Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58132.roa
File: AS58132.roa (raw, json)
Hash identifier: wZWatPWLPrqJO4h6wq3NaScoF3CGLU43Yt/LL8gVC00=
Subject key identifier: 30:09:60:94:F3:B9:11:8A:FC:50:04:B8:CF:B7:8B:DB:0B:29:62:C2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2C40EFB55BC7BCB8453914E3CA702B37E91E1F00
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58132.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 58132
IP address blocks: 2a06:a005:2d9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:40:ef:b5:5b:c7:bc:b8:45:39:14:e3:ca:70:2b:37:e9:1e:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=30096094F3B9118AFC5004B8CFB78BDB0B2962C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:55:df:f2:84:77:74:3e:2f:f4:b0:25:e9:
97:96:1d:79:69:20:1c:72:d3:36:fe:e2:92:73:6c:
cd:f7:d4:e7:e8:60:08:63:c6:97:c4:6a:5e:b8:68:
65:f0:fd:fc:74:94:4b:33:fc:ea:26:97:35:67:bc:
b0:92:74:83:28:0a:f1:4d:de:a1:4b:9b:01:2f:a5:
3d:11:64:73:5b:21:fa:79:7f:16:4f:15:bc:7e:43:
49:d6:a5:7a:ef:01:73:6b:92:cd:50:a9:2b:5e:6c:
59:bf:da:d0:45:33:f8:85:6c:74:f0:5d:09:96:2b:
92:09:e8:fa:7c:10:c0:2a:bb:3e:ed:e3:e1:46:49:
eb:b6:d0:8f:70:ac:b7:3c:db:8e:ce:1a:f4:a8:3f:
bb:f1:22:a3:f0:4e:53:4f:4b:59:99:d3:4e:63:b3:
25:86:48:11:2b:be:92:78:16:cb:cb:06:45:df:90:
82:90:98:57:e0:aa:03:c5:44:b4:c1:53:32:1a:9a:
50:e1:f1:fa:73:51:45:d1:06:4e:ee:1a:0b:7c:31:
23:a5:4a:39:ef:e2:39:25:ea:a9:56:f2:d9:47:6a:
f3:ae:3a:3f:49:df:d3:a4:be:3b:19:e1:29:26:11:
e8:0d:07:af:31:70:a5:1f:b5:8c:3a:ac:e7:7d:ae:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:60:94:F3:B9:11:8A:FC:50:04:B8:CF:B7:8B:DB:0B:29:62:C2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS58132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d9::/48
Signature Algorithm: sha256WithRSAEncryption
23:a1:d5:e7:dd:09:22:2d:ca:fd:b3:47:90:e4:5e:43:bb:d1:
33:56:1d:b2:1c:ce:8e:25:8e:f7:8c:0c:69:db:74:ca:c0:57:
1d:ca:bc:2f:aa:c7:95:f3:65:fc:30:c7:49:86:d6:3e:18:52:
c4:88:2f:14:1a:56:c8:d0:58:d4:62:5c:01:b4:cf:2b:9e:e2:
47:d7:bb:4e:a7:88:3c:ff:b7:76:52:cf:8c:8b:fc:74:8c:b3:
9c:d4:b5:85:05:cc:0d:14:24:08:d4:e4:e7:39:2c:20:bf:bd:
32:00:62:3a:8b:d2:ea:20:b9:ae:79:7b:1c:65:c3:1a:d1:14:
64:2c:da:d9:23:6a:e8:77:53:4f:ad:12:e8:84:06:b0:24:f9:
45:25:6e:5f:d5:7b:6d:b4:dc:6c:a5:0a:d1:06:c9:d1:9a:ab:
79:dc:02:53:b2:93:e0:1c:b7:97:d5:b4:29:8b:71:01:c0:b0:
7b:a6:5d:8c:61:26:8a:36:8f:db:9a:84:58:00:61:18:39:59:
0e:52:28:25:17:90:08:7a:e0:19:9d:04:a8:d3:e9:fd:9f:be:
bb:42:5b:da:45:42:b2:8a:f3:eb:a1:0f:44:fd:4d:47:32:ac:
d9:0b:24:0b:c0:57:cb:c6:3a:c9:51:06:67:8e:33:2c:e7:09:
d6:95:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:21 2025 by rpki-client