Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208529.roa
File: AS208529.roa (raw, json)
Hash identifier: dO6jHc/AAgA9QHE38+2/Hhia5nz30H+Ixz3WXLMxzew=
Subject key identifier: 05:50:D6:AB:E6:E7:CC:55:5D:53:D5:6C:03:33:32:30:71:E6:42:59
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4653115BBE8003740588061167F50680B59DF6B9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208529.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 208529
IP address blocks: 2a06:a005:5e7::/48 maxlen: 48
2a06:a005:c60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:53:11:5b:be:80:03:74:05:88:06:11:67:f5:06:80:b5:9d:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=0550D6ABE6E7CC555D53D56C0333323071E64259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:3f:e9:4b:80:e8:7d:0f:40:8d:e8:4f:5e:
34:3c:2c:1a:af:7f:63:d8:20:d7:2e:e3:7d:4f:76:
c1:08:c9:58:16:12:dc:24:4c:ea:42:62:53:30:71:
ca:06:3f:bd:76:4f:21:3e:3c:16:b9:2e:0c:8d:59:
6a:81:e4:2f:ef:3b:3c:49:b8:15:81:38:e5:53:09:
81:54:14:51:b1:f6:7f:e6:13:ea:2f:08:05:cb:04:
4c:01:6c:1d:79:af:c6:c5:e3:8d:b1:95:0b:cf:c0:
1e:f7:09:8b:b9:e3:f9:3c:c0:0a:f4:d4:bc:f8:38:
57:8e:bb:74:48:4d:f2:3f:2d:a3:0b:80:30:78:c6:
73:7c:65:01:cf:d3:5d:51:d2:d0:48:9f:98:0b:1b:
6f:64:d5:6f:1d:0c:cc:d5:60:b9:bc:12:61:f9:28:
49:3f:7b:4b:9b:1d:a2:d7:71:fe:3d:06:94:56:2f:
3e:63:28:90:1f:7f:11:99:2e:4b:d2:e7:94:57:12:
d3:e5:1a:57:0e:ba:e4:0b:b3:81:f5:67:0c:d5:5d:
f9:c5:2a:77:fd:07:cb:37:88:21:d3:4c:c4:ff:e6:
41:2e:98:1f:c2:71:d5:87:0f:be:4f:b2:eb:22:9f:
4e:8d:9b:53:ff:1f:78:cd:01:ad:e1:16:51:e1:f0:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:D6:AB:E6:E7:CC:55:5D:53:D5:6C:03:33:32:30:71:E6:42:59
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e7::/48
2a06:a005:c60::/44
Signature Algorithm: sha256WithRSAEncryption
6e:68:f4:a6:cd:dd:66:79:22:ba:f7:4e:bd:04:06:ac:53:25:
95:e5:00:e5:c1:93:81:dc:e4:b3:9a:06:86:20:8d:4e:42:45:
04:7f:f0:92:2c:59:25:b3:c7:52:87:12:6a:41:fe:b5:ae:b8:
40:72:7d:c7:23:b1:5d:69:75:4e:b0:63:a0:c2:f6:bb:07:78:
cb:13:b5:5e:48:21:83:ad:b3:fa:83:35:f0:d4:c9:77:73:e9:
5d:5f:89:9f:ca:65:ec:e4:7d:2b:05:10:57:4b:43:19:65:dd:
8b:36:ad:67:22:ea:2c:9f:a7:92:54:a9:30:09:a8:d7:b7:e8:
cc:9b:4e:97:fe:94:a7:9d:15:2e:6b:b3:8a:a9:21:81:26:13:
cb:5a:70:ba:b4:9a:56:75:f0:ef:fa:61:4c:2c:2d:f0:9b:8e:
bc:5b:02:7c:64:9e:df:88:6a:12:8a:a2:db:43:6f:35:60:ca:
40:84:a9:5b:98:95:ad:e4:8b:c8:4f:38:b1:b6:a1:6c:8a:ef:
b1:4d:82:62:d4:bf:2c:ba:66:14:0e:12:f2:e3:d5:71:b2:6c:
f8:b3:d0:17:50:38:5d:72:2b:26:a7:8e:0d:f7:00:f2:1a:48:
38:0d:fe:10:96:fb:ef:cb:6d:93:74:1f:74:91:7b:1b:54:e4:
2f:8c:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org