Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS39753.roa
File: AS39753.roa (raw, json)
Hash identifier: c9gbM+ptauQ5rTCq3n4GoKZzoBARQBXalYJW+rOfpbw=
Subject key identifier: C5:4C:23:7C:BC:4A:84:10:58:38:AE:7C:C6:84:E8:5B:FB:19:5E:67
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 319E54DF3F78A7CD30F64F51F3642168E8A9AF5A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS39753.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 39753
IP address blocks: 2a06:a005:22a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9e:54:df:3f:78:a7:cd:30:f6:4f:51:f3:64:21:68:e8:a9:af:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=C54C237CBC4A84105838AE7CC684E85BFB195E67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:1f:f3:44:94:e4:8d:53:fd:2d:c5:83:4e:
01:f1:e7:6b:dc:67:81:a5:05:32:40:3e:5b:81:da:
32:9a:72:b3:98:60:56:97:06:4d:f3:cc:18:69:c7:
3e:6b:24:40:a7:2f:a3:23:11:c1:63:7b:4c:88:6e:
cb:fe:16:3c:01:41:5d:fe:66:4c:cf:85:16:da:db:
20:be:e9:e2:20:cf:e3:f9:aa:ec:b3:9f:8e:e7:e2:
e0:0f:c7:9e:8b:e8:74:5d:3b:2f:ea:67:4c:38:27:
38:58:0e:e7:1f:09:27:9b:60:42:b6:f1:ee:f2:35:
79:5a:75:4a:3a:6d:35:40:4b:56:06:31:3c:25:9b:
72:24:7d:a0:c5:ad:51:2c:da:90:aa:f6:5d:d5:e1:
8a:e2:07:8b:81:f5:ab:24:1f:aa:5e:63:77:32:75:
c2:26:fa:9c:d7:63:40:43:63:33:cf:6e:b8:83:f9:
2d:6f:52:d4:0d:cd:19:41:23:bd:37:67:a4:2a:c9:
e0:be:ae:d0:ba:12:48:e3:66:0f:19:58:3a:c2:9c:
95:94:4b:ed:18:67:55:51:dd:d7:3a:1f:f7:fa:31:
47:be:a9:83:62:dd:5c:ed:69:32:ca:7c:38:0d:1b:
b4:1d:c2:29:6d:f3:0c:c2:ef:93:ec:07:f9:99:b0:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4C:23:7C:BC:4A:84:10:58:38:AE:7C:C6:84:E8:5B:FB:19:5E:67
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS39753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22a0::/44
Signature Algorithm: sha256WithRSAEncryption
89:bf:a7:33:16:5b:aa:48:c4:2d:33:5a:ec:ff:30:0b:ae:8d:
92:81:09:b1:98:f6:9e:73:75:58:cf:ed:89:d2:d1:4f:15:ce:
14:2a:25:4d:b4:8d:f2:3f:64:9a:c4:1b:c8:f1:fa:0b:47:cd:
c8:6b:03:06:76:33:27:d3:d9:5a:04:52:29:ff:28:07:7f:04:
b8:22:69:35:fc:69:be:5a:a1:a1:87:be:47:ee:d5:dc:5f:d5:
57:1a:3e:96:1a:98:da:9c:f1:5c:ae:d1:71:5a:43:a2:33:80:
21:bb:57:db:89:e8:ee:f1:c8:c0:16:e5:1f:ad:ea:dc:84:73:
47:e4:79:f0:4d:c4:d8:50:35:a1:80:84:90:e6:c8:77:8e:80:
d0:58:7d:08:ea:45:59:57:27:c2:f8:14:4d:dc:af:2a:5f:b5:
97:93:77:1d:8e:5c:b4:9d:7a:a3:49:dc:22:3b:8d:e3:f1:d4:
ef:e7:37:32:b3:10:22:0a:97:37:05:71:14:4b:4a:fb:1a:1d:
27:d7:8a:4c:0b:dd:79:86:7d:c5:fb:61:b7:53:d2:59:87:e4:
fb:03:21:ed:3c:4e:2c:37:78:33:31:9b:58:44:1a:87:cf:79:
53:9f:69:36:03:74:5a:aa:66:77:c3:d2:ce:2c:0b:d2:57:17:
6b:26:8d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org