Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44001.roa
File: AS44001.roa (raw, json)
Hash identifier: q9/3DmlDljZbbcEtd4EdAwV941fPzVqdtPDqUS/xPPs=
Subject key identifier: 09:03:4D:98:62:B6:95:14:7C:1A:D3:F1:1C:DC:37:DF:D8:ED:6C:05
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2B5432DF19A6E27F0FC66AF7B3C11FB669C5E664
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44001.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 44001
IP address blocks: 2a06:a005:13a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:54:32:df:19:a6:e2:7f:0f:c6:6a:f7:b3:c1:1f:b6:69:c5:e6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=09034D9862B695147C1AD3F11CDC37DFD8ED6C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:97:5b:62:cf:f5:b0:ea:5b:d1:58:c2:a8:
3b:7b:75:41:9b:df:89:ad:30:b9:10:f7:6d:b4:00:
b3:50:5d:80:9c:96:1d:c4:75:73:bd:85:f0:36:ed:
29:08:f2:2d:2a:77:fc:c4:1d:55:7b:45:39:34:60:
22:bf:b5:ab:fa:78:f9:58:fe:f7:de:c0:cb:ca:47:
5b:90:3e:15:94:93:38:b7:a4:ef:52:a3:d0:29:3c:
ea:be:cb:a3:a8:94:52:13:08:ba:3d:33:6a:71:be:
a8:5c:b5:f1:dc:6c:8e:a7:5e:4c:35:cc:52:60:9f:
27:32:2a:d0:9a:85:40:78:34:31:a4:69:cd:f2:a6:
65:2a:86:73:5c:09:3f:f2:66:ea:9c:cc:3a:34:31:
86:05:39:f6:79:19:41:76:80:e7:a9:7f:ef:da:e3:
0b:6a:33:d0:a7:77:a4:b6:83:da:11:76:54:25:e1:
93:61:d3:86:54:73:55:9f:fb:d1:c0:5b:9c:7e:fd:
4e:f2:df:fb:8f:53:d2:5b:72:1b:d5:3c:ad:dd:12:
eb:b6:e5:57:80:5e:84:83:91:26:d7:32:d0:64:d3:
ec:8a:4d:f4:25:e6:05:32:6b:25:e8:5f:71:c2:a8:
4e:f0:23:4f:66:76:9d:30:d6:41:25:1d:5f:7e:08:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:4D:98:62:B6:95:14:7C:1A:D3:F1:1C:DC:37:DF:D8:ED:6C:05
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13a0::/44
Signature Algorithm: sha256WithRSAEncryption
79:94:90:58:21:cf:10:58:0b:d4:94:bd:30:92:8d:d3:3c:90:
7c:38:df:7e:57:ba:dd:30:35:c9:25:8a:04:db:ed:c2:78:f2:
77:1e:02:02:d7:e8:73:2f:a0:3c:a6:7b:33:69:16:d8:ce:80:
8e:6f:63:b7:cb:be:84:40:cf:b9:76:ea:de:e6:11:ea:fa:b2:
87:f8:54:c4:07:21:2e:b0:f0:6c:88:b1:10:86:bf:92:f8:f5:
10:0f:d5:1b:ec:ef:47:9f:c8:17:f5:b4:ea:ce:64:1e:13:18:
f5:d2:d6:3a:85:83:56:e8:6b:cc:90:ce:80:8c:22:60:6b:9a:
0d:02:4e:c9:91:d4:dc:1d:6e:fc:22:9d:7b:1c:1b:55:5b:c1:
5c:f9:2e:a1:be:96:6d:87:c6:a5:41:60:4c:c2:4a:df:65:6e:
53:23:0d:8c:a8:9f:a2:62:53:91:b0:79:86:38:51:5f:7c:50:
bc:77:93:7b:bf:58:b8:7c:b9:2e:ec:b5:0c:f6:1b:bd:b8:64:
9a:46:2d:5e:9a:02:2c:b7:f6:df:3d:67:dd:ba:08:5a:71:04:
e4:f1:45:89:d8:43:62:15:f8:ee:34:4e:35:9d:4c:b4:d9:f8:
4c:60:e5:84:8d:56:7e:03:c4:ea:d9:8d:b6:50:91:c0:ad:5d:
35:3e:49:cb
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUK1Qy3xmm4n8Pxmr3s8EftmnF5mQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTJaFw0yMzEyMzEyMzU5MTJaMDMxMTAvBgNV
BAMTKDA5MDM0RDk4NjJCNjk1MTQ3QzFBRDNGMTFDREMzN0RGRDhFRDZDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SpdbYs/1sOpb0VjCqDt7dUGb
34mtMLkQ9220ALNQXYCclh3EdXO9hfA27SkI8i0qd/zEHVV7RTk0YCK/tav6ePlY
/vfewMvKR1uQPhWUkzi3pO9So9ApPOq+y6OolFITCLo9M2pxvqhctfHcbI6nXkw1
zFJgnycyKtCahUB4NDGkac3ypmUqhnNcCT/yZuqczDo0MYYFOfZ5GUF2gOepf+/a
4wtqM9Cnd6S2g9oRdlQl4ZNh04ZUc1Wf+9HAW5x+/U7y3/uPU9JbchvVPK3dEuu2
5VeAXoSDkSbXMtBk0+yKTfQl5gUyayXoX3HCqE7wI09mdp0w1kElHV9+CM0hAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUCQNNmGK2lRR8GtPxHNw339jtbAUwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTNDQwMDEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBqAF
E6AwDQYJKoZIhvcNAQELBQADggEBAHmUkFghzxBYC9SUvTCSjdM8kHw4335Xut0w
NckligTb7cJ48nceAgLX6HMvoDymezNpFtjOgI5vY7fLvoRAz7l26t7mEer6sof4
VMQHIS6w8GyIsRCGv5L49RAP1Rvs70efyBf1tOrOZB4TGPXS1jqFg1boa8yQzoCM
ImBrmg0CTsmR1NwdbvwinXscG1VbwVz5LqG+lm2HxqVBYEzCSt9lblMjDYyon6Ji
U5GweYY4UV98ULx3k3u/WLh8uS7stQz2G724ZJpGLV6aAiy39t89Z926CFpxBOTx
RYnYQ2IV+O40TjWdTLTZ+Exg5YSNVn4DxOrZjbZQkcCtXTU+Scs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org