Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210445.roa
File: AS210445.roa (raw, json)
Hash identifier: /ULptEOAFyr9mVoJTCrUBEy1dwPBUVWD1ORB2B35YFo=
Subject key identifier: 5A:65:80:47:C1:3D:E8:4C:B7:18:AA:86:1A:41:93:7D:CC:44:8F:CF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 241196115499E587DED18FEB8898C3CE19366172
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210445.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 210445
IP address blocks: 2a06:a005:f60::/44 maxlen: 48
2a06:a005:2180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:11:96:11:54:99:e5:87:de:d1:8f:eb:88:98:c3:ce:19:36:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=5A658047C13DE84CB718AA861A41937DCC448FCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:b6:c9:e0:9a:0e:9d:78:ef:8b:03:9d:b7:
4a:9c:ac:c5:d3:f2:52:58:75:19:eb:54:c6:50:62:
a7:9d:9a:f6:72:ae:b2:54:31:57:f8:26:9b:e3:56:
1d:63:a1:98:5a:43:f2:22:ea:aa:9e:83:27:d5:a9:
0b:b0:06:6e:7a:14:8a:e6:f1:a3:d4:9a:56:fb:4f:
be:58:54:cd:68:a5:9e:0a:8b:1d:53:62:84:18:85:
7d:98:98:f1:b9:9b:bd:c3:56:db:39:52:82:35:f6:
d8:52:72:7a:43:ad:57:56:8c:c3:da:0a:7e:6a:6b:
2a:72:1a:08:4c:bc:65:8c:a3:9d:98:8a:0d:0e:67:
93:d4:e1:69:40:45:22:cc:b9:90:b7:6c:6d:c5:e5:
30:cb:fd:dd:d1:20:df:02:6e:c8:7b:b8:06:19:74:
16:5e:cd:04:df:4a:df:82:2d:d8:90:81:04:19:bc:
c1:0c:cc:bb:5e:97:4c:47:13:e6:4e:e7:e7:32:56:
79:22:df:ca:45:d4:e5:4f:06:b4:b7:1d:5f:8f:1a:
ca:62:14:67:b6:a5:ac:53:06:9d:6f:eb:df:c2:a7:
b2:17:5f:13:0b:48:9c:9d:7c:8b:f1:b4:66:6e:b6:
f8:06:20:88:87:23:b0:ec:a7:ef:27:4d:2f:23:2d:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:80:47:C1:3D:E8:4C:B7:18:AA:86:1A:41:93:7D:CC:44:8F:CF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f60::/44
2a06:a005:2180::/44
Signature Algorithm: sha256WithRSAEncryption
64:df:27:45:08:d1:b5:27:9f:fa:86:d1:23:55:dd:f2:d0:a5:
7a:3a:c3:21:64:20:c0:51:4f:78:22:5e:65:8c:44:33:99:b6:
80:d3:46:85:4b:f2:15:98:aa:1d:ee:96:9c:38:cf:7b:df:23:
f0:62:3b:b2:4e:82:a0:6b:37:74:4b:8e:cc:7e:4a:eb:5a:25:
ea:1d:96:dc:c9:26:e0:7e:15:5b:a8:00:3e:18:9a:56:74:8a:
4e:ab:fd:3a:8f:04:1f:8a:5b:4f:e9:d3:78:a2:91:fa:de:b8:
ca:f9:74:c6:c1:d7:84:27:00:a3:04:00:57:9e:b7:16:60:a2:
d3:05:36:c7:02:ad:d4:47:b0:f3:4a:0e:ff:7f:fc:a7:65:de:
6d:af:3a:ce:11:b0:39:65:d9:b8:73:c4:16:66:bf:2d:d6:99:
a2:cb:a6:d7:90:5a:0b:53:52:1b:91:a6:01:e3:67:87:27:83:
cb:fa:7e:23:90:53:e0:dd:1c:6e:00:e9:d4:96:b0:d8:dc:24:
05:82:cc:e7:39:78:d1:4f:a4:1d:68:2a:77:78:0e:78:0a:86:
45:b6:f1:49:84:a1:73:da:de:31:07:f5:cb:41:2b:91:d6:f5:
e4:3f:88:22:dd:2e:42:5a:33:91:76:7b:88:be:4d:c1:b8:6a:
f8:23:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org