Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS945.roa
File: AS945.roa (raw, json)
Hash identifier: hD/SHmgMPM2MKmKD36kndmEwmI/X4eFVsbudfcQJPNQ=
Subject key identifier: E1:29:83:03:B4:2C:5A:51:4F:91:7D:53:A2:0B:05:3D:9B:5E:D1:C6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 676A3BA5C572E5BBC6B03366661A9E81976BCAFB
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS945.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 945
IP address blocks: 2a06:1280:b00b::/48 maxlen: 48
2a06:a001:b00b::/48 maxlen: 48
2a06:a006:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6a:3b:a5:c5:72:e5:bb:c6:b0:33:66:66:1a:9e:81:97:6b:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=E1298303B42C5A514F917D53A20B053D9B5ED1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:52:34:6a:19:3c:f4:bc:8e:2b:f1:63:1d:
e4:81:57:9f:c7:9e:7e:1f:b0:44:a2:d4:0e:20:d3:
ae:e7:7a:e8:c1:de:e0:e1:f0:75:23:fc:0f:cf:58:
e1:51:b9:b9:21:6f:0d:46:6c:2c:fc:b8:b1:cc:6d:
4b:0e:09:41:10:9b:c1:89:5d:d8:37:9c:32:3c:77:
05:9c:d1:91:fc:e2:b5:d4:79:d0:a0:ec:94:4a:37:
de:c4:c9:27:bb:30:3a:e4:22:7c:0a:8d:d9:b4:62:
58:35:9f:74:9d:03:69:12:8d:8a:32:0c:1b:79:6d:
12:dd:03:da:e6:a2:fe:cc:c8:fe:a0:4b:3c:08:d0:
72:10:9f:dd:c3:8c:11:bd:2f:b1:18:3e:b7:45:dd:
6f:3e:99:4e:47:bf:c1:4d:c6:9a:32:4f:72:e5:5f:
46:b0:c4:9c:e2:f7:35:8b:cd:44:81:49:fd:27:77:
79:32:65:b2:81:43:0c:be:42:11:81:41:ce:d5:ca:
12:5c:c3:c3:04:24:8f:de:4a:31:b1:17:b7:16:12:
f2:8f:7b:28:2a:20:72:38:3a:11:af:de:ec:e2:ea:
19:6e:41:cf:4e:87:b8:eb:13:cd:6b:0f:ed:54:00:
c4:f0:ff:c4:7e:86:89:c6:91:a1:bd:46:92:f2:fd:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:83:03:B4:2C:5A:51:4F:91:7D:53:A2:0B:05:3D:9B:5E:D1:C6
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1280:b00b::/48
2a06:a001:b00b::/48
2a06:a006:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
57:80:c1:e1:e2:6d:65:c9:df:72:fc:98:ec:79:8f:c6:a5:be:
d4:7b:6a:91:d1:bd:85:1d:2b:3f:e1:ab:f2:a1:fb:9a:a7:b7:
43:a3:ae:32:46:c1:a4:b2:a7:86:1c:dc:7e:86:db:eb:e9:2e:
f1:0e:8c:38:fc:6e:5a:94:77:19:4c:6b:57:b8:91:37:4b:64:
0c:c1:3b:a5:f0:c2:e9:b1:5b:73:3a:b8:c2:b5:e1:b4:4e:4d:
d6:86:e5:99:9a:28:4b:83:ee:2e:da:a3:3b:d7:dd:c5:72:4b:
d6:fd:49:41:63:44:df:51:2b:eb:e5:15:d5:7d:5d:49:3f:24:
93:fc:03:00:25:f2:11:27:52:93:9f:10:61:19:25:91:58:e7:
5d:43:8c:25:6c:24:5a:bf:31:43:47:d6:22:a9:a4:a1:cb:8a:
30:44:f7:c8:fb:4a:24:ba:b0:e9:1a:a0:a6:d7:e5:b2:79:49:
31:96:b3:f1:1c:a6:43:e6:8b:99:1c:0f:36:c5:01:e5:e9:f8:
a6:c0:dc:0f:03:6c:af:fa:fd:a4:1b:88:86:6d:6e:e0:fc:96:
74:dd:53:5e:dc:69:b0:0c:a3:67:79:f0:06:17:f9:b6:2f:95:
0f:6c:f1:4a:bc:db:db:a1:9e:cc:f8:03:55:bb:5d:12:f9:19:
d3:62:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org