Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62485.roa
File: AS62485.roa (raw, json)
Hash identifier: T2z5jR5jSnjiC8RFrsqxYR7vjcsFACAeZeRpZFxZiCA=
Subject key identifier: 47:07:9B:93:51:34:BA:2B:D8:02:C1:EF:70:C5:72:63:2A:55:4B:C4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 696BD96CC2DBDEFFD36CB99012074641475313C1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62485.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 62485
IP address blocks: 2a06:a005:150e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6b:d9:6c:c2:db:de:ff:d3:6c:b9:90:12:07:46:41:47:53:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=47079B935134BA2BD802C1EF70C572632A554BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:bb:9a:2c:a2:0e:5b:3e:4b:62:be:ab:17:
a6:97:10:a0:3f:fb:45:d6:a9:49:04:d3:10:93:41:
db:ff:7b:f4:38:cb:c5:01:4a:81:bb:88:3c:fe:85:
6f:27:1f:d8:66:74:30:cf:5d:2f:e7:23:4d:ce:04:
5b:c8:cf:59:39:fc:30:3b:4c:af:46:ae:74:df:77:
12:ae:7d:c1:2d:8e:30:89:d1:18:ff:7c:b0:8d:13:
c0:a4:f9:09:89:bd:54:0e:ea:93:0f:15:d0:79:59:
a9:22:9d:ef:fc:db:9c:5c:02:cc:b8:f1:68:4d:f3:
f1:8a:3e:00:3e:cc:82:88:07:02:13:c6:78:53:f9:
cc:aa:c8:71:a8:c4:43:8e:ad:85:92:8c:02:11:03:
b4:d4:c9:7c:b7:20:3a:7e:51:d8:cd:90:d7:40:34:
45:cd:30:31:71:82:d2:49:dc:0b:dc:82:12:4e:8c:
bf:2b:39:83:12:e2:91:9d:6b:72:af:57:f8:77:6d:
6e:e7:c7:4d:b2:ea:58:df:81:28:47:7a:61:29:e6:
f1:ad:97:13:81:ce:73:68:1e:b7:19:11:41:3e:e2:
66:a7:5c:19:90:8d:48:3e:52:f6:23:02:68:c0:df:
3f:96:70:7d:89:2e:64:1e:8f:ad:77:5d:aa:92:7f:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:9B:93:51:34:BA:2B:D8:02:C1:EF:70:C5:72:63:2A:55:4B:C4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS62485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150e::/48
Signature Algorithm: sha256WithRSAEncryption
23:97:74:f7:65:e6:2b:a4:57:cc:9f:14:80:7f:e0:8c:e5:00:
4a:28:39:47:73:30:6c:6a:5d:7b:df:ea:5a:bf:6a:62:56:6f:
5d:2d:31:7b:55:19:13:0b:c0:4c:a2:cc:0b:62:6c:4f:e3:1d:
c6:98:df:96:35:a5:8e:20:b3:79:ee:5d:6a:36:52:9c:6b:03:
78:64:cc:37:05:f7:c5:35:1a:20:ad:ae:d0:4d:56:07:b2:c5:
95:22:af:9c:e7:40:4d:14:6b:8a:a0:a7:54:55:9c:fe:4b:65:
67:ab:20:df:37:f8:9d:18:fb:0a:79:fd:65:cb:60:e1:8c:e3:
28:3d:54:45:3f:43:7f:3f:12:ae:a6:1b:d7:2a:3e:4c:d0:f2:
10:ac:77:a3:ce:14:18:71:a6:27:63:0b:43:4a:0f:74:33:bb:
66:04:12:f1:80:5d:b5:27:05:e1:84:f6:f5:4e:72:bc:8e:9c:
f3:3d:52:7e:a5:17:44:1e:34:77:0f:df:1a:e8:50:f2:58:17:
d0:88:19:07:33:d9:41:ca:50:70:e2:c9:d2:f8:ea:45:29:15:
33:d0:f5:9a:32:03:b2:aa:ea:06:9b:06:14:e6:c3:49:8a:39:
7c:2a:0f:3e:0d:5e:fa:1f:7b:bd:a4:09:79:fa:2e:c7:76:07:
19:e5:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org