Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44570.roa
File: AS44570.roa (raw, json)
Hash identifier: k4YbBTgFcWWICCe73pEnG4U34YyKacUSZGlfxCp8Rjc=
Subject key identifier: 84:8B:73:61:4C:7C:E1:F9:3C:3E:45:5F:04:64:94:0E:D3:92:C0:96
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4113563F94BF928FB3A0F3054DF9874DC5774E90
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44570.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 44570
IP address blocks: 2a05:dfc0::/32 maxlen: 48
2a06:1280:1000::/36 maxlen: 36
2a06:a000:1000::/36 maxlen: 48
2a06:a000:2000::/36 maxlen: 48
2a06:a000:3000::/36 maxlen: 48
2a06:a000:4000::/36 maxlen: 48
2a06:a000:5000::/36 maxlen: 48
2a06:a000:6000::/36 maxlen: 48
2a06:a000:7000::/36 maxlen: 48
2a06:a000:9000::/36 maxlen: 48
2a06:a000:a000::/36 maxlen: 48
2a06:a000:b000::/36 maxlen: 48
2a06:a000:c000::/36 maxlen: 48
2a06:a000:d000::/36 maxlen: 48
2a06:a000:e000::/36 maxlen: 48
2a06:a000:f000::/36 maxlen: 48
2a06:a003::/32 maxlen: 48
2a06:a004::/32 maxlen: 48
2a06:a005:18b0::/44 maxlen: 48
2a06:a005:1a70::/44 maxlen: 48
2a06:a005:1d54::/48 maxlen: 48
2a06:a005:1d70::/44 maxlen: 48
2a06:a005:1f90::/44 maxlen: 48
2a06:a005:1fa0::/44 maxlen: 48
2a06:a005:1fd0::/44 maxlen: 48
2a06:a005:1fe0::/44 maxlen: 48
2a06:a005:26b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:13:56:3f:94:bf:92:8f:b3:a0:f3:05:4d:f9:87:4d:c5:77:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=848B73614C7CE1F93C3E455F0464940ED392C096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:4d:82:e0:a4:e0:3f:0a:38:23:9e:36:5b:
36:b5:ec:22:1c:ee:52:07:b6:47:57:be:63:38:82:
6c:eb:df:0d:64:52:d5:93:62:2f:9e:7b:6b:2d:d9:
16:76:f5:b7:e6:7a:6d:74:34:4a:82:bf:e9:b1:d4:
aa:f8:b9:9e:8b:cc:7e:62:a5:b4:71:52:ac:cf:d5:
af:45:50:81:6b:39:c4:6c:5b:64:84:43:ac:de:d6:
f8:48:36:88:5b:3b:0f:ff:a7:07:71:db:65:25:de:
b5:85:37:56:85:ea:32:36:9a:75:2e:fd:be:6d:87:
78:40:4b:84:a6:50:1b:ec:2f:4c:4b:c5:4b:5a:a4:
04:f9:37:dd:9f:3e:28:2f:43:85:f4:f5:00:d1:4e:
26:d5:d3:40:f5:97:0f:5d:47:d3:cb:5b:0d:ea:1a:
72:c0:3b:8d:23:ba:6d:07:21:a2:d2:96:5d:a2:35:
b0:71:99:cc:58:3c:b3:81:71:7a:10:75:66:c6:2b:
13:cc:8b:b5:01:0e:e6:32:8e:c7:90:c9:81:52:66:
11:54:ac:c2:24:c7:1a:58:c5:07:fb:9a:e6:0a:90:
d9:af:bd:90:8b:a8:fd:73:d1:58:0c:b4:ee:64:7c:
93:75:4a:29:df:6e:c6:35:fc:ea:64:e4:d9:0d:24:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:73:61:4C:7C:E1:F9:3C:3E:45:5F:04:64:94:0E:D3:92:C0:96
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS44570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc0::/32
2a06:1280:1000::/36
2a06:a000:1000::-2a06:a000:7fff:ffff:ffff:ffff:ffff:ffff
2a06:a000:9000::-2a06:a000:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a003::-2a06:a004:ffff:ffff:ffff:ffff:ffff:ffff
2a06:a005:18b0::/44
2a06:a005:1a70::/44
2a06:a005:1d54::/48
2a06:a005:1d70::/44
2a06:a005:1f90::-2a06:a005:1faf:ffff:ffff:ffff:ffff:ffff
2a06:a005:1fd0::-2a06:a005:1fef:ffff:ffff:ffff:ffff:ffff
2a06:a005:26b0::/44
Signature Algorithm: sha256WithRSAEncryption
3c:d3:02:fb:81:1e:bb:ab:6e:c4:79:a6:c2:43:f7:5a:a7:fb:
3b:e8:5c:9b:21:8d:fc:ff:15:fd:fb:53:d0:27:2e:1f:a3:02:
a8:d8:3d:d2:4e:ba:51:f4:c5:c5:cc:77:dd:0b:81:c6:aa:a3:
84:d2:93:c0:b7:33:18:7f:63:81:f0:bf:ca:2b:10:0c:f7:c0:
6e:5e:9a:bf:f4:d3:8e:be:c4:24:cc:fc:ce:57:6f:6e:e7:0c:
19:40:c4:c9:0b:aa:5c:16:cc:03:16:90:c0:bb:2b:f2:e4:00:
d9:07:87:24:66:1b:63:86:da:4e:83:e3:52:c6:53:b6:c1:12:
0f:eb:34:53:34:42:93:b8:99:fd:b1:38:ef:4b:95:80:5a:e3:
5c:f7:af:5f:0a:e4:81:c4:bb:ca:c3:0f:2d:21:11:16:95:ea:
51:0a:d4:39:52:bf:a2:ad:26:17:79:87:6c:a9:32:0a:69:1a:
22:6f:5d:7f:cb:34:a2:24:17:bf:06:29:23:60:33:a7:c0:4a:
02:c0:34:01:fe:8c:ac:30:f6:95:51:36:15:ee:d7:7a:67:78:
f0:fd:c3:07:eb:3e:f9:09:24:77:2e:8b:bf:2f:d5:d8:f6:c7:
88:29:3c:ad:27:49:fe:b3:53:37:9d:a7:38:67:f1:51:37:c3:
e4:34:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org