Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61004.roa
File: AS61004.roa (raw, json)
Hash identifier: p8NZUwrOojNEpLfR+qJ/f174Ud4XBu/dZlmv29ibQWo=
Subject key identifier: 7E:E8:5F:2C:94:5F:5F:26:79:41:CB:F5:02:C4:17:5D:33:92:7A:30
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7E6E1C3FD8801FBFDB9282A1E4B4B9CDFDA08F8E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61004.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 61004
IP address blocks: 2a06:a005:5aa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6e:1c:3f:d8:80:1f:bf:db:92:82:a1:e4:b4:b9:cd:fd:a0:8f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=7EE85F2C945F5F267941CBF502C4175D33927A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:af:62:99:2d:9d:bd:3b:3e:7e:2a:2d:0d:
eb:24:16:55:dd:19:22:0e:25:1b:07:59:8c:2a:4e:
81:96:d4:99:c8:c3:34:7f:bd:75:c3:fb:48:aa:2b:
62:36:92:f6:3a:3e:de:d3:c4:dc:b3:9e:38:f9:18:
6b:14:db:e4:e2:17:cb:5a:78:2c:c4:f9:70:dd:d2:
ca:09:3e:a4:54:0b:1a:f3:f8:b5:19:73:96:ba:4b:
f3:eb:fb:74:65:c8:71:1f:dc:3a:c7:cd:5e:48:38:
19:a1:22:87:c0:e5:d9:fa:68:72:c8:08:a4:cb:c7:
a1:a6:fc:01:2f:f3:39:19:da:28:29:96:45:a4:32:
6a:16:e1:59:2c:a2:51:95:5f:f1:3d:ba:c5:c7:64:
67:0e:69:a3:99:ec:a0:86:21:5e:52:69:18:46:b6:
24:d2:f3:91:c3:5f:22:8e:31:52:a3:08:df:c1:9e:
f7:26:60:06:a2:e4:05:ec:b7:82:31:80:c1:ab:d0:
71:ad:ea:8d:30:89:e6:08:36:ad:23:33:3e:05:e3:
61:52:56:aa:38:7b:06:30:c0:08:66:ab:f6:55:57:
96:2a:7c:6a:57:01:5c:34:a6:9c:ae:77:65:6a:5b:
78:fa:4b:58:ef:79:3b:cf:a8:a7:f9:e6:62:d9:c5:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:5F:2C:94:5F:5F:26:79:41:CB:F5:02:C4:17:5D:33:92:7A:30
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5aa::/48
Signature Algorithm: sha256WithRSAEncryption
50:82:13:9b:7d:cc:11:2d:6f:a6:68:f5:5b:f2:a4:95:ba:c1:
22:f7:c2:39:0d:03:f7:ce:af:d4:3c:ca:f4:90:ea:51:d8:75:
b7:19:06:7b:74:ee:49:ed:73:36:3d:e4:ad:fd:93:44:1b:c0:
b5:5d:85:ae:6b:f1:02:e2:72:44:63:2e:b4:2c:ec:08:45:e9:
08:47:a4:f7:e1:a6:5f:36:d5:d0:0e:e9:74:b0:42:69:78:56:
7c:74:a3:ac:96:7c:10:7b:0a:46:e3:c3:08:22:35:75:d9:c8:
b7:0a:d7:0b:98:d1:f6:8d:9b:1e:60:83:7d:5a:72:ee:04:28:
6f:b8:c9:5c:a0:ae:1e:f2:51:4c:2c:bd:d8:95:f0:6c:4f:0f:
b9:23:b9:aa:e1:93:11:04:1e:5d:dd:9a:35:40:37:c6:16:75:
a3:2e:d0:99:6e:4f:62:df:51:5f:31:c4:60:e8:4c:bb:79:a4:
ef:2b:a9:c9:d1:34:86:a3:fc:3e:25:41:78:c6:88:ee:ec:e8:
f1:3c:ac:b6:9a:51:82:12:0a:a2:20:15:a1:a8:e1:3f:b8:b1:
77:c6:ee:37:fe:f2:dd:24:0b:39:73:94:0b:63:00:44:94:81:
5b:b4:bc:bb:cf:18:98:ae:b4:27:77:85:02:89:37:4c:a7:43:
3c:50:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:34 2025 by rpki-client