Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS59474.roa
File: AS59474.roa (raw, json)
Hash identifier: qH21SuMwviPcFpxwBsvIXIZRciCmwHnJktxoEUnU0nI=
Subject key identifier: 43:B4:55:A8:63:9D:10:EC:D3:EA:66:6B:33:3A:BF:8C:77:39:03:9B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 25A43ABE55A98B76FE6361332CA500F5A388A197
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS59474.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 59474
IP address blocks: 2a06:a005:f30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a4:3a:be:55:a9:8b:76:fe:63:61:33:2c:a5:00:f5:a3:88:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=43B455A8639D10ECD3EA666B333ABF8C7739039B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:91:07:13:29:7c:70:01:9e:36:c5:89:95:
c4:38:0b:2b:1b:a2:36:54:e0:74:1a:8e:04:72:77:
fa:1d:3d:13:c0:b1:9b:2a:17:84:32:bd:9c:7b:87:
48:2a:f4:97:0a:19:87:0d:8b:94:e1:41:6f:4f:ce:
c8:cc:27:03:6d:00:8b:9c:85:72:62:dd:69:04:b7:
55:2a:0a:d1:33:0b:cb:9b:97:93:3f:6f:d1:2d:00:
5a:80:a4:2a:92:7e:eb:e1:eb:96:78:fb:db:30:a9:
ea:b1:88:50:78:ba:6d:ec:f5:3b:10:35:6c:de:98:
f9:e8:45:f9:5d:51:b4:37:18:23:fd:32:7b:c5:e9:
59:5f:68:b3:3a:99:f7:0c:56:99:d1:a1:e0:11:f9:
a0:b0:aa:07:62:ba:86:a3:27:4f:00:69:e1:b8:47:
5f:a4:6a:fe:73:e3:b9:c1:93:60:95:c9:d1:58:2f:
d0:52:88:27:48:d0:c5:ac:ef:aa:2e:c2:79:e1:cc:
db:51:05:2e:a5:b5:01:58:41:07:d8:90:4f:55:13:
8a:4f:69:25:46:7c:50:72:49:3e:ed:c8:ad:e4:4a:
2c:d2:a5:06:83:a5:71:7a:0a:f8:72:07:b3:1e:fc:
c8:c4:55:37:75:e9:d9:53:42:e7:86:3d:cc:2e:a2:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:55:A8:63:9D:10:EC:D3:EA:66:6B:33:3A:BF:8C:77:39:03:9B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS59474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f30::/44
Signature Algorithm: sha256WithRSAEncryption
8e:49:5f:29:39:49:15:9b:6d:ad:1e:8f:b5:0e:69:af:a5:c9:
b9:82:db:8c:9b:c9:b2:7b:55:38:a9:0c:45:c7:79:39:d9:95:
72:8d:2d:bc:56:8e:2e:91:fc:1e:2f:13:6d:05:9f:05:01:73:
ab:e9:fc:0d:92:09:ce:e0:77:3e:06:be:06:f2:d8:d1:5a:b8:
ea:95:03:79:22:5e:c6:dc:10:78:d5:56:4d:ef:44:18:f5:52:
52:d3:60:86:94:65:32:27:74:05:10:59:fc:ff:fc:4c:c8:92:
4d:e2:b5:50:6e:5a:7d:83:46:cc:3d:c2:cc:a6:23:c8:0e:fb:
69:c6:02:74:f3:f3:9e:8e:03:e0:8f:28:b5:c2:8a:e2:ad:7e:
16:94:f4:71:07:39:73:ad:ea:65:14:91:95:11:3b:08:2d:08:
64:79:35:f7:86:f1:e5:2d:dd:5a:ff:ba:c0:00:3a:95:6c:2b:
67:02:ef:b8:03:60:0a:44:42:1e:10:db:c1:51:1f:41:f2:55:
8d:d2:f4:1e:f4:f4:77:0f:61:85:4c:5b:1d:7b:ca:66:49:83:
1a:82:27:30:74:ba:d6:13:57:63:1c:c6:8e:ce:9b:9c:a0:d4:
64:86:86:df:30:91:f8:18:e3:de:d3:91:9c:91:3e:d6:5a:cc:
38:3a:0a:4c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUJaQ6vlWpi3b+Y2EzLKUA9aOIoZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjVaFw0yMzEyMzEyMzU5MjVaMDMxMTAvBgNV
BAMTKDQzQjQ1NUE4NjM5RDEwRUNEM0VBNjY2QjMzM0FCRjhDNzczOTAzOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzZEHEyl8cAGeNsWJlcQ4Cysb
ojZU4HQajgRyd/odPRPAsZsqF4QyvZx7h0gq9JcKGYcNi5ThQW9PzsjMJwNtAIuc
hXJi3WkEt1UqCtEzC8ubl5M/b9EtAFqApCqSfuvh65Z4+9swqeqxiFB4um3s9TsQ
NWzemPnoRfldUbQ3GCP9MnvF6VlfaLM6mfcMVpnRoeAR+aCwqgdiuoajJ08AaeG4
R1+kav5z47nBk2CVydFYL9BSiCdI0MWs76ouwnnhzNtRBS6ltQFYQQfYkE9VE4pP
aSVGfFByST7tyK3kSizSpQaDpXF6CvhyB7Me/MjEVTd16dlTQueGPcwuoo3/AgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUQ7RVqGOdEOzT6mZrMzq/jHc5A5swHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTNTk0NzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqBqAF
DzAwDQYJKoZIhvcNAQELBQADggEBAI5JXyk5SRWbba0ej7UOaa+lybmC24ybybJ7
VTipDEXHeTnZlXKNLbxWji6R/B4vE20FnwUBc6vp/A2SCc7gdz4Gvgby2NFauOqV
A3kiXsbcEHjVVk3vRBj1UlLTYIaUZTIndAUQWfz//EzIkk3itVBuWn2DRsw9wsym
I8gO+2nGAnTz856OA+CPKLXCiuKtfhaU9HEHOXOt6mUUkZUROwgtCGR5NfeG8eUt
3Vr/usAAOpVsK2cC77gDYApEQh4Q28FRH0HyVY3S9B709HcPYYVMWx17ymZJgxqC
JzB0utYTV2Mcxo7Om5yg1GSGht8wkfgY497TkZyRPtZazDg6Ckw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org