Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51856.roa
File: AS51856.roa (raw, json)
Hash identifier: CJctAxqT0MGJt5GQ9XFEI6Tud40B9313jVIChuervrA=
Subject key identifier: 8B:87:1B:37:A5:AC:36:B7:C3:B8:BB:ED:67:8B:CA:58:B1:8E:65:C5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5203AF0DC6612B2D3A9904FD5BE209FF216A1828
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51856.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 51856
IP address blocks: 2a06:a005:1310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:03:af:0d:c6:61:2b:2d:3a:99:04:fd:5b:e2:09:ff:21:6a:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=8B871B37A5AC36B7C3B8BBED678BCA58B18E65C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:50:de:4d:8d:f8:4f:47:69:a3:8c:b9:44:
27:7e:b9:06:4b:67:71:d4:e2:9a:af:2e:19:7f:1f:
9d:03:4a:85:68:05:d9:a5:d4:62:21:cf:77:21:e9:
e9:28:16:ac:0c:e4:e6:07:79:64:59:95:68:46:e8:
f0:ef:ff:25:61:ff:8c:49:4e:9c:70:55:3d:79:c1:
20:cd:f4:0f:9e:c5:2a:e1:5c:f6:ef:33:72:99:5c:
87:f3:72:b1:dd:b3:c6:b2:cd:6e:19:88:5f:bf:30:
3f:27:a2:0d:70:58:71:df:6b:2b:a7:a0:5e:51:3e:
58:66:71:ac:2f:cf:d3:3a:c5:f3:3a:4d:18:35:2d:
f3:af:07:c4:c4:c2:1c:4d:01:5f:85:12:83:a8:1b:
8f:19:2e:ee:09:43:1b:de:83:55:60:dc:43:fa:0d:
91:9c:93:e8:65:a5:41:5b:02:25:3a:30:84:0b:68:
ec:6c:0c:90:e6:8c:9f:3d:75:27:a3:1c:64:92:bd:
7c:53:6f:4f:89:1d:cf:6c:a3:4d:72:65:ce:fc:09:
f1:29:7a:4c:6d:38:42:3f:bb:92:ec:6a:31:6c:ef:
0b:a7:e7:f8:89:91:a2:7f:f2:05:c2:0a:8a:78:4f:
44:cc:5f:ff:d3:5f:6f:ce:98:42:54:d3:66:47:a3:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:1B:37:A5:AC:36:B7:C3:B8:BB:ED:67:8B:CA:58:B1:8E:65:C5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::/44
Signature Algorithm: sha256WithRSAEncryption
7b:ad:1d:b6:29:67:98:08:0c:69:82:b2:f8:df:96:d5:6e:08:
22:d5:ac:9b:0e:b4:71:04:e5:f4:33:43:43:0b:24:68:a8:9f:
61:a6:4a:74:ab:25:8f:35:a3:8a:de:84:b7:b5:6a:bf:6e:6a:
21:e0:a2:3d:1b:bd:5a:c7:00:8e:db:21:6d:2f:ca:3a:9e:23:
4d:80:c1:76:5c:84:09:c7:ad:7e:f0:a4:04:34:c7:90:d9:7c:
1b:68:db:97:15:4d:aa:48:f3:e9:a2:92:c7:1c:7a:3c:8b:14:
5a:3d:f8:68:1b:34:24:8d:63:92:41:40:44:1e:c6:18:f9:d4:
31:b3:f5:cd:58:2f:2f:5d:92:3b:7c:ea:93:a8:9f:76:93:69:
b7:7e:11:1b:9c:4d:46:92:f1:bb:65:8d:67:92:1c:07:27:8b:
e9:56:e1:dc:9b:81:4f:8e:3c:de:4b:6e:05:56:fd:ba:b3:1a:
47:01:e8:08:a6:93:b6:52:f3:76:ab:ad:71:d0:85:54:82:86:
4e:e1:ed:e6:e3:a5:6d:48:87:07:8e:e5:61:84:0d:8e:ad:24:
55:2a:91:d5:20:e1:c7:66:3c:f7:c2:9d:8f:19:37:69:b9:bb:
79:f3:bb:09:93:77:21:15:20:95:32:13:5d:32:64:31:99:66:
6e:ec:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org