Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61977.roa
File: AS61977.roa (raw, json)
Hash identifier: Yz+YqjOhjJxafyqN+dtOJ3DE8M0lbrICGcAxjtTmNwQ=
Subject key identifier: 3D:99:93:C5:FE:0A:A8:E5:A2:E2:D0:E5:CB:CB:E9:2C:20:C5:0F:C9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 11293A58C57247D01C3ADBDF8BB95F3DEC23482B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61977.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 61977
IP address blocks: 2a06:a005:5b8::/48 maxlen: 48
2a06:a005:1da0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:29:3a:58:c5:72:47:d0:1c:3a:db:df:8b:b9:5f:3d:ec:23:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=3D9993C5FE0AA8E5A2E2D0E5CBCBE92C20C50FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:26:37:69:fa:e4:84:56:64:a3:12:53:d4:
43:cd:f7:76:1c:0d:b9:f0:95:b7:b1:83:9e:ea:36:
d4:d3:96:09:f1:89:74:a1:51:06:ef:c7:45:0a:a6:
20:63:5c:03:03:ff:89:52:5c:8c:97:83:1f:f0:be:
c1:b1:d7:c5:06:a5:0e:64:83:34:41:c3:01:d3:cc:
73:c7:46:ef:35:e1:9c:10:6f:4d:4d:a9:82:d7:61:
6c:57:fa:b2:a2:35:a7:c5:2a:20:f0:12:49:ec:3f:
79:14:ec:89:3d:5f:58:c8:ec:82:ae:5d:e9:e1:5f:
2f:36:9b:ec:58:72:2f:21:91:3e:c7:1b:a0:c4:f1:
98:c7:70:e1:b8:57:ab:28:65:c2:43:c2:e5:cc:a5:
ed:4a:be:32:10:3d:26:4d:02:78:10:7c:66:36:6a:
7a:9e:4e:20:ef:00:c6:df:8a:c3:4d:ff:7b:b2:73:
0b:1b:fd:a0:c2:e3:7b:26:18:1e:09:6f:dc:57:be:
7a:77:1f:34:8f:1f:11:7d:e4:83:0d:7a:59:b3:9a:
01:90:87:8a:f5:b0:ab:73:e6:31:b7:a1:bb:f1:46:
fd:fb:c6:59:10:61:9d:de:3a:9e:79:42:2c:74:c3:
4c:1f:06:62:2c:23:db:e8:52:5d:49:93:76:3e:17:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:93:C5:FE:0A:A8:E5:A2:E2:D0:E5:CB:CB:E9:2C:20:C5:0F:C9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61977.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b8::/48
2a06:a005:1da0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:da:b1:bd:e2:2a:05:18:07:af:1e:84:bb:38:47:cc:62:a0:
1c:59:75:80:27:b4:46:52:9c:e4:d9:07:2b:5f:5c:4f:70:f0:
03:ad:0e:24:1f:11:d7:7f:89:72:6c:89:27:75:86:0b:ed:8c:
25:31:9e:e9:4c:e0:41:a4:c9:28:a2:54:e8:0f:a7:87:7d:48:
f8:bb:b0:23:cd:80:aa:1c:f5:26:88:66:2b:2e:47:2b:9c:9e:
46:a3:e7:95:6b:ae:82:76:4d:c2:bd:27:5f:c0:6e:53:f6:40:
8b:e5:d7:11:19:6f:86:ee:35:c2:39:f3:02:33:c5:d2:08:4d:
7e:9f:9d:88:c8:42:ad:81:3e:a7:fc:8e:83:09:59:73:cc:05:
96:e0:f7:ec:5e:03:4c:8c:70:c5:56:72:5b:11:bf:c3:68:90:
5f:55:4a:e4:cf:83:45:cb:03:c1:45:b8:17:60:ed:76:f7:43:
49:92:ad:0f:8b:ad:2a:7e:0d:98:3a:15:98:08:8e:57:c7:55:
cc:47:4a:75:27:f0:be:ed:94:dd:52:30:87:6b:46:ac:38:08:
b1:bb:eb:b8:11:d4:05:b2:3c:fd:c7:4f:a7:95:5a:6e:f7:e7:
c0:06:c1:e1:27:04:65:cc:1d:52:0b:bf:43:f7:84:dc:93:b7:
4a:ef:73:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:08 2025 by rpki-client