Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56808.roa
File: AS56808.roa (raw, json)
Hash identifier: 5IKor9PZgXH7CT6fEUljWPX1c5lo0+RwU3k+KUYMfLw=
Subject key identifier: 96:DF:D6:FA:61:42:98:5D:C4:2C:BF:A9:E0:9E:B5:99:B6:1E:90:52
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 626ED2B9299D63AEBB70274BCEC9059110FBBB24
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56808.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 56808
IP address blocks: 2a06:a005:1273::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6e:d2:b9:29:9d:63:ae:bb:70:27:4b:ce:c9:05:91:10:fb:bb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=96DFD6FA6142985DC42CBFA9E09EB599B61E9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:39:b0:77:58:ba:9f:64:33:6d:53:18:6c:
a5:e2:c8:6c:8a:d5:81:a2:3b:16:3b:c0:0c:c3:8d:
85:77:33:da:5c:17:21:a1:fc:80:fd:3d:61:4c:95:
80:56:cd:2f:9e:f2:a4:83:4d:a5:24:7c:12:5b:fb:
26:8b:41:cf:1a:a8:14:40:26:61:d9:84:68:71:55:
2b:5e:89:4c:52:b7:b2:dc:7d:9f:10:63:85:66:6c:
d2:f8:8c:27:32:57:0a:da:67:b2:9a:e9:65:91:ec:
ae:bf:2d:5b:7e:76:75:c5:93:66:3d:fa:6e:48:76:
63:42:43:0d:b9:68:63:f8:c3:bf:ec:59:80:d2:dd:
ab:d1:cf:d0:6c:5b:21:54:21:5f:01:33:ad:b1:c4:
ca:d6:be:34:3c:01:02:a6:0d:73:87:13:09:2a:8c:
b1:50:df:03:5e:7f:9e:de:17:fb:df:a9:60:a5:7b:
e3:38:11:f4:36:26:e5:f7:ef:0e:26:11:b6:20:76:
c1:36:4d:de:79:d5:de:9a:b4:fb:af:4b:78:b6:ad:
e1:1f:02:d6:2f:80:a7:b9:e4:d2:9f:1a:a2:1c:00:
b8:69:f9:6f:69:44:0b:ee:71:ba:da:19:e3:8d:99:
86:b8:8f:7d:ac:a2:51:9c:19:a7:e5:ac:3a:14:ee:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:D6:FA:61:42:98:5D:C4:2C:BF:A9:E0:9E:B5:99:B6:1E:90:52
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS56808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1273::/48
Signature Algorithm: sha256WithRSAEncryption
37:ee:f9:c5:ea:cb:ba:af:04:b2:da:58:37:46:ca:3e:d1:0d:
85:64:a1:45:f6:60:c9:ec:97:d7:c3:da:84:37:71:48:ff:6b:
9a:5a:d4:5a:20:0e:5d:bb:17:d8:53:45:45:d1:c4:57:1f:ca:
25:50:58:16:fa:fb:04:09:77:1e:cd:e7:e7:19:09:9f:b2:ce:
33:6f:9f:5a:f6:9a:48:5e:4e:e3:d3:d4:f3:8c:e0:ab:27:47:
2c:37:b6:bb:b2:02:65:72:36:df:c1:62:0f:a1:19:63:b0:f7:
c5:22:71:76:db:3d:28:43:30:a3:7c:52:89:f7:cd:89:0c:35:
16:4e:55:f2:66:56:af:48:0e:fb:e4:c8:98:3d:ae:8d:e6:95:
1e:f2:ab:bb:86:82:89:d6:c1:c1:70:a3:59:02:97:22:b4:74:
1c:c2:9f:8b:7d:79:7d:b9:6c:df:f5:27:ee:40:1f:9a:7c:a7:
2a:a6:4e:97:95:04:b4:52:f8:f4:4c:df:12:d3:42:4e:4d:9e:
88:2f:29:2c:82:47:d8:bd:04:dd:7d:be:c7:88:24:b9:99:e1:
ee:d9:b6:18:f1:42:84:fe:9d:6f:29:bd:71:e6:6f:2e:d2:a0:
6f:52:68:30:31:51:87:5e:44:c5:ba:a6:bf:8c:c9:f8:cd:e2:
71:02:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org