Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210023.roa
File: AS210023.roa (raw, json)
Hash identifier: tEKBKG2qzgvbbDlU75b8oOWNnfJ/A8l/FwM45mzK71w=
Subject key identifier: 38:1C:0E:21:E7:01:8E:E6:3F:FA:5F:95:12:62:57:3A:EB:E4:D1:C6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3631955973DFFEB3FA3194CA1A043231F2F1CA52
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210023.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 210023
IP address blocks: 2a06:a005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:31:95:59:73:df:fe:b3:fa:31:94:ca:1a:04:32:31:f2:f1:ca:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=381C0E21E7018EE63FFA5F951262573AEBE4D1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:7c:c8:44:99:fb:bc:1f:b3:d4:8f:16:86:
46:5d:ff:dd:45:9d:bc:bb:e1:9b:22:09:79:7f:c2:
a6:96:eb:36:0a:50:c5:70:78:37:9d:6f:7a:db:1a:
bd:0c:9e:4f:0d:2b:60:fc:74:b2:62:9e:d8:07:f7:
65:26:34:30:06:46:fe:64:e6:11:1a:79:8f:72:1a:
3e:05:83:9f:56:e0:b6:8a:d2:6a:4b:f7:2e:25:e7:
31:b3:91:6d:c6:f7:14:55:c5:f3:01:03:3c:45:c6:
be:97:5d:53:c7:ac:be:f8:79:12:f7:56:d3:4d:44:
dc:7f:58:be:51:2b:d2:78:1f:6a:20:96:25:a8:78:
30:5c:5b:b6:4a:ee:df:eb:7a:55:1b:53:87:e4:fc:
86:34:a5:a2:56:73:ee:12:07:1d:85:ff:98:ab:bc:
1c:1e:ac:0d:f2:98:cc:c4:6f:e3:d5:a0:59:d9:1e:
96:68:bd:8c:e7:09:ff:be:c4:b5:ff:63:5e:de:a3:
0e:3b:6d:e7:7f:f5:da:63:40:30:08:c1:71:53:e2:
6a:21:9b:22:16:b8:ca:2c:49:8c:98:1f:b7:30:13:
f9:fd:a8:43:d9:39:43:21:38:2a:16:88:b3:9b:4d:
ec:d2:9b:87:3a:06:24:48:8f:91:ba:d5:11:88:49:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:0E:21:E7:01:8E:E6:3F:FA:5F:95:12:62:57:3A:EB:E4:D1:C6
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005::/48
Signature Algorithm: sha256WithRSAEncryption
13:e9:97:2d:4b:9f:9d:dd:9d:17:61:73:b6:8d:fb:b8:ec:62:
b2:e5:a3:b0:cc:2c:c3:b4:08:cd:4a:65:4e:01:93:5c:e8:f1:
da:5e:9d:ab:0d:1c:de:94:63:56:1d:08:d6:77:95:52:72:d6:
d9:e3:a8:a0:b5:02:04:cc:3c:12:c0:85:b5:c2:3d:b5:8b:08:
04:cc:eb:4e:4a:79:8d:65:c5:04:89:6c:af:59:00:93:c7:f1:
44:31:e0:84:e9:75:ce:07:5a:c2:54:10:01:74:dc:72:64:3b:
38:f7:72:cb:06:bf:37:76:bc:f0:c0:22:d4:65:f6:e6:02:98:
36:d8:7e:b0:a2:ae:21:bc:fb:9c:3c:56:15:04:67:90:12:5e:
67:f2:6a:18:7e:37:fe:da:d8:bb:66:37:f5:f9:12:d5:9b:b3:
b0:7b:96:cb:2c:d5:1a:e8:8b:76:ca:4c:cf:16:17:fe:ff:8e:
0c:22:4c:fe:d0:99:a4:7d:ba:01:41:c4:b1:46:71:3f:28:b0:
75:c3:ec:58:a8:52:41:74:27:25:80:cb:e6:72:02:f2:ef:7b:
6b:a9:7c:d2:42:19:ee:25:cd:8a:b9:bf:6f:22:2c:16:d1:85:
22:d5:33:af:ca:81:52:d8:aa:b3:12:94:2e:1a:ab:e4:63:ec:
09:48:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org