Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54041.roa
File: AS54041.roa (raw, json)
Hash identifier: w12ISbpm5iEkfsnwp5s7B2B2xxxGz1fct2YwCQr8J/k=
Subject key identifier: BE:CC:91:C0:37:C3:F1:84:EC:BF:82:77:AF:E3:DE:13:BE:FC:82:2C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 62E780C56B1492BA8AED707A543C71A8E1492A2D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54041.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 54041
IP address blocks: 2a06:a005:1085::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e7:80:c5:6b:14:92:ba:8a:ed:70:7a:54:3c:71:a8:e1:49:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=BECC91C037C3F184ECBF8277AFE3DE13BEFC822C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:39:69:d2:a0:c0:0d:e0:9d:e2:ac:96:23:
6d:80:33:7d:05:1d:4a:29:4a:e2:28:33:03:ca:e1:
53:c1:59:f3:64:b3:d9:7a:a1:8a:e0:44:af:00:bb:
35:d7:43:fa:fd:8d:e2:23:47:21:63:14:15:8d:2f:
08:42:9c:1c:12:b9:82:e7:65:a3:78:30:33:01:c8:
7f:d3:00:54:5a:31:f2:10:22:d8:1d:88:00:0e:9d:
81:80:f0:48:b2:df:9e:9d:e3:eb:ef:15:e1:c1:1d:
39:37:a0:52:ba:5e:a8:91:09:97:2d:0a:f8:5b:6e:
2b:c7:b5:63:ac:5b:88:09:80:c6:d1:5c:29:f7:16:
e2:29:a2:d5:40:37:a7:11:43:30:c8:d4:79:79:dc:
f3:ba:56:ec:df:c7:c6:2f:1e:be:8a:48:13:d0:56:
2b:82:82:df:d9:0d:18:2f:72:44:58:2c:d8:aa:02:
0f:01:6d:be:d9:55:e2:48:26:8e:d0:e8:26:db:4a:
ad:61:3b:f0:34:df:79:ad:8f:41:b5:17:76:a0:73:
84:40:b3:29:d0:80:1b:8a:ba:bd:d7:af:f9:f2:f0:
11:5f:9a:41:e8:28:94:ef:b1:8a:cd:e8:53:8b:6e:
db:b6:9c:b7:1b:a0:07:d7:21:3d:57:45:44:5e:48:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:91:C0:37:C3:F1:84:EC:BF:82:77:AF:E3:DE:13:BE:FC:82:2C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1085::/48
Signature Algorithm: sha256WithRSAEncryption
25:6b:a4:a4:54:71:11:4b:7f:3d:d5:3b:2f:57:03:d5:cf:34:
4c:48:e0:d4:4f:fd:82:c6:e5:d1:0c:e1:b8:84:e3:28:61:c5:
9e:05:0c:a2:dd:0a:f2:59:8b:53:25:12:5c:35:e2:4b:12:03:
67:d8:42:a6:5a:8e:2a:c2:c8:5b:2a:6c:62:80:9e:53:b1:ed:
ca:e9:7f:61:2e:ac:b9:f9:18:c4:2b:dc:5f:b7:6d:21:3d:e5:
12:f8:0b:33:5b:be:8f:bb:02:18:83:45:7d:46:1e:35:16:61:
4a:c2:5a:61:c9:d5:c4:97:f6:ea:90:64:a2:23:3a:13:fa:63:
14:bb:06:eb:a8:50:9f:4c:27:2d:fc:10:ae:e1:d9:57:8b:ba:
ee:fe:74:f6:ed:6c:fd:4b:c8:61:1b:82:7b:d9:6b:2d:b7:cd:
0d:5d:18:b4:ca:b1:8b:08:03:de:be:7b:98:d1:08:af:9e:53:
53:22:6e:4b:70:7c:af:6f:40:a9:fd:cd:5e:1b:f4:d6:de:26:
26:58:7d:e1:1e:bf:19:e1:dd:fb:72:ad:02:6d:eb:a0:10:ba:
39:9d:e2:d3:83:62:1e:27:1c:7b:06:e0:fb:36:d1:a4:22:ab:
16:df:25:f6:84:ca:14:40:3a:c0:67:af:68:cf:3e:61:10:ec:
47:59:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org