Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57481.roa
File: AS57481.roa (raw, json)
Hash identifier: T7aOJIxqwSUQeSKcvBw31lIxhHmyEh0Bh/0t8vOlZxs=
Subject key identifier: 88:85:65:DE:04:73:E5:23:0D:05:37:2B:05:5D:5D:13:7D:79:51:C4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6C1EA86F90392FF3A950A5781686A82D53BBD63B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57481.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 57481
IP address blocks: 2a06:a005:1d20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1e:a8:6f:90:39:2f:f3:a9:50:a5:78:16:86:a8:2d:53:bb:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=888565DE0473E5230D05372B055D5D137D7951C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:c9:68:da:ad:74:ec:d9:fc:af:e6:4a:73:
3e:cc:39:d3:14:b5:e3:53:ac:72:92:5e:ee:72:8a:
dd:4c:92:34:00:80:a8:46:0b:88:1e:2e:53:8f:01:
7d:45:a5:8a:2b:d7:e7:fa:58:49:ec:e0:05:c2:79:
c9:82:77:b6:ce:c7:be:5b:b8:e1:a5:71:24:81:dd:
7d:f5:7a:34:39:a9:f6:7a:74:af:63:1f:f2:10:fd:
68:3f:98:4f:41:a5:72:e6:03:0d:96:c6:c0:9e:49:
45:55:e3:ac:e1:64:8e:fa:51:ad:7d:d8:4d:96:6a:
5e:58:58:e9:1b:06:fb:43:3b:e5:7a:73:e6:84:1f:
ee:ee:fa:68:7d:53:6a:34:f9:9c:b2:53:78:c2:58:
f6:9e:9f:9b:e9:e9:d6:39:b0:96:de:02:69:0a:c1:
cf:d0:5e:a1:e5:90:a4:ee:5d:e1:53:5d:bc:c2:e9:
58:98:c8:e4:88:c8:18:b5:da:46:cc:ae:c5:14:df:
3b:b2:de:76:b4:14:3c:3c:d9:e0:c9:88:4f:72:e6:
df:ab:70:28:2d:13:cf:94:72:a9:53:28:a7:09:f5:
a3:70:ec:3c:58:d1:f0:02:c0:72:98:ef:13:00:63:
15:4d:e0:cb:76:5d:46:1f:c4:0f:18:a1:6c:ce:87:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:65:DE:04:73:E5:23:0D:05:37:2B:05:5D:5D:13:7D:79:51:C4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS57481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d20::/44
Signature Algorithm: sha256WithRSAEncryption
9b:96:ad:1d:ec:6a:1e:73:76:af:25:eb:a8:53:c9:db:aa:85:
b1:92:ec:4c:7b:ab:16:3d:3f:70:84:e8:2d:c0:fd:79:55:80:
57:f2:06:1f:52:13:20:5b:12:55:e7:d0:f7:c7:34:2f:ef:05:
7b:60:a5:85:a1:45:b6:86:7f:c7:2c:a1:7b:b2:c4:52:b1:0d:
4b:4e:65:e0:e7:3a:5d:2c:e0:73:c0:fb:64:57:58:a1:7b:ad:
27:49:cc:00:93:71:d4:18:35:ee:c0:9c:0f:85:8c:48:ce:2b:
df:c4:5e:5c:35:9d:bd:67:1c:bc:18:f6:4a:60:67:2f:a8:0c:
aa:0b:ee:c7:95:2f:ff:86:76:13:b5:a4:c4:34:d4:80:3d:19:
b4:17:bf:e8:a0:c0:d9:b6:7e:65:7b:4b:f4:95:01:56:fe:72:
66:9b:49:66:8c:54:a8:2d:01:ae:a3:fd:c4:0b:ef:67:97:9e:
87:67:98:b3:55:f5:3d:c6:d1:7f:3a:61:02:88:1a:35:4c:22:
ec:cd:03:4c:71:e8:df:71:a5:1c:9a:0f:a9:8e:9c:05:f7:73:
dc:dc:40:52:27:c5:2d:0e:eb:19:80:45:ea:db:1c:9f:94:8c:
c3:55:91:05:1d:00:7d:1f:fb:15:90:ba:4f:16:29:02:45:a4:
c2:9b:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:40 2025 by rpki-client