d3:5f:52:88:cd:74:05:3b:64:2d:24:eb:ab:1a:04:
92:74:a6:75:4d:7e:2d:40:32:41:0c:55:f1:a3:df:
37:2b:29:8e:f1:c3:8c:c3:13:af:94:a1:13:84:ca:
4a:12:ea:1f:62:6f:de:a2:16:a5:bf:b7:5f:b2:c9:
5b:c2:89:31:de:66:0e:09:ed:72:9b:c5:55:73:eb:
74:6e:d3:9f:a2:00:e6:6b:ee:57:d8:50:a9:be:c6:
c2:c3:0c:84:5a:41:db:c8:0b:64:40:a6:25:5d:7c:
6b:a8:3e:23:26:ff:d9:f8:1b:a8:3d:a4:71:21:43:
88:f9:dd:f5:4e:4a:2c:3c:f6:f8:4e:92:ea:3c:04:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:0F:6A:EA:9B:DA:92:B8:6A:D1:5D:38:72:AC:14:E8:14:A1:1F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS394414.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d8::/48
2a06:a005:ae0::/44
2a06:a005:19a0::/44
2a06:a005:19f0::-2a06:a005:1a0f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:94:c7:dc:78:35:97:31:fc:85:b4:0d:75:3d:72:3e:20:52:
60:ea:e0:34:07:1c:0a:2a:0c:6e:b5:a9:42:9f:91:a2:e5:cc:
d1:46:b0:5b:e5:b6:12:2b:b7:e3:ad:de:13:d8:d6:22:cc:7a:
f2:d3:fa:41:3a:68:bc:83:97:f9:c5:d6:82:38:dc:c1:47:32:
ae:12:0c:1b:36:c8:40:2a:34:fc:ff:87:e4:f0:e4:81:fa:d3:
ec:4e:56:a5:d0:c1:43:c9:06:73:a4:a0:22:0b:4d:93:60:0a:
c7:c7:6d:1d:d9:ed:ea:6f:bd:3c:2f:a8:1e:d5:4c:ae:f8:02:
00:b9:e7:c6:9b:a3:f4:f4:99:a4:07:ce:18:59:21:d3:b4:fd:
97:01:4e:51:55:10:e7:7d:5a:d5:c1:70:af:31:42:df:43:13:
88:c7:ff:7d:a4:17:d0:03:a6:2a:2e:ec:7f:f3:e4:5a:5c:08:
59:8e:5b:3f:6a:a8:76:6c:98:fa:58:61:9a:de:f5:44:ad:e9:
3c:b5:0d:04:37:02:31:c1:89:ae:e1:4f:00:c0:5b:65:05:d9:
44:c2:6f:a8:73:50:d8:2e:24:16:95:f6:a9:42:53:5f:67:19:
29:7a:c0:eb:7a:9c:96:31:7f:61:74:9c:ac:3e:ce:ac:48:e8:
84:bf:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:50 2025 by rpki-client