Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS47689.roa
File: AS47689.roa (raw, json)
Hash identifier: GwdaZsP1bpT2ObehFK79jk9ORW10N9DZc4bUI/seQM8=
Subject key identifier: AB:DE:16:26:3A:5A:A2:DD:08:4F:38:F6:9E:55:F2:0B:D3:50:A4:FF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 723E705240417FCE2407FC772CF446B01EBC3171
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS47689.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 47689
IP address blocks: 2a06:a005:a18::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3e:70:52:40:41:7f:ce:24:07:fc:77:2c:f4:46:b0:1e:bc:31:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=ABDE16263A5AA2DD084F38F69E55F20BD350A4FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:c7:ef:18:4a:11:ec:c9:a3:6e:70:d4:1f:
49:e9:35:da:eb:7f:d3:81:30:1d:84:c9:fd:79:a5:
25:2a:0b:a3:c1:56:6a:46:58:40:87:ce:16:34:4e:
be:c7:63:b0:48:ab:1b:b6:0b:c6:df:64:60:05:f9:
c3:8f:b3:49:d4:5d:41:7f:8e:72:26:56:5d:cd:8b:
9d:64:d5:73:ef:58:49:4c:c1:b2:dd:4f:1c:e7:bd:
81:03:1e:7f:6b:40:a8:24:ef:db:3b:94:37:58:fc:
ca:0e:ca:e5:68:9c:a1:cd:4e:9a:47:15:e4:b2:25:
fb:43:35:fa:db:c6:a7:4f:f8:c6:d5:9b:64:73:ef:
95:c8:71:25:df:69:fb:80:1c:50:76:ec:99:e9:28:
b0:b4:54:ee:1a:eb:50:eb:23:6c:ae:58:b3:ee:a2:
d3:7a:84:9b:ae:c0:dd:4f:be:18:11:7d:10:db:57:
7a:86:98:bc:c9:32:fc:64:6a:c1:b9:db:90:6a:94:
fc:94:2c:03:c6:96:4e:e8:07:0e:33:22:71:5e:ef:
af:ed:0b:c1:70:ad:a3:d5:85:93:ba:16:3d:d2:b4:
8b:b9:ee:65:91:c3:5e:56:5b:63:a1:ed:53:2b:16:
d1:cf:9f:10:0c:04:8c:2e:d6:d1:80:6e:1e:6f:26:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:16:26:3A:5A:A2:DD:08:4F:38:F6:9E:55:F2:0B:D3:50:A4:FF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS47689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a18::/45
Signature Algorithm: sha256WithRSAEncryption
20:6f:c2:99:8d:11:3e:a6:c8:d0:e9:87:84:f8:79:b7:2a:50:
43:11:53:d7:4d:32:16:a5:73:29:e0:32:8a:79:a0:de:16:0b:
62:14:3e:71:10:96:7b:59:21:43:06:f8:de:b8:f7:4f:fa:4b:
2a:67:95:34:b6:8f:b0:03:9e:9c:fd:d6:f2:75:e2:96:46:58:
53:8f:51:e1:cf:56:df:d6:15:06:80:27:ca:ab:a1:3c:1c:2b:
fc:d2:a9:c9:75:41:e1:32:73:ad:8a:76:49:48:6e:20:f3:4a:
55:b9:d0:60:67:51:af:f6:68:79:b2:7e:ef:87:b6:2e:2c:7d:
b8:49:fe:16:d6:62:01:37:a5:a1:f1:c0:c8:d5:b7:8c:7d:58:
57:dd:c4:28:c4:00:48:7a:5d:c3:fc:08:f0:00:9d:e0:6c:4a:
95:03:67:79:2a:03:58:70:f7:02:73:a5:74:b2:45:f1:47:33:
91:f4:9b:16:f5:54:d5:69:10:6c:a2:1a:7f:f7:4b:fb:eb:32:
42:c6:84:d0:a7:e0:4b:8f:13:fa:6d:6b:fc:51:8c:c1:7a:2d:
65:ff:53:e4:9b:11:87:6b:a2:2a:80:2d:a7:6b:6e:14:f1:1c:
12:aa:36:d3:e8:df:8f:86:6b:7a:0d:a2:c3:81:b0:be:08:1a:
e4:d3:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org