Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS395332.roa
File: AS395332.roa (raw, json)
Hash identifier: 2KK4diCBG7kLiT7+qqbpddqKWge0E8DMqW+0dbUg870=
Subject key identifier: 83:2F:9D:55:34:AA:70:B3:9C:79:A1:30:A5:F2:CC:7A:0D:1A:57:AB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0EA9C34ECFFB53A74248C5B9A59EFA6406B9BAA5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS395332.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 395332
IP address blocks: 2a06:a005:5f9::/48 maxlen: 48
2a06:a005:c80::/44 maxlen: 48
2a06:a005:12b0::/44 maxlen: 48
2a06:a005:12c0::/44 maxlen: 48
2a06:a005:12d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a9:c3:4e:cf:fb:53:a7:42:48:c5:b9:a5:9e:fa:64:06:b9:ba:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=832F9D5534AA70B39C79A130A5F2CC7A0D1A57AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:7c:8f:1c:2c:b2:ea:a7:6d:85:e1:bb:fb:
64:53:6d:f7:39:2e:82:b7:db:27:78:17:d9:86:50:
3e:a4:23:8a:48:87:78:d9:1b:92:8a:cb:7d:db:7a:
3e:bf:c4:36:9b:f8:3b:15:14:1f:ee:47:b6:40:90:
55:c1:c0:7c:a7:69:bd:42:39:6b:5f:bb:9a:dc:cc:
cf:c2:fc:62:2e:6a:b0:11:6d:e0:ba:ff:08:ec:a8:
c3:28:29:f8:8b:a7:9a:2b:3a:8f:d2:78:9b:34:9a:
8d:6c:5a:ef:dc:9d:19:67:8a:de:e7:84:6a:07:42:
64:b4:0f:e9:25:8b:60:df:31:45:3b:b1:df:dd:ef:
a3:d7:f2:e9:96:e2:9f:d7:11:fc:b8:75:b5:71:e3:
f9:e8:a9:62:b5:4c:2a:6e:bf:54:28:37:7e:6d:cf:
c0:17:1e:06:fd:0e:3c:59:fe:62:d8:e8:d7:32:8e:
35:88:24:54:dc:44:db:74:ad:fa:1e:09:1e:0a:5c:
63:1c:c5:9d:92:08:93:66:b4:41:71:ae:dc:64:39:
cb:e8:bd:fb:26:b2:cd:c4:6d:d7:d7:a1:40:67:0d:
30:a8:03:b6:f5:e0:50:5a:e5:5a:ac:a4:d0:9a:fa:
21:44:04:b0:59:d1:58:88:88:32:08:0d:55:29:82:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:9D:55:34:AA:70:B3:9C:79:A1:30:A5:F2:CC:7A:0D:1A:57:AB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS395332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f9::/48
2a06:a005:c80::/44
2a06:a005:12b0::-2a06:a005:12df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:0e:2f:c4:0b:0a:d5:4e:a8:72:39:7a:7b:be:3f:38:0f:1a:
cd:c7:f2:72:e4:80:fd:39:c5:d5:58:be:fd:f5:39:ae:2e:ec:
58:9e:7e:3b:ae:98:57:4f:35:89:86:b4:3a:f0:1c:e9:e1:6f:
bd:2b:88:dd:e5:ea:7e:06:c9:a2:7c:3e:28:43:f7:af:36:67:
4a:a7:b9:5d:4f:ec:c6:5a:2c:f5:a0:24:e1:8f:8e:79:cc:4a:
d4:f7:4e:79:a9:a6:05:b2:9d:41:0a:47:a6:9d:3f:bd:25:d5:
e2:3e:ba:1d:f6:2c:9f:97:b2:13:a4:5a:f3:44:4a:5a:5d:26:
02:90:60:f0:e1:90:e5:82:02:65:91:f3:6d:6b:7c:7b:4b:dd:
9a:07:35:7e:19:47:60:dc:9d:61:61:86:ad:3b:e5:e5:a8:91:
eb:51:b2:0b:30:92:ea:1f:5e:2e:bf:e7:36:85:f7:5f:e3:f8:
aa:5f:99:5b:c0:59:3f:ed:60:7c:f8:c1:69:20:37:e1:bb:5f:
00:c9:70:99:eb:8f:80:ca:40:3a:dc:36:23:1a:de:b4:94:c6:
38:bb:4f:4f:ed:ba:e0:d2:5c:10:f7:6e:6f:47:10:a2:dd:3d:
da:0b:ee:7b:c0:9a:28:a0:e9:db:5d:2e:a1:3e:21:51:3d:89:
4c:a9:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:12 2025 by rpki-client