Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS64264.roa
File: AS64264.roa (raw, json)
Hash identifier: i1MjZre8Dg1t9zDB/BIEXVHiIKmr+wB3e/HZTODbYmE=
Subject key identifier: E8:29:70:08:06:13:1A:AD:07:A5:F3:1A:AB:32:6E:75:95:91:6D:46
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 13877E4B789F22FE14FB04A7CBCB239863D12722
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS64264.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 64264
IP address blocks: 2a06:a005:11a0::/44 maxlen: 48
2a06:a005:11b0::/44 maxlen: 48
2a06:a005:11c0::/44 maxlen: 48
2a06:a005:11d0::/44 maxlen: 48
2a06:a005:11e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:87:7e:4b:78:9f:22:fe:14:fb:04:a7:cb:cb:23:98:63:d1:27:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=E829700806131AAD07A5F31AAB326E7595916D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:2b:dc:b2:9c:f7:e9:3d:3b:b9:75:bd:d1:
89:60:dc:68:db:40:59:68:25:f0:7c:23:81:ea:0b:
b9:bc:a3:89:24:ef:0e:f9:e4:46:45:27:11:98:0d:
2b:d0:cc:b6:0f:9d:94:db:17:0b:ae:e8:6e:40:42:
5b:ac:e4:f6:8f:20:39:09:47:b2:1b:01:1d:0e:35:
09:1d:73:1f:42:c8:04:57:00:4e:3f:45:8a:5c:39:
80:aa:88:24:f8:98:45:23:60:f4:d4:5e:b5:65:29:
a3:e0:8e:e0:fd:04:61:54:f2:20:d4:ff:ac:2a:25:
f8:f2:59:ce:1f:6e:b6:d4:fe:90:a6:8a:72:9a:db:
9c:38:48:5b:00:e2:9e:bc:ed:87:2d:1a:f3:22:7c:
35:f2:2f:12:a8:b3:6d:0d:f6:5d:64:9c:f4:21:25:
1a:84:90:bb:bd:23:c5:0e:d7:20:71:f0:64:d4:87:
35:54:19:f4:ef:29:a1:f3:29:cd:a8:2b:5c:cb:f6:
2f:d7:67:db:21:f9:1b:4d:df:73:0c:fe:79:06:b9:
ce:45:41:f4:22:48:d8:cd:65:df:76:f8:7d:b7:b9:
f5:5b:08:64:5a:57:14:1c:c1:dd:d8:a3:97:11:86:
19:e0:0e:fe:b2:9c:ff:f8:1a:a8:71:34:d1:24:1f:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:70:08:06:13:1A:AD:07:A5:F3:1A:AB:32:6E:75:95:91:6D:46
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS64264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:11a0::-2a06:a005:11ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:2c:9d:bf:59:17:92:7e:f1:cc:ea:f3:3a:87:7f:bf:e6:0a:
73:ce:ca:91:02:d6:e6:e5:87:73:7a:41:64:97:d8:97:7b:4a:
ca:de:36:f2:5e:f7:54:b3:21:b7:65:c4:4a:6e:86:86:5c:d1:
2d:f8:7b:da:1c:59:c7:2e:dd:53:a8:27:52:31:71:8f:b1:23:
3b:95:f7:59:b2:34:8b:cf:96:49:8b:a0:68:9b:c9:8d:e4:a9:
b8:41:4d:20:57:aa:86:76:d9:d3:c4:b1:64:66:e8:34:e1:5d:
6c:27:ed:93:fa:06:c7:61:d6:f8:b6:44:db:46:9c:0e:4f:3a:
cb:a0:80:82:49:a0:44:35:32:a6:d9:a1:17:b6:1f:31:63:a1:
1b:f6:54:48:77:36:c8:cd:48:50:a1:26:ca:b3:cd:75:e4:39:
08:ee:79:25:13:34:3e:61:80:30:63:ee:e3:35:d3:52:ba:8f:
f6:a3:e1:91:51:04:f2:50:2d:af:a7:1e:72:d6:90:1a:de:6d:
0f:fd:f9:35:4a:51:b6:9f:da:64:b6:e7:8d:ac:71:b3:53:9a:
2c:b6:59:8a:29:dd:02:cf:09:cc:e3:d7:44:10:30:44:93:4e:
ee:19:23:c6:ea:59:04:db:d4:ca:7a:b0:33:17:68:7f:a4:fd:
eb:4d:df:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org