Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS13308.roa
File: AS13308.roa (raw, json)
Hash identifier: lPwJvuus2A+QJVCRe68sR+tPd9FU2HUxyvScUl0JbR8=
Subject key identifier: BA:70:AE:78:BD:88:EE:CB:71:54:9C:B8:74:E4:E5:8E:5A:D8:72:10
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 60B72F76E8C8A21CCACF4C15ED99F126DBB5706A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS13308.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 13308
IP address blocks: 2a06:a005:2dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:2f:76:e8:c8:a2:1c:ca:cf:4c:15:ed:99:f1:26:db:b5:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=BA70AE78BD88EECB71549CB874E4E58E5AD87210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:c3:74:07:ec:2d:ca:7a:c1:9e:19:a1:3f:
c2:7d:cb:c7:0e:93:bd:69:cd:36:08:11:4f:5e:34:
c9:82:1a:c0:8f:17:1c:a8:32:f4:e2:52:12:f7:35:
da:00:1a:fa:4f:ec:5a:a2:99:7a:1d:d8:80:0e:fe:
14:00:e8:62:2b:7e:c1:8e:26:57:02:1a:a9:3f:ed:
e1:44:9a:cc:15:f9:3c:0c:ad:ef:d9:62:6f:5b:fb:
e6:31:b1:60:65:de:18:a6:65:b7:e9:e5:c5:23:c1:
87:c5:35:90:00:1c:9f:d1:5b:e6:b6:8e:31:b3:86:
06:28:5f:db:e4:5e:bf:76:a4:0a:6e:1b:1b:97:44:
41:d7:b8:86:b8:66:6f:3a:ea:a0:e0:db:69:07:71:
23:00:5a:73:bb:7f:c2:84:53:56:78:35:43:2a:a3:
95:8a:d5:6b:91:bc:7c:a8:f1:69:ae:02:27:95:5d:
45:bf:ca:3d:e5:fd:be:98:c7:3a:96:e4:7a:0d:2d:
6c:24:4a:45:58:33:1f:ce:84:38:c3:af:3d:f1:71:
53:35:16:41:44:31:48:43:23:ed:63:15:47:4c:8f:
79:62:e8:47:b1:74:91:0d:06:21:02:ad:7a:6a:45:
2c:e7:76:1b:05:f9:89:bd:95:fa:d2:9e:3a:bd:ab:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:AE:78:BD:88:EE:CB:71:54:9C:B8:74:E4:E5:8E:5A:D8:72:10
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS13308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
6b:39:87:e6:66:c9:56:e0:38:05:25:e1:91:60:5f:3f:cd:3f:
c2:16:14:e8:ce:ec:38:c3:b3:c2:88:33:b5:b3:be:81:1b:41:
d4:2d:5f:f2:cc:05:be:d2:9b:60:4c:e3:76:f3:8c:02:a5:f2:
d5:70:1a:37:d0:f4:7e:71:df:89:72:db:91:7f:7a:b6:20:01:
63:73:12:d5:fa:4e:ac:53:86:9c:53:d5:a3:cb:56:5f:d4:5b:
04:15:d6:32:eb:c7:57:a6:1a:a9:f5:c4:55:93:9f:36:db:3c:
5c:00:38:df:79:46:37:35:b4:ee:77:7c:10:0f:9a:e4:2b:5f:
bb:fd:80:31:38:df:2e:b4:11:98:79:04:4d:3b:a2:de:bd:10:
64:9b:66:51:6f:bf:1a:8a:d2:78:8e:47:78:b1:a5:e5:8f:a7:
81:9b:c1:14:96:8c:60:3e:9b:bc:64:cc:1b:9d:0d:83:9b:24:
b4:bc:f8:ba:66:70:3e:7b:fe:69:4e:bb:90:c7:4c:24:2b:2c:
a4:18:10:77:04:50:d0:d9:9e:15:ac:79:6f:ed:06:0f:93:05:
a5:da:fe:d6:08:c9:05:d2:28:f7:96:3a:cd:f2:d2:10:50:dc:
1b:80:21:30:16:60:45:36:28:d0:4d:49:9c:d6:bc:ad:0a:9b:
72:2e:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org