Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399840.roa
File: AS399840.roa (raw, json)
Hash identifier: j+9UprhVEHNGYU06FcnooB9AH3P42Mn4uR/m5bXDM6c=
Subject key identifier: 50:3C:22:2D:10:E1:90:A5:FD:67:AB:3E:11:08:38:42:E4:73:92:B8
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4159FC1ABB1DEE594263447FC05C3A2D87B64D8B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399840.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 399840
IP address blocks: 2a06:a005:14e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:59:fc:1a:bb:1d:ee:59:42:63:44:7f:c0:5c:3a:2d:87:b6:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=503C222D10E190A5FD67AB3E11083842E47392B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:43:65:b9:74:1e:61:24:15:1a:e6:37:ad:
58:f1:9f:18:6c:56:86:22:f0:90:ff:ef:e8:cb:2b:
96:2a:54:53:27:76:18:6b:e6:72:72:17:12:26:7b:
a0:ad:a7:47:e5:d4:44:2c:5c:16:04:34:c9:74:9d:
d0:4f:33:68:6e:4d:26:a6:b2:c3:94:57:2b:af:74:
43:a3:d4:63:f0:6e:6f:6f:9a:5c:f7:7e:18:30:53:
93:a1:52:47:77:fa:a5:90:85:7a:a5:fe:08:a2:82:
bd:e3:d1:df:1b:87:66:51:05:a3:9b:94:47:0d:c6:
8c:d7:65:7a:dc:c6:55:45:e6:2d:a2:8e:b6:b0:f9:
d2:6d:05:1a:20:3e:d2:ad:fe:ec:3a:bf:9c:f0:a7:
00:d3:41:86:e5:f6:d7:d9:91:16:8c:13:91:2f:93:
c8:db:0b:fe:21:b8:91:9d:94:14:70:04:e8:ae:a6:
28:b9:22:3c:cb:f1:06:78:07:7f:b8:02:fd:be:71:
37:56:01:7e:49:9a:9c:6d:f2:3b:d7:7b:b0:46:17:
10:e7:1f:b3:60:1b:d4:c0:4a:d1:fd:de:25:66:af:
e1:80:54:8b:3f:62:8b:ac:26:8c:83:eb:06:1f:09:
ed:94:f5:ba:96:1f:a3:36:87:dd:fe:a9:a6:e0:e0:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:22:2D:10:E1:90:A5:FD:67:AB:3E:11:08:38:42:E4:73:92:B8
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS399840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14e0::/44
Signature Algorithm: sha256WithRSAEncryption
70:d8:86:35:22:e8:da:83:59:ed:67:e7:cb:38:2c:e3:93:ed:
e2:f2:54:89:16:90:c7:ed:c6:48:b6:85:d3:9e:f8:6b:a3:6d:
d4:c5:a5:b2:c6:dc:3b:cb:22:6d:6f:fb:05:d9:e7:2f:33:10:
6a:04:75:a0:b8:cb:41:b4:cb:39:1d:5c:1f:d9:cb:a8:89:58:
0f:74:6b:cd:7f:21:e7:7d:82:20:c4:48:c2:39:fd:53:f0:10:
09:c5:65:5c:37:a0:f1:77:c3:91:d1:87:4b:9f:39:19:58:b1:
d7:c4:94:27:73:d0:4d:8c:80:d8:e3:8f:df:9b:f5:d1:7b:dd:
e1:be:b4:34:46:13:bd:04:f6:55:e9:1b:27:12:39:10:13:e1:
63:71:64:9e:13:13:59:1d:bb:eb:24:c1:e2:f2:44:2b:7a:a3:
b6:e4:93:31:cd:17:44:ae:14:61:04:6e:96:97:ed:08:5c:b1:
81:81:18:77:65:98:36:92:7a:82:c5:69:76:01:68:5a:98:28:
d0:01:e6:53:24:fe:3c:92:85:65:09:f9:8c:d2:45:a7:94:26:
b0:24:ea:1a:dc:e7:e5:e2:dc:31:53:46:b0:2b:31:8f:2a:06:
1e:08:6a:3e:e3:56:3e:bd:20:9e:e6:b1:2d:35:19:91:f5:31:
b2:66:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org