Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60326.roa
File: AS60326.roa (raw, json)
Hash identifier: ZYOXAVtbtbJZKDLhhIoT477gN36/bkn47N0dE4qJGF0=
Subject key identifier: 38:1A:8F:7F:53:8B:3E:B6:F7:BF:BE:14:CF:DC:4D:1E:3C:07:61:CC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 01C43DC311DAD1D9675A0E0731F2C884D15246A2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60326.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 60326
IP address blocks: 2a06:a005:590::/44 maxlen: 48
2a06:a005:8f0::/44 maxlen: 48
2a06:a005:1060::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c4:3d:c3:11:da:d1:d9:67:5a:0e:07:31:f2:c8:84:d1:52:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=381A8F7F538B3EB6F7BFBE14CFDC4D1E3C0761CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:1b:1b:6d:73:cc:cd:0e:a7:8e:7b:3b:ed:
6c:76:13:4e:ed:cc:f1:ae:ea:ef:ef:b2:67:e3:94:
9e:cb:93:8e:f0:fc:0d:84:8a:1b:6d:67:cc:2e:42:
77:ac:65:87:fc:bb:af:97:ef:70:c5:1e:df:f0:7d:
21:db:a0:46:4a:a5:23:14:0f:20:c4:f2:a3:8a:e3:
30:a5:7b:e0:a7:67:12:50:0a:a1:d6:11:32:6d:32:
19:db:cf:d6:e5:51:e1:c0:fb:51:bc:20:3d:4a:c8:
69:3c:32:70:18:89:c2:cf:ea:55:d4:5f:bd:e3:4c:
82:54:91:38:2b:5c:bb:01:1d:30:fc:6e:a3:7c:59:
91:3c:31:f6:dc:bd:a1:1b:25:c5:3d:cf:6f:e6:09:
00:49:9f:a7:41:c4:33:94:85:fb:b7:05:46:a1:fa:
64:51:cf:23:98:0a:67:d1:f5:0d:4b:a5:5a:24:c2:
e4:3f:54:9a:b9:06:0b:24:09:29:72:73:38:df:a7:
f9:e6:0a:56:f1:70:d8:0c:46:1b:09:5b:c0:93:56:
93:68:6e:b3:19:29:95:5a:48:2d:7b:25:a7:e8:e8:
5e:94:4e:4d:57:f8:0d:8f:83:31:92:15:34:31:4b:
98:3d:7b:69:54:72:b4:2c:83:44:8d:62:c6:3f:8c:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:8F:7F:53:8B:3E:B6:F7:BF:BE:14:CF:DC:4D:1E:3C:07:61:CC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS60326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:590::/44
2a06:a005:8f0::/44
2a06:a005:1060::/44
Signature Algorithm: sha256WithRSAEncryption
76:ac:0b:0b:4c:96:1a:12:94:72:9f:02:12:58:c9:42:82:5e:
35:5b:ec:f8:9b:b2:15:a0:f7:b6:43:9d:6e:53:92:c0:06:0f:
7a:c7:f6:87:d3:47:54:da:53:ba:8d:37:0b:01:e7:3b:a4:d8:
00:04:94:aa:be:45:85:b6:d1:2b:a3:46:c4:9b:6b:26:58:f1:
c9:29:65:6b:16:ee:60:1b:74:86:0c:1d:95:7b:a1:a1:7d:f7:
73:f7:c8:91:6a:1e:19:e5:42:71:9d:63:aa:88:ea:90:15:8a:
af:b5:8e:b2:41:16:f3:3c:a9:a9:36:76:42:ae:85:7c:f2:91:
ed:e3:f0:1f:60:42:ed:97:04:0e:36:7c:09:b2:f2:10:e5:a4:
47:1f:5c:79:48:38:59:9b:a1:e8:1d:f2:9d:68:4c:55:16:50:
ba:60:02:dd:10:e9:0d:0f:1e:ac:75:2f:57:a1:f2:6b:6f:f5:
f0:e8:42:ff:c9:ac:86:cc:fa:20:bb:7c:0e:24:8a:ee:e8:ce:
0d:66:61:d9:38:2a:1f:5b:a8:21:ad:3c:fd:d8:75:9e:d5:ac:
6a:7e:fd:17:3b:b9:49:b8:f9:a7:e9:39:65:64:68:f7:f6:cd:
18:5c:d8:d9:d6:26:dd:f5:03:51:4f:e8:f7:c7:54:e9:69:ac:
4f:cd:88:f2
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUAcQ9wxHa0dlnWg4HMfLIhNFSRqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTVaFw0yMzEyMzEyMzU5MTVaMDMxMTAvBgNV
BAMTKDM4MUE4RjdGNTM4QjNFQjZGN0JGQkUxNENGREM0RDFFM0MwNzYxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO1xsbbXPMzQ6njns77Wx2E07t
zPGu6u/vsmfjlJ7Lk47w/A2EihttZ8wuQnesZYf8u6+X73DFHt/wfSHboEZKpSMU
DyDE8qOK4zCle+CnZxJQCqHWETJtMhnbz9blUeHA+1G8ID1KyGk8MnAYicLP6lXU
X73jTIJUkTgrXLsBHTD8bqN8WZE8MfbcvaEbJcU9z2/mCQBJn6dBxDOUhfu3BUah
+mRRzyOYCmfR9Q1LpVokwuQ/VJq5BgskCSlyczjfp/nmClbxcNgMRhsJW8CTVpNo
brMZKZVaSC17Jafo6F6UTk1X+A2PgzGSFTQxS5g9e2lUcrQsg0SNYsY/jGaRAgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUOBqPf1OLPrb3v74Uz9xNHjwHYcwwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTNjAzMjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBwQqBqAF
BZADBwQqBqAFCPADBwQqBqAFEGAwDQYJKoZIhvcNAQELBQADggEBAHasCwtMlhoS
lHKfAhJYyUKCXjVb7PibshWg97ZDnW5TksAGD3rH9ofTR1TaU7qNNwsB5zuk2AAE
lKq+RYW20SujRsSbayZY8ckpZWsW7mAbdIYMHZV7oaF993P3yJFqHhnlQnGdY6qI
6pAViq+1jrJBFvM8qak2dkKuhXzyke3j8B9gQu2XBA42fAmy8hDlpEcfXHlIOFmb
oegd8p1oTFUWULpgAt0Q6Q0PHqx1L1eh8mtv9fDoQv/JrIbM+iC7fA4kiu7ozg1m
Ydk4Kh9bqCGtPP3YdZ7VrGp+/Rc7uUm4+afpOWVkaPf2zRhc2NnWJt31A1FP6PfH
VOlprE/NiPI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:26 2025 by rpki-client