Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211063.roa
File: AS211063.roa (raw, json)
Hash identifier: jiLwVKSGNAu0Y4Shse+Y96OM69i8zGBbE4Cc2Bx/iMY=
Subject key identifier: A8:FA:4D:0F:0A:0A:AB:71:97:31:04:C2:46:4F:5E:4E:EC:18:E8:24
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7176A57EE42B471126500E7CC55E84540ADDB268
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211063.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 211063
IP address blocks: 2a06:a005:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:76:a5:7e:e4:2b:47:11:26:50:0e:7c:c5:5e:84:54:0a:dd:b2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=A8FA4D0F0A0AAB71973104C2464F5E4EEC18E824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a4:c2:e7:53:81:46:0c:a0:a2:24:27:b2:b7:
23:b8:0a:b5:84:94:a3:2b:b9:9e:56:8f:5d:ef:38:
9b:24:33:23:de:1d:5d:74:40:a7:3a:db:42:a9:44:
8b:72:8e:81:46:8e:0a:6e:98:e9:60:74:a0:51:bb:
72:cf:91:a7:c2:c6:10:53:de:d8:f9:7c:9b:9f:95:
2c:ef:84:28:ca:9d:94:26:6a:19:bc:65:a0:0a:02:
9f:6b:3c:a9:72:a5:07:e4:9c:d2:72:c7:6e:60:bf:
40:a4:8d:c1:a4:2d:dd:6d:a7:91:9b:b0:fd:62:42:
33:37:29:e5:c9:a7:79:4d:40:e1:d8:88:33:03:41:
64:63:36:44:95:cc:5d:90:43:e5:89:32:96:d0:9b:
00:6a:60:5c:ee:b4:8a:d4:c1:42:3c:e3:b5:25:2c:
72:d3:b4:ab:32:28:a5:75:2b:57:26:00:c6:a0:df:
c2:6e:88:cf:e3:c8:d3:c7:df:fb:33:79:c6:53:57:
87:49:36:60:ee:d9:0e:2d:8b:27:5b:2f:b6:9f:ed:
20:8b:73:c6:0b:70:08:16:0b:8e:d1:72:dc:77:91:
5a:99:57:8f:8a:50:14:90:04:50:e3:bc:43:bb:5e:
41:44:74:66:d3:b5:79:13:1a:60:cc:62:72:1a:48:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:4D:0F:0A:0A:AB:71:97:31:04:C2:46:4F:5E:4E:EC:18:E8:24
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211063.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d::/48
Signature Algorithm: sha256WithRSAEncryption
25:0e:87:8b:81:c2:2a:89:10:e4:b3:fa:97:ed:3b:ce:ea:f5:
0c:71:26:c7:73:bf:cc:07:ba:8f:ea:5e:b7:2c:4d:36:a4:10:
a8:20:92:4e:d6:97:f1:9a:0e:87:3f:2e:d8:bb:15:fd:50:4c:
b8:64:d1:19:3c:54:a3:dc:4a:9e:f2:31:fc:52:eb:09:51:3f:
d8:f0:a0:05:2f:bf:77:ee:90:20:0f:1c:11:e1:5f:c7:dd:2c:
9a:38:4e:91:0d:5f:7c:c6:94:6e:da:b6:ac:c8:65:88:df:f1:
48:5b:6a:de:34:06:47:93:38:09:2f:2f:57:fb:03:76:cb:28:
60:d8:10:71:85:13:3b:0c:49:9e:b0:7d:ec:db:e7:1c:81:8c:
0d:e6:c7:eb:f3:4a:28:5e:f4:38:2c:5a:68:ea:cc:47:6b:86:
e8:2e:24:5e:7b:a5:0b:61:73:35:7e:1c:e2:0d:e6:c3:7f:51:
b9:f0:45:93:0b:94:d5:b8:a9:57:81:2b:a6:41:ce:82:d1:bc:
04:2a:3c:60:d2:80:a8:11:f6:89:e3:11:5f:2b:22:61:bd:f6:
77:7c:80:29:29:a5:4a:30:f9:92:21:7e:a9:b6:f4:50:91:2c:
9b:c0:2c:64:ed:0c:ce:fa:40:5b:40:11:b6:d5:70:c0:8f:f6:
28:7c:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org