Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210888.roa
File: AS210888.roa (raw, json)
Hash identifier: KZeqm05yDH0SO1BhvhMu9aTME0wR8vsA1o8DMOgOiu8=
Subject key identifier: 47:2A:E0:4F:CB:07:BA:48:41:3F:28:13:B3:77:52:0F:51:AF:38:3D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2FAA85F5DAB0E59AF3F3C847285A0574A51169BB
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210888.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 210888
IP address blocks: 2a06:a005:4f0::/44 maxlen: 48
2a06:a005:1169::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:aa:85:f5:da:b0:e5:9a:f3:f3:c8:47:28:5a:05:74:a5:11:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=472AE04FCB07BA48413F2813B377520F51AF383D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:9e:d9:4d:6f:75:55:09:37:ff:3d:d5:22:
8e:11:c3:62:a7:30:74:9d:50:65:57:e2:7b:1e:d9:
49:15:e7:f8:4d:87:d0:1f:d5:d5:35:ab:5a:02:9e:
8f:a7:58:fa:7f:15:bf:4e:1c:6f:75:eb:78:b8:56:
b3:b8:72:b2:4b:3c:c7:da:50:a6:e3:33:62:3e:14:
71:21:df:9b:5b:3f:1b:6b:19:f6:d4:9d:74:90:70:
ed:4b:c6:c7:e9:6c:83:e8:19:34:29:e2:15:7b:08:
1a:14:76:8f:d3:4b:44:b4:31:b5:ea:5e:ac:6b:c4:
49:94:e1:02:be:ce:02:ca:d6:21:99:92:8f:2f:eb:
cb:99:f8:4b:8a:ab:51:e3:b2:f8:99:01:3f:f6:6e:
98:f3:31:2e:89:a1:35:72:dc:85:9f:18:e3:37:ee:
18:a9:8f:63:e3:6c:7e:b8:14:7c:b6:08:b7:b4:be:
94:27:dd:fa:42:ba:dc:e2:3c:5e:70:01:07:5e:40:
08:4d:f6:be:b7:d5:7c:b6:91:4d:3d:f8:6a:ce:f7:
fd:54:07:ed:cc:03:97:98:f9:f7:52:3f:ee:c5:39:
dd:aa:e9:62:6d:dd:93:16:68:35:be:1e:d5:b7:a0:
4e:39:fa:06:b8:2a:66:5d:42:74:32:cf:0f:cb:ff:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2A:E0:4F:CB:07:BA:48:41:3F:28:13:B3:77:52:0F:51:AF:38:3D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4f0::/44
2a06:a005:1169::/48
Signature Algorithm: sha256WithRSAEncryption
52:74:b7:26:d4:0e:92:a5:f3:21:68:3a:d7:b1:24:ed:84:75:
26:50:9c:0d:58:d2:b5:fa:fa:f4:7c:6f:2b:92:1a:4b:f8:74:
08:0f:6a:51:4d:e7:02:de:bd:a5:de:39:6d:76:44:29:84:e2:
03:d7:95:58:48:b2:bf:86:06:de:75:37:0b:44:f9:90:16:a0:
76:e6:e7:66:2d:12:5a:0b:2d:d6:25:b2:ed:83:62:04:86:86:
ef:8c:3b:dd:63:4c:f9:aa:ab:83:ed:3c:37:e8:d3:b6:9a:80:
d9:4a:14:10:04:29:9a:79:14:7d:ce:89:9c:ff:d1:4d:96:cc:
4d:fd:5d:56:68:d2:02:94:e2:b5:9c:ad:4a:fd:18:0c:04:72:
bd:08:ff:01:f0:f2:3d:5f:af:5e:76:01:d0:b3:70:1d:18:e1:
e2:e8:48:21:8d:fa:c2:0c:19:94:2c:f4:ef:dc:f6:60:fb:af:
eb:c5:79:ee:03:86:47:64:d4:3e:52:d2:88:c5:01:ac:26:9a:
a6:a0:6c:6f:b1:50:70:dd:02:b7:d4:18:06:fc:4f:da:08:38:
47:9c:00:7a:31:f9:c6:5b:66:36:35:f5:3a:34:44:7e:b2:cc:
c9:11:41:6b:5a:c2:54:dc:13:d8:ec:2e:12:d6:e1:4d:1a:d8:
62:d5:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org