Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210925.roa
File: AS210925.roa (raw, json)
Hash identifier: zujKkuZ8OivITUf2wKlkqIDwv0mT+qqLzlAfVimnZoM=
Subject key identifier: A5:80:F3:FC:E3:A2:1E:62:18:E2:28:3E:ED:8B:EA:9D:1D:71:65:91
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2C525E456EABD7DE623677126AE965D1B7938B81
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210925.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 210925
IP address blocks: 2a06:a005:14::/48 maxlen: 48
2a06:a005:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:52:5e:45:6e:ab:d7:de:62:36:77:12:6a:e9:65:d1:b7:93:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=A580F3FCE3A21E6218E2283EED8BEA9D1D716591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:53:49:79:f7:aa:55:41:6d:28:6d:8b:3c:
fc:0b:75:3b:ba:9d:88:12:bc:aa:7d:8f:91:e2:07:
dc:43:90:cf:dd:b6:ab:f8:24:33:68:38:df:c6:57:
83:8b:00:7d:a3:d7:4d:65:e8:aa:43:3b:e4:df:4b:
05:df:90:b7:d2:41:cd:84:7a:8d:d7:bd:6a:df:b9:
76:5d:dd:00:5d:b4:4d:46:59:0a:01:aa:ee:6d:e1:
52:e2:57:e7:4b:29:a6:0b:08:a2:23:ec:b2:41:e3:
4a:1e:91:01:0e:6d:23:26:15:a0:4a:d6:16:98:a4:
5d:b2:1d:db:2a:11:7a:e2:f5:91:14:11:8a:3f:44:
a7:b9:86:ca:de:7e:f6:35:a5:26:71:ae:ba:3c:78:
75:f0:20:9a:b3:19:55:c3:3a:59:8c:69:c5:76:0a:
7d:bd:91:26:d4:36:1b:f9:b3:44:ee:73:0f:32:c5:
73:32:83:20:02:35:06:31:34:f5:54:f0:8f:ec:21:
3f:ae:4e:41:21:6d:6c:38:91:a8:d4:80:da:db:c0:
88:1a:8a:f8:70:25:c1:6e:0c:a3:3a:b9:22:38:d0:
4b:9d:24:23:16:a3:88:1a:1d:3a:db:bf:9e:2e:da:
ab:54:58:82:a2:8e:20:78:19:da:38:8f:7a:e2:f1:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:F3:FC:E3:A2:1E:62:18:E2:28:3E:ED:8B:EA:9D:1D:71:65:91
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210925.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14::/47
Signature Algorithm: sha256WithRSAEncryption
5b:e8:65:fd:db:fb:41:29:73:61:ee:62:b9:cf:aa:e0:5d:33:
43:96:81:14:c5:e9:93:db:f0:dc:85:f3:cd:11:91:db:d9:d3:
76:2d:d1:65:d1:0f:8f:9f:2e:b4:8c:ee:a6:57:b4:f6:99:45:
c2:3e:a4:b1:b7:da:fd:66:e9:9b:36:a0:c3:f4:1c:f1:6d:67:
dd:a0:67:a2:a3:a1:e5:6f:c2:58:69:c8:3a:90:cd:ec:ab:a0:
50:78:0c:9f:e3:ba:ce:c8:34:d6:df:27:23:fa:31:4e:bb:77:
6b:21:be:e7:ef:d1:44:15:dc:d3:f7:4a:0b:9c:00:d5:2f:c0:
a5:d5:49:67:f6:4a:a7:9c:e6:53:e7:2f:e1:2c:1c:91:d4:a0:
9a:a4:33:4b:3c:fa:d9:68:21:26:9c:3a:25:c0:9e:6a:c7:44:
cf:e0:9b:06:a1:76:9b:03:ac:6d:fc:9d:17:c4:9f:1b:17:74:
3c:88:73:3f:e3:c7:87:b2:ed:ed:c8:2a:9c:52:5b:af:78:05:
6c:40:f3:be:71:06:ea:23:87:5e:15:18:49:06:c9:42:fe:70:
90:c0:6f:9a:bc:51:a6:f2:66:5e:39:02:cf:de:d2:c5:4e:18:
68:bd:b6:ac:1a:f1:db:92:c1:24:e9:a2:90:af:8c:ca:f6:5a:
59:fb:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org