Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57429.roa
File: AS57429.roa (raw, json)
Hash identifier: RJLubzcx2irKnAoceKyGOyARXmW7w3szMhG155Zpcr0=
Subject key identifier: 3C:B9:01:D9:E1:1C:4C:73:7B:B4:8A:3F:74:CB:E2:0E:AC:06:DF:68
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 512DCD5121F19612710A4CBD97E9BC5B66B38F5F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57429.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 57429
IP address blocks: 2a06:a005:190::/44 maxlen: 48
2a06:a005:1a0::/44 maxlen: 48
2a06:a005:1b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2d:cd:51:21:f1:96:12:71:0a:4c:bd:97:e9:bc:5b:66:b3:8f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=3CB901D9E11C4C737BB48A3F74CBE20EAC06DF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:2c:7d:98:f3:cf:4a:e6:46:84:9f:d8:44:
29:b4:12:c2:8f:ba:9e:26:a5:92:c6:6b:c8:1b:33:
47:57:73:79:30:94:a9:42:4c:11:83:d3:39:5c:59:
ba:d1:f6:30:7e:7e:6f:be:c5:7d:d6:d5:3a:ed:5d:
9c:78:65:60:a6:b7:d9:47:62:f9:f6:39:b0:3a:1f:
00:9a:18:59:a3:82:55:e4:96:78:10:59:55:b5:5e:
3b:1c:5f:24:bc:71:c1:7c:26:c7:5c:ed:3d:6d:08:
47:40:4a:1f:35:2b:f6:af:e6:0e:37:58:4b:63:1b:
cb:4d:60:a1:f5:67:d2:d7:fe:72:71:df:31:49:55:
e1:ff:f5:47:1d:7c:44:3c:cb:cc:2a:0d:ca:cb:71:
07:7e:5a:73:cc:db:aa:43:d8:ac:45:49:a0:57:ac:
70:5e:67:82:74:d0:29:6d:7e:ac:b9:6d:77:cc:02:
96:c4:65:7a:02:5f:e6:ab:06:c6:6f:3e:df:eb:ea:
f9:b0:1f:ae:23:6c:18:b7:1a:2a:0c:ab:52:d7:09:
d3:54:61:97:9e:27:da:71:00:0d:91:4d:94:d4:3f:
28:20:9a:0a:5e:8f:60:1e:e8:3a:bc:12:03:8b:79:
6e:27:71:92:8e:3c:64:7f:76:05:36:d2:f0:6b:29:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:01:D9:E1:1C:4C:73:7B:B4:8A:3F:74:CB:E2:0E:AC:06:DF:68
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:190::-2a06:a005:1bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:e8:d9:d1:f2:a0:86:46:b6:a0:12:e5:c8:a8:cc:b0:7a:6c:
e2:02:ec:4e:ae:77:24:c9:54:6f:f9:0f:2c:bc:dc:71:d9:56:
c9:20:b4:ae:19:17:1e:d7:88:96:98:db:ae:6a:f5:90:9e:59:
9d:a6:4c:0d:00:f3:ab:f2:3f:17:bd:37:d1:5c:1e:a2:b0:0e:
e3:6e:60:f7:f2:ec:17:9d:c9:12:7b:a3:9b:81:22:58:47:37:
fd:51:1a:d0:96:d7:d9:76:ac:d6:69:eb:b8:98:0a:a9:79:47:
e5:b8:ce:48:f9:a9:08:6a:69:05:19:6c:89:49:f4:a2:10:d2:
d7:b8:82:37:20:a4:0d:cb:71:ec:e7:10:c5:dd:36:ff:1b:a8:
8c:25:50:dc:66:6b:db:db:89:ee:f0:2e:c7:d7:10:17:ad:41:
64:42:1a:40:d5:b0:ab:ce:6d:c0:d4:39:f5:6d:4d:e0:8d:69:
c1:25:90:37:c5:ac:d8:be:c2:ca:a3:ce:02:c1:85:78:5c:4f:
54:41:17:b8:ad:b5:4b:74:04:a0:b0:40:8f:93:18:10:88:b3:
7b:58:fe:31:7f:08:1c:6c:3b:ce:c6:cd:d1:7b:a0:3b:6d:07:
ba:39:7c:c6:c8:51:b6:1f:ac:9e:77:24:75:59:be:83:b8:a5:
fd:d6:d8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org