Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS400536.roa
File: AS400536.roa (raw, json)
Hash identifier: ySLerswHVcQ4j09lbj3D460wobICWGgpM9XKr7vLgrc=
Subject key identifier: 42:F9:75:7D:DC:14:97:C2:D3:87:3F:CE:80:00:CF:87:90:2D:74:99
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 12151167D53AFADDCDEB4D2BC9F8175AEA264A17
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS400536.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 400536
IP address blocks: 2a06:a005:5f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:15:11:67:d5:3a:fa:dd:cd:eb:4d:2b:c9:f8:17:5a:ea:26:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=42F9757DDC1497C2D3873FCE8000CF87902D7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:bc:ae:c8:42:31:71:f5:ab:4c:81:21:1b:
60:03:73:03:fb:5c:14:4f:68:20:ce:16:05:c1:f7:
f5:51:05:a7:33:2a:fc:e1:4c:87:40:e7:a2:8f:2f:
ee:ae:90:46:6e:93:17:e8:2c:4f:75:31:02:4b:a6:
ef:96:7a:f5:d1:ef:dc:01:d5:86:aa:21:d4:23:88:
7c:a2:45:2f:33:8a:e1:eb:fb:97:8a:ae:fd:61:2b:
90:54:14:7b:35:e5:98:d2:ac:3d:da:39:5f:a5:37:
09:34:d7:3c:fb:14:3c:9f:87:70:b7:7b:33:fd:f2:
85:2e:54:32:ec:16:2f:03:36:4f:a2:98:ef:38:e7:
72:90:8f:84:c3:c8:bd:4a:ec:63:f9:6a:a2:5b:ec:
7b:65:51:6b:62:38:a3:b9:c2:13:e9:92:b9:49:2d:
79:58:b8:d9:9b:c4:f3:72:15:ce:3a:a9:9d:aa:1d:
70:da:70:2a:55:14:db:e4:8a:f0:db:c1:91:2f:59:
b2:9b:64:e6:06:4b:89:20:51:43:f0:5b:55:e3:72:
de:43:c9:10:31:01:f3:a3:6f:ac:ed:3a:ba:fb:d8:
c7:d7:6e:ec:04:10:5c:85:f1:af:ad:27:77:e4:ca:
5f:d6:c7:96:76:38:d3:14:d3:b1:91:f0:78:74:47:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:75:7D:DC:14:97:C2:D3:87:3F:CE:80:00:CF:87:90:2D:74:99
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS400536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f7::/48
Signature Algorithm: sha256WithRSAEncryption
06:2b:86:90:fa:92:66:4c:19:db:c3:72:e2:0a:0b:22:a8:65:
9a:cc:02:bd:e7:f8:43:74:b1:e0:0a:da:2a:54:e2:16:91:14:
8b:5d:a7:ad:4f:63:f9:04:a5:18:a3:27:e8:c2:30:bd:e6:80:
26:cf:09:92:21:42:a0:a2:f9:ec:e3:b3:ad:f4:35:dc:72:f0:
43:df:97:4f:bb:ca:43:9b:05:11:80:60:ed:7b:f8:d8:79:0e:
ae:b4:62:d4:a3:20:20:e2:b4:7d:0d:67:a9:aa:bc:c3:65:7b:
1d:41:fc:5c:7f:50:5e:83:7a:46:9f:61:e5:bf:38:bf:b5:e5:
6c:94:e7:c6:87:55:6b:d2:4e:cc:b0:4d:a7:fd:da:4c:d9:b2:
fc:75:30:af:be:d1:48:d6:c2:86:7b:d1:13:c0:36:08:69:21:
90:0f:be:d5:2d:3c:52:7c:f1:7e:13:1e:07:e5:43:59:35:3b:
b1:db:29:58:66:a4:75:5e:d2:cf:b3:27:05:31:27:19:fb:dc:
ca:f2:1c:eb:1c:df:d8:fc:09:be:8c:70:ae:02:02:4f:b6:3a:
ca:94:28:46:80:bb:fa:7b:fe:2a:d1:ca:07:6c:d5:9f:69:c4:
a2:0b:b8:4b:f5:07:ee:20:30:dd:e5:7c:17:02:d2:d2:f3:d9:
68:23:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org