Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56696.roa
File: AS56696.roa (raw, json)
Hash identifier: xhecrf9ffhsAln9JRv5/sWhnXuTO7ZXe7n7QnJKx6Aw=
Subject key identifier: 15:5E:47:B2:4E:3C:86:7B:9D:9A:C0:C3:6B:46:C4:5C:A1:2F:7D:6B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4A07A54E3684312D1104B3B27A799DB06E5E9A45
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56696.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 56696
IP address blocks: 2a06:a005:5e5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:07:a5:4e:36:84:31:2d:11:04:b3:b2:7a:79:9d:b0:6e:5e:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=155E47B24E3C867B9D9AC0C36B46C45CA12F7D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:07:c7:5b:7d:e0:70:da:7a:c9:2e:b3:5e:
88:15:76:94:76:4d:c1:38:fc:ea:69:24:cd:3d:05:
96:03:59:2b:6f:d4:0d:39:9b:5e:cf:1e:b1:fa:f9:
fe:58:38:b9:86:ae:c5:f9:24:fe:64:e7:05:9c:80:
3b:53:95:b2:95:77:a5:b1:e9:21:74:65:49:ac:dc:
11:9e:f3:27:9d:f3:b0:0e:30:12:cc:7c:f9:d3:62:
2f:e4:a2:5d:31:eb:6c:49:c9:90:4b:b8:e1:b0:b9:
7b:0c:a7:d2:0f:9a:a7:f8:07:4f:bf:4f:26:10:d9:
33:a9:1d:60:c2:fe:91:c4:9d:cb:69:70:13:1e:76:
66:7f:97:10:81:94:4f:fb:d9:0c:0f:a3:df:5d:bb:
68:b5:34:42:cf:dd:84:49:7c:dd:8a:a5:94:26:2a:
e9:3a:86:b2:29:87:89:26:d2:97:1e:50:4b:86:86:
08:a2:05:4f:48:7d:fb:fd:13:ec:04:50:54:00:11:
a8:27:88:a0:56:fc:57:67:ba:52:bc:52:2a:d8:bf:
07:00:a1:7a:a0:2c:65:57:11:17:e4:80:78:5d:49:
cc:53:31:14:f2:88:cb:61:26:51:53:68:b4:40:de:
6e:ba:4e:5c:4f:a0:da:df:8e:2c:82:27:bd:aa:0a:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:47:B2:4E:3C:86:7B:9D:9A:C0:C3:6B:46:C4:5C:A1:2F:7D:6B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e5::/48
Signature Algorithm: sha256WithRSAEncryption
31:50:8c:2b:1c:1a:e3:01:cb:0c:cd:9f:75:8c:60:8d:98:bc:
47:f2:0e:a5:1e:ce:b9:81:39:80:bc:f3:cd:86:e5:fb:63:82:
25:fc:19:4c:84:52:44:54:28:05:b7:d2:38:14:dd:a6:a2:7a:
15:a1:54:22:f2:84:23:a4:16:e8:86:6c:a0:7e:ad:ca:af:1d:
d0:e2:1b:f1:d0:81:5a:38:ef:9e:f8:7b:5b:d8:50:27:1a:f5:
eb:ea:14:3b:1c:92:aa:bb:63:f5:27:97:98:51:b6:20:3c:ea:
95:b5:94:c7:cd:2d:bd:f7:4c:fd:e6:78:15:fa:25:23:1f:df:
02:ed:8a:13:32:53:d7:9e:5b:4f:da:26:37:90:b2:33:2f:ff:
56:d1:ba:24:ce:7e:0a:c7:f5:36:0e:d4:7e:52:9a:36:e9:a5:
70:a6:58:bc:a9:bb:fa:d5:b0:19:9f:a6:67:21:82:6f:fa:98:
a3:e4:74:a8:e3:91:05:01:df:b6:4f:0a:a1:58:aa:e2:1c:5c:
81:ce:78:29:43:c4:ac:52:42:27:b9:bb:4b:97:cb:58:90:15:
a8:12:14:bc:a4:76:eb:f7:2d:21:5a:b5:10:c8:0d:4e:d2:d3:
ff:8d:4c:79:10:de:52:74:08:77:ac:93:35:92:91:27:41:4c:
e0:70:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org