Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399114.roa
File: AS399114.roa (raw, json)
Hash identifier: CmMe/aSYOBpiUkqlr/c6r2Nk51bWEQicjfSzs7dtCtM=
Subject key identifier: 6B:92:94:C4:EF:7E:2A:A6:F2:5D:BE:FF:DC:09:E4:FC:40:5D:46:88
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2DA86EE1492C762032764CD8548297A4A9089F4D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399114.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 399114
IP address blocks: 5.253.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a8:6e:e1:49:2c:76:20:32:76:4c:d8:54:82:97:a4:a9:08:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=6B9294C4EF7E2AA6F25DBEFFDC09E4FC405D4688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:b4:66:7c:a8:e2:61:88:24:45:71:3b:4c:
15:6e:e7:46:8d:d5:cd:a0:5b:b7:96:b6:c9:50:57:
ab:4a:bb:93:9b:72:2d:4b:2e:6d:aa:8c:76:1a:df:
18:1a:94:65:d5:9f:c0:4a:02:56:a1:75:6f:29:f6:
19:64:54:5c:0e:ca:71:3e:86:fd:bf:84:92:ec:8e:
14:ad:98:ad:45:f6:e3:22:85:f3:78:1c:a4:ed:91:
26:13:e7:87:08:a3:9b:7c:84:ad:1d:40:68:dc:81:
12:de:77:91:e3:2e:65:ef:16:77:40:8b:87:04:c2:
5a:e7:8a:b4:bf:6a:96:28:85:d0:84:e7:e2:69:f4:
6a:93:68:c7:ca:c4:66:33:7e:8b:9b:7b:84:84:3c:
3e:ea:74:8c:da:b2:fd:08:73:ae:92:c2:fd:c5:ee:
34:af:c4:11:ad:fe:4d:e8:57:69:c9:a6:80:d4:de:
e9:51:07:64:69:27:99:8e:0e:a4:cf:47:f9:ee:f8:
58:28:0a:39:5b:47:f2:f3:7d:7c:a8:29:1b:27:2c:
81:24:7b:2d:7f:10:f1:16:b0:d7:df:1a:fc:b3:53:
ab:7a:95:be:d9:81:d8:f9:cb:02:2b:ec:b0:b1:b5:
bc:74:e3:50:09:0d:b1:db:c8:7c:ec:42:bd:ea:c5:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:94:C4:EF:7E:2A:A6:F2:5D:BE:FF:DC:09:E4:FC:40:5D:46:88
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:31:ee:36:96:5a:2f:a5:87:bc:a6:b6:b7:c4:a3:82:6b:41:
0f:8c:78:8c:fc:6b:e6:b9:9c:18:47:dd:61:1c:b2:a0:fd:7d:
d8:1f:8d:ae:54:c5:b2:af:87:74:b1:16:f0:98:4a:79:b6:da:
ca:65:a6:47:b9:10:ee:39:25:ef:d0:be:ad:a3:85:01:6e:4c:
8f:60:bd:3d:95:3b:5f:62:31:ef:9e:84:c8:af:5b:a8:03:ed:
75:9c:3d:3d:4c:55:6b:8f:58:a1:76:8c:68:4d:f2:8f:ea:a1:
93:2c:aa:e2:9e:1c:eb:85:17:14:70:e1:f9:5a:68:11:ff:a4:
a0:22:26:c2:96:87:8d:67:42:9e:90:29:1e:44:e0:c4:06:d5:
27:09:30:de:0e:7c:a7:ea:22:ec:d8:a6:53:c7:2b:73:c5:38:
a8:3b:cf:13:f5:28:51:aa:01:66:1f:f2:a1:4b:7c:ec:98:20:
a6:01:e8:b2:c3:67:2d:24:6b:98:3d:19:83:ad:c2:a3:74:c1:
15:d4:1d:51:df:bb:e9:da:44:dc:c1:f8:90:b7:85:3d:68:22:
19:81:df:ac:01:09:32:00:4e:51:49:77:52:d2:13:5d:e9:24:
61:79:57:08:3f:99:c0:b7:59:52:74:ab:8e:ca:a9:b6:f1:59:
36:14:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org