Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50580.roa
File: AS50580.roa (raw, json)
Hash identifier: RZo4bOMwuqWC7sb/3sF8h/x1hsUP7+yt4lzUHu2vIPQ=
Subject key identifier: 0A:FB:75:32:E9:81:A2:63:1F:EA:8F:55:B3:FB:7A:E6:D0:CC:8C:A8
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 37D10622B86E4053F0D0BF31344CE6AA420FA134
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50580.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 50580
IP address blocks: 2a06:a005:1d90::/44 maxlen: 48
2a06:a005:2230::/44 maxlen: 48
2a06:a005:2390::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d1:06:22:b8:6e:40:53:f0:d0:bf:31:34:4c:e6:aa:42:0f:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=0AFB7532E981A2631FEA8F55B3FB7AE6D0CC8CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:65:12:62:7c:87:17:de:ec:55:ad:06:0b:
e7:2c:77:e1:ec:51:40:2f:89:37:cc:b2:f4:3a:5b:
95:ca:0b:b3:6d:11:49:f7:71:77:e4:80:ef:4a:d3:
50:b5:61:5f:14:0a:7d:b1:99:82:ca:f8:17:43:5a:
9d:d0:a3:fc:e0:d6:8e:52:f5:1f:41:f9:b3:0b:29:
dc:6e:66:ad:5d:e9:ef:c9:4f:58:2f:7b:8c:57:eb:
b9:8b:53:43:a9:4e:22:c5:bb:fc:0b:96:e9:da:17:
5c:ff:8e:7b:a9:1e:6a:2c:9e:4c:33:0a:97:9e:14:
a2:bb:d6:ce:07:08:9b:4c:5f:e1:8e:8b:6e:be:ff:
30:9a:3e:61:04:a4:12:92:1a:98:18:25:86:ec:e9:
c4:65:1e:02:71:99:64:13:37:46:c4:c5:e5:ef:99:
4d:7c:31:64:54:29:bb:09:13:5f:a4:70:27:96:72:
8c:79:a9:66:c0:c1:0c:c3:c8:e7:e2:e3:39:a4:b0:
a0:44:20:88:67:e6:a7:c9:9d:12:35:70:ca:4a:35:
7c:63:18:33:56:3f:d4:59:bb:2e:b8:69:fd:d8:0d:
88:d4:a8:3a:2f:f0:b4:12:9f:b6:63:f9:90:61:52:
8c:3d:05:6c:2c:9c:0b:f7:f4:73:36:6a:5b:5c:11:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:75:32:E9:81:A2:63:1F:EA:8F:55:B3:FB:7A:E6:D0:CC:8C:A8
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS50580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d90::/44
2a06:a005:2230::/44
2a06:a005:2390::/44
Signature Algorithm: sha256WithRSAEncryption
93:62:c6:66:8e:f8:d8:7c:d4:ba:ff:34:0f:8f:43:b6:d0:bf:
f5:69:08:f5:f0:72:06:ca:0b:3f:05:b0:76:ed:76:45:0c:cc:
26:80:41:56:76:c9:a5:03:81:45:c0:97:d1:d4:2b:fd:9c:ed:
79:27:c4:63:04:05:8e:6c:06:3e:33:34:45:54:54:9b:74:b1:
5d:eb:61:96:22:fc:cc:1a:16:eb:cb:ca:1d:ec:f0:39:8d:99:
5b:d9:ff:b5:ae:fc:f2:4f:14:74:62:14:28:c5:64:f8:b2:24:
4b:f8:94:59:87:69:5e:51:0d:f6:14:a0:cc:5f:b6:bc:1c:c1:
04:94:ac:f3:34:da:68:66:2d:9f:71:e3:6b:42:51:33:e3:bd:
14:ca:a6:34:46:b8:3b:0e:73:ac:de:40:c0:63:5d:0a:a1:77:
52:36:72:3f:90:6b:cb:f9:40:07:32:0e:e9:35:16:b5:da:a8:
55:7f:3d:eb:8c:47:b1:40:61:ee:7a:7a:51:0c:70:0f:b7:20:
b4:17:69:80:18:76:30:6f:ba:6b:39:7a:d3:e5:57:cc:e0:5a:
db:07:c1:89:94:ad:b7:b1:f4:69:7c:89:14:ef:1f:71:16:04:
65:d7:e5:86:da:ab:7f:13:61:ee:8e:c0:0f:e5:dc:0b:31:c3:
05:7a:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org