Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54681.roa
File: AS54681.roa (raw, json)
Hash identifier: SFWSRVSUY4v81KMvvW+K2kS96Ox2k3O8tXNLEWGtmys=
Subject key identifier: 62:9A:61:57:EC:04:32:70:05:47:5E:C3:97:0D:73:37:9D:9C:B8:F0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6E57B4235E57B89B01319515C67B16FFF44E0582
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54681.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 54681
IP address blocks: 2a06:a005:ee0::/44 maxlen: 48
2a06:a005:ef0::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
2a06:a005:f20::/44 maxlen: 48
2a06:a005:1506::/48 maxlen: 48
2a06:a005:18a0::/44 maxlen: 48
2a06:a005:1950::/44 maxlen: 48
2a06:a005:1960::/44 maxlen: 48
2a06:a005:1970::/44 maxlen: 48
2a06:a005:1980::/44 maxlen: 48
2a06:a005:1c7e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:57:b4:23:5e:57:b8:9b:01:31:95:15:c6:7b:16:ff:f4:4e:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=629A6157EC04327005475EC3970D73379D9CB8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:32:5e:ae:af:a5:4d:c7:76:12:93:09:e8:
73:2a:ef:7b:4e:8b:bc:1a:e2:fc:a5:9d:40:d5:4f:
01:a2:12:a5:9a:b9:07:64:e9:5e:c9:69:bc:a3:9c:
54:06:d2:0c:61:c2:8f:56:11:a3:aa:af:fd:11:22:
e3:27:25:6a:1b:d0:b5:3b:e6:e1:92:26:c6:95:b8:
ff:85:56:ab:a8:60:d1:68:6c:6f:d7:de:34:cc:f2:
e8:58:ff:51:06:68:85:fa:e8:88:0c:38:84:68:83:
f3:7b:e6:02:72:2d:60:01:7b:72:3f:88:b2:76:61:
31:6a:b7:9c:cc:89:f3:a3:9f:70:81:80:50:dc:d2:
2c:aa:9f:49:3b:e9:89:d6:48:6f:34:23:cd:4e:d7:
f1:c0:d3:41:e2:8e:9d:0d:83:1e:bd:8f:a0:b6:12:
54:21:01:3b:91:80:bf:67:fc:fa:b6:96:d7:6b:65:
2e:cc:1b:af:09:01:5f:e8:f5:8a:8f:c3:d4:2d:a2:
00:84:7d:87:b4:03:92:0a:96:f0:b8:4c:9d:b3:45:
d9:ef:70:76:1a:c9:dc:01:51:4d:a2:93:f0:95:d7:
ab:86:61:43:79:0e:3d:ec:ef:a1:6d:33:b2:e8:3f:
1c:c1:df:0f:ff:ce:c3:27:e8:b8:30:ca:1c:a2:35:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:61:57:EC:04:32:70:05:47:5E:C3:97:0D:73:37:9D:9C:B8:F0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS54681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1506::/48
2a06:a005:18a0::/44
2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1c7e::/48
Signature Algorithm: sha256WithRSAEncryption
15:3a:a1:ce:70:e0:b8:80:a5:10:9c:79:13:8c:8d:ce:34:0b:
84:57:46:e2:c5:75:f6:bb:32:e7:82:a3:c5:5b:03:3a:6e:a1:
6d:73:1d:2e:39:fc:51:fc:67:b8:76:77:31:6b:2c:ee:61:a3:
99:3b:05:a4:c9:15:75:6e:54:11:68:52:54:03:84:e7:b4:73:
d0:14:de:e5:92:06:3e:23:7d:71:1b:f3:8a:9c:be:26:c0:77:
3e:4f:0e:c9:eb:14:a6:65:e8:09:ea:d6:17:77:aa:bd:5b:5f:
85:bd:96:a0:c2:8c:6b:f4:17:8b:6c:b2:e8:0d:72:f6:71:2b:
16:5f:a4:dd:b9:d0:50:6a:55:ca:62:b7:e4:db:81:50:6a:05:
3f:a3:eb:55:f7:13:e2:12:0a:3d:ba:1b:6c:b3:9a:a5:0d:f3:
63:7a:f6:d6:65:05:07:a6:15:19:3d:48:cf:26:ef:69:03:8b:
dc:1e:2a:e1:b9:f4:b3:59:39:c8:04:ea:0a:f8:d4:d4:5b:da:
1b:9a:27:80:71:a1:66:9a:6d:dd:10:1b:ea:b4:f2:9c:69:bb:
9b:93:6e:a1:b7:8f:49:dd:6c:f5:77:29:97:fa:d8:cd:e1:37:
cc:fd:95:bf:27:16:6f:bd:d4:9a:9f:97:22:a6:8e:97:aa:7b:
30:d6:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org