Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208753.roa
File: AS208753.roa (raw, json)
Hash identifier: PQnR072cfyiEr+7USs5JFfVUkp1+0mX8BxamdRF6JGU=
Subject key identifier: E2:EF:F7:E1:16:7B:9A:85:69:ED:59:5E:A6:E1:4C:5C:25:E7:37:14
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2151EF39F6240B1B76E18E537EFC8E01F9287DAD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208753.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 208753
IP address blocks: 2a06:a005:c::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:51:ef:39:f6:24:0b:1b:76:e1:8e:53:7e:fc:8e:01:f9:28:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=E2EFF7E1167B9A8569ED595EA6E14C5C25E73714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:c2:52:36:51:35:b7:55:27:2d:3c:80:16:
a4:fe:27:c6:0c:10:ed:e1:28:0c:26:b2:9d:7f:c8:
52:19:43:c3:2b:e6:0a:8c:0b:79:e3:48:f5:e3:0e:
53:42:ba:24:07:32:e4:62:4f:2c:fe:48:49:04:01:
07:f0:b9:a3:5c:c7:53:11:ec:10:0e:d3:de:7f:8e:
28:25:b5:4e:4f:8a:e1:40:47:0d:a3:3f:ad:4e:a1:
27:a7:af:aa:ec:5d:c5:94:2d:2b:03:11:39:ea:f4:
02:c3:d8:36:31:38:4e:6b:08:ab:82:f3:60:73:d8:
b8:b5:01:2b:1f:ba:3a:be:f3:e0:fd:83:17:06:f3:
f8:78:7d:9e:b5:3f:4b:90:d7:05:09:50:b0:fc:ff:
00:16:54:09:2a:f0:22:d9:c0:cf:75:21:35:da:68:
c5:9f:95:82:30:94:b3:08:12:69:97:02:29:9b:e1:
58:f2:e5:7a:d7:c5:57:e9:45:f1:78:0b:34:21:74:
2a:6f:f3:e6:58:40:36:af:ee:6d:d2:4b:b9:82:3b:
f8:3a:c3:dc:db:64:3a:25:00:eb:f2:ce:4c:1f:3e:
9f:9e:ca:c6:af:95:15:83:ce:70:bc:f4:51:74:bc:
51:9b:33:07:d2:80:d4:f8:ef:65:79:47:c4:5f:d0:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:F7:E1:16:7B:9A:85:69:ED:59:5E:A6:E1:4C:5C:25:E7:37:14
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c::/46
Signature Algorithm: sha256WithRSAEncryption
2c:bb:2f:3e:34:b0:d1:3d:b8:10:23:92:b8:bd:4f:bc:20:7d:
a5:d0:a4:56:78:5f:37:cc:be:31:42:33:38:f9:87:5b:ca:89:
ca:3c:6c:4d:c5:83:b3:94:80:37:97:38:00:74:1e:e5:1b:31:
f9:21:b9:e5:cb:1c:ca:81:3f:78:eb:6e:69:d1:92:96:c7:98:
ae:3a:e2:10:6c:82:c6:73:63:17:5b:13:15:13:a8:91:ac:93:
48:1d:bb:7c:f0:57:de:26:d9:88:be:00:7f:7d:aa:e7:40:06:
03:9f:e6:26:86:05:4e:9b:9d:6d:eb:aa:6b:a3:87:c6:20:46:
b3:21:20:bf:0b:93:20:38:da:ca:cb:5d:ff:73:f3:b9:60:dc:
91:44:8b:bd:15:5f:56:e7:9f:5a:a9:9a:67:ad:f6:43:8c:8e:
a9:6c:95:b9:13:eb:d2:bd:b0:39:be:2a:6b:9f:a4:11:6a:6b:
20:8f:ca:4e:65:fe:5c:78:4b:38:61:39:c8:4c:5c:75:37:cb:
53:2d:6c:a0:d3:49:1d:b3:ad:5b:64:fc:df:0a:33:f4:7e:32:
41:ae:b8:30:27:da:40:05:1a:67:06:da:d7:8f:21:ca:d7:92:
b6:45:ef:a1:2f:d3:4f:84:1a:02:d9:e6:f9:90:e0:a5:72:92:
b8:0b:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org