Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62430.roa
File: AS62430.roa (raw, json)
Hash identifier: YVQZ+bbpC5qyTD7cHV9EdwldGd6NdBevcbc5uCCqIsU=
Subject key identifier: E3:30:D6:89:A6:9A:C5:A2:87:4C:18:08:E2:E3:B0:FF:83:BC:BF:BC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 60F7BA22887556C7BAF72F71D9D16F829B838705
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62430.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 62430
IP address blocks: 2a06:a005:19::/48 maxlen: 48
2a06:a005:840::/44 maxlen: 48
2a06:a005:ba4::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:f7:ba:22:88:75:56:c7:ba:f7:2f:71:d9:d1:6f:82:9b:83:87:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=E330D689A69AC5A2874C1808E2E3B0FF83BCBFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:ce:93:d9:05:52:aa:17:c8:45:5f:10:1a:
82:f7:22:00:db:35:19:b0:d0:9a:6e:5f:e4:c2:c6:
4c:18:11:97:73:21:ce:36:64:d2:58:05:f5:5b:c8:
7b:5e:0c:b2:c2:85:2b:db:ca:16:5b:28:59:51:43:
d5:62:bb:df:f2:86:cc:b2:7f:9f:f1:6f:65:ff:34:
6f:7c:8b:0b:b2:db:b4:b2:99:b8:ee:b9:03:05:b9:
7a:5e:25:9d:42:ba:7e:59:0d:40:73:a8:5b:b8:c6:
86:39:2c:31:31:63:9f:c2:85:2c:3f:43:a6:c3:f1:
c1:2f:2b:21:44:98:bd:33:45:92:90:b0:55:fc:52:
01:e1:3f:b5:ae:77:87:e3:91:ed:a3:80:9e:5d:4d:
5d:df:cf:6e:1f:32:e5:18:69:a8:40:a4:e4:e4:9e:
1f:16:70:02:6c:90:a4:a2:ca:ab:ac:3d:29:18:0e:
df:97:ca:3e:cd:63:c0:1c:f6:03:00:d9:a5:62:d8:
56:13:c9:55:9e:6b:28:15:f5:27:9e:74:6f:0e:52:
16:06:eb:93:b9:79:cf:22:af:18:eb:84:ea:0d:87:
88:49:f7:34:43:13:0c:f4:fa:81:cd:27:a7:46:c4:
ef:e5:bc:60:45:8f:11:03:e8:2e:e8:80:ae:ab:ed:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:30:D6:89:A6:9A:C5:A2:87:4C:18:08:E2:E3:B0:FF:83:BC:BF:BC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19::/48
2a06:a005:840::/44
2a06:a005:ba4::/46
Signature Algorithm: sha256WithRSAEncryption
27:3c:a2:50:0f:80:95:06:30:20:41:7b:13:00:1f:d4:b7:93:
4a:45:66:9d:81:05:4d:7e:c7:8f:2c:b6:57:85:3e:19:9b:6c:
fa:e9:be:8d:3c:a0:54:42:cc:e8:11:21:89:60:40:18:bf:b7:
31:77:26:65:b6:4c:c7:0d:53:44:54:98:ab:32:9c:e5:44:5e:
a1:28:20:d6:44:88:0c:6f:c0:0d:f7:21:14:0e:b3:d8:c4:c8:
57:18:28:4e:6a:5b:08:69:5b:a0:83:6e:8f:2a:06:02:e7:ba:
f6:86:98:88:a1:d7:c7:40:28:fa:86:d4:fd:95:7d:ee:fa:8e:
7e:ff:0e:48:5e:10:7a:ef:b1:9c:f3:d9:21:b9:03:29:74:b0:
ce:4e:2c:b3:dc:d2:69:1b:7b:39:18:9d:0a:7a:4a:94:2b:02:
c5:fd:cc:e6:cf:8b:39:27:28:ff:10:c4:f4:4a:07:af:db:5a:
0c:f6:6a:76:46:36:04:73:fb:bd:9e:1c:d0:b3:8e:de:ff:69:
92:e5:40:18:c3:65:c9:cb:59:7b:83:05:c0:75:ad:d7:e3:bf:
8f:2e:7d:4c:4c:db:fd:d3:b1:b4:08:23:9d:75:ca:19:61:e6:
e5:1c:18:4c:84:78:08:f7:ef:05:d1:f3:90:6d:0d:bd:04:26:
0a:ba:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org