Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS399587.roa
File: AS399587.roa (raw, json)
Hash identifier: nDqLQ5lReff/blvH9PibfOh8JLuOj7njoz/Bx3GXi0c=
Subject key identifier: 13:CF:80:7E:65:63:94:11:00:87:E3:48:74:FE:DA:8B:68:70:C2:B6
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2490BA334ABC1D9B21655F09A35AC3E9773FCADB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS399587.roa
Signing time: Tue 06 Aug 2024 03:17:47 +0000
ROA not before: Tue 06 Aug 2024 03:12:47 +0000
ROA not after: Tue 05 Aug 2025 03:17:47 +0000
asID: 399587
IP address blocks: 2a0f:85c1:84e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:90:ba:33:4a:bc:1d:9b:21:65:5f:09:a3:5a:c3:e9:77:3f:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Aug 6 03:12:47 2024 GMT
Not After : Aug 5 03:17:47 2025 GMT
Subject: CN=13CF807E656394110087E34874FEDA8B6870C2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:99:bc:01:31:a1:c5:b5:34:f3:24:85:68:
c9:3c:7b:ae:bc:bb:c7:58:62:9d:33:12:6d:00:ce:
76:d8:0b:2c:06:27:32:13:31:06:9f:d1:e0:16:b5:
d0:1d:f8:65:1c:09:b9:67:20:43:23:75:bd:ba:d8:
1d:07:43:78:da:ff:52:39:e5:e3:55:dd:9a:77:72:
12:ca:a3:a5:de:e5:8b:7b:e7:d3:08:9a:85:76:37:
a1:21:b0:75:cf:08:cc:9c:fd:6e:f8:d5:c7:09:c8:
7e:17:1d:92:f4:40:fa:cb:eb:21:df:dd:26:42:e0:
0f:9c:d7:d2:89:b3:2a:5e:e4:d7:5b:73:22:25:c2:
ae:57:ec:ed:e1:f7:e7:9c:0e:ca:e1:4a:29:a2:1e:
46:1f:9c:f8:5a:16:52:b5:72:77:5e:3e:6c:73:c1:
4d:94:f5:25:2c:80:79:0c:e1:25:55:3d:82:da:70:
46:bd:2c:cc:9f:aa:68:88:1e:61:0f:9d:ee:d3:2b:
c2:56:3a:3a:f0:e4:fe:87:1e:7f:2a:78:de:f0:fb:
cd:a2:e5:5f:29:1e:83:d7:14:03:d0:69:7e:82:c3:
eb:3b:ed:6e:01:8a:2f:18:82:50:3e:d7:c4:09:f5:
2d:2d:fe:65:93:c1:fc:ed:ea:26:5f:9a:a1:4d:17:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:80:7E:65:63:94:11:00:87:E3:48:74:FE:DA:8B:68:70:C2:B6
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS399587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84e::/48
Signature Algorithm: sha256WithRSAEncryption
31:13:6e:f0:04:88:18:35:f6:2f:fb:60:b4:72:31:64:2a:c2:
46:5c:dc:f2:f9:41:e4:48:ac:49:21:6b:fe:24:4b:35:71:93:
46:b7:ea:88:53:fa:d3:cb:8f:63:09:79:be:be:0e:28:19:44:
04:86:d5:aa:bb:30:7a:a8:02:a4:6f:af:ba:9e:9a:27:17:e4:
83:f9:b0:db:fc:5d:65:16:64:5e:0d:24:e9:af:82:87:8d:d7:
18:6f:86:81:a8:1d:85:38:b8:d3:56:a5:11:1c:e0:b5:24:7a:
c9:c4:c1:a8:62:b8:fc:88:95:b7:c0:df:f8:3a:4d:39:03:f7:
09:22:83:c6:bb:d7:ef:db:07:35:ba:85:0c:db:a9:40:82:4f:
7c:d2:2a:23:7b:2b:0c:ec:20:84:35:e7:e7:c1:29:1c:6b:ae:
a4:21:ba:2d:0a:e2:c1:4d:3d:0c:0d:db:3c:fa:61:e1:db:62:
70:6f:b7:03:eb:d1:2c:67:b7:31:59:bf:99:27:ab:ce:ae:21:
99:dc:9c:34:bf:cf:25:a2:82:1d:46:a7:57:f9:e8:d4:ac:c3:
eb:0f:aa:07:ec:c9:1c:c0:67:d6:a2:22:bc:ea:e7:9d:b5:64:
f0:d8:19:a1:a6:3d:2d:64:b2:fe:18:15:c6:79:74:31:f8:21:
d7:94:a4:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUJJC6M0q8HZshZV8Jo1rD6Xc/ytswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA4MDYwMzEyNDdaFw0yNTA4MDUwMzE3NDdaMDMxMTAvBgNV
BAMTKDEzQ0Y4MDdFNjU2Mzk0MTEwMDg3RTM0ODc0RkVEQThCNjg3MEMyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcZm8ATGhxbU08ySFaMk8e668
u8dYYp0zEm0AznbYCywGJzITMQaf0eAWtdAd+GUcCblnIEMjdb262B0HQ3ja/1I5
5eNV3Zp3chLKo6Xe5Yt759MImoV2N6EhsHXPCMyc/W741ccJyH4XHZL0QPrL6yHf
3SZC4A+c19KJsype5NdbcyIlwq5X7O3h9+ecDsrhSimiHkYfnPhaFlK1cndePmxz
wU2U9SUsgHkM4SVVPYLacEa9LMyfqmiIHmEPne7TK8JWOjrw5P6HHn8qeN7w+82i
5V8pHoPXFAPQaX6Cw+s77W4Bii8YglA+18QJ9S0t/mWTwfzt6iZfmqFNFxGzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUE8+AfmVjlBEAh+NIdP7ai2hwwrYwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMzk5NTg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQhOMA0GCSqGSIb3DQEBCwUAA4IBAQAxE27wBIgYNfYv+2C0cjFkKsJGXNzy+UHk
SKxJIWv+JEs1cZNGt+qIU/rTy49jCXm+vg4oGUQEhtWquzB6qAKkb6+6nponF+SD
+bDb/F1lFmReDSTpr4KHjdcYb4aBqB2FOLjTVqURHOC1JHrJxMGoYrj8iJW3wN/4
Ok05A/cJIoPGu9fv2wc1uoUM26lAgk980iojeysM7CCENefnwSkca66kIbotCuLB
TT0MDds8+mHh22Jwb7cD69EsZ7cxWb+ZJ6vOriGZ3Jw0v88looIdRqdX+ejUrMPr
D6oH7MkcwGfWoiK86uedtWTw2Bmhpj0tZLL+GBXGeXQx+CHXlKQ/
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:29 2025 by rpki-client