Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58015.roa
File: AS58015.roa (raw, json)
Hash identifier: xUt52eTm5RbIV8QbIJXUD142wb4NcIy+mi/2xpWWqsI=
Subject key identifier: 46:7F:F9:46:C4:BF:62:2E:03:A0:B3:44:D6:9C:03:FC:96:D3:4F:1D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6B35EDD4B6C338DCFDF56B30683BFE72944D8875
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58015.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 58015
IP address blocks: 2a06:a005:4dc::/48 maxlen: 48
2a06:a005:4dd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:35:ed:d4:b6:c3:38:dc:fd:f5:6b:30:68:3b:fe:72:94:4d:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=467FF946C4BF622E03A0B344D69C03FC96D34F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:86:e8:5f:3c:40:5f:d0:af:3d:c4:eb:f6:
b3:23:43:04:84:b2:56:18:c5:58:a1:21:80:d0:35:
2c:10:96:47:d9:43:92:83:27:c8:5c:e3:ff:ac:3d:
a2:3b:8f:ac:d8:07:85:2e:a5:6c:d3:42:13:bd:7b:
08:6e:76:d4:17:6b:93:4c:6f:a3:21:19:12:01:50:
60:7a:6a:17:f1:2d:bb:83:d4:f1:c7:db:58:f7:22:
fe:7b:8f:88:81:d7:36:99:00:f6:7b:d7:3c:9c:d4:
fc:08:19:4b:67:4d:cb:e1:ec:51:3f:b7:76:44:96:
5e:43:da:61:2c:73:57:c5:3c:bb:6d:a5:79:e8:52:
c7:35:e8:3b:7a:36:4f:cf:25:ed:be:53:c9:da:02:
28:42:95:bd:1b:39:ab:7f:fc:2f:3f:fa:05:b0:d3:
ec:d5:13:81:55:48:fe:bd:6e:2c:e7:f6:9c:ba:53:
12:83:c3:33:19:95:07:14:be:04:64:6c:01:9e:1b:
1e:3d:a1:cf:6e:82:88:34:88:18:91:05:86:b4:c3:
c6:c4:c8:14:cd:18:98:ec:dd:28:a6:af:f8:39:85:
cc:29:e1:b6:86:c2:4a:c6:e5:d4:05:b3:aa:f1:d0:
67:09:a3:db:83:14:d1:8d:4d:8a:bc:2d:8b:3c:27:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:F9:46:C4:BF:62:2E:03:A0:B3:44:D6:9C:03:FC:96:D3:4F:1D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4dc::/47
Signature Algorithm: sha256WithRSAEncryption
77:0b:3a:d5:6a:65:48:c7:b9:b9:81:37:97:ce:38:95:e4:05:
0a:e2:42:b8:8a:d5:cd:7b:d3:0b:35:47:6a:7c:45:ee:48:ee:
f5:86:07:df:2c:09:47:b9:36:43:ed:98:a8:1f:46:cb:e0:79:
2d:65:a1:42:f1:1c:4b:dd:f5:8a:c1:33:21:57:b0:4b:01:ca:
29:6e:bf:26:67:64:8a:19:03:9a:aa:b0:26:6d:e0:76:06:41:
81:1f:6c:86:e3:e7:5e:1f:be:4b:4c:db:6b:80:8f:69:58:28:
ce:6f:42:08:65:3a:6e:e6:72:2e:98:0d:ea:ef:9b:8e:a3:62:
79:35:fc:54:eb:32:a4:fb:a7:a6:55:79:18:ba:87:ff:fa:76:
b3:81:da:28:3e:05:42:9f:80:92:da:6c:12:c9:1c:ef:b6:5a:
87:f2:ef:30:1c:45:25:c6:de:ba:8d:4b:43:22:b7:f2:ea:0e:
b6:6b:cd:9f:d6:35:f6:a4:6b:95:f1:04:3b:9f:d6:13:7e:fc:
af:bc:81:66:35:bf:b1:1b:42:fd:c0:1d:5d:ad:f2:87:b2:b3:
00:1b:4f:b7:13:6a:c1:59:03:b6:0e:ad:14:3e:e9:c2:d5:dd:
66:eb:41:ad:3f:64:2c:0d:d3:d3:d3:17:e3:05:84:07:de:a1:
49:44:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org