Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211233.roa
File: AS211233.roa (raw, json)
Hash identifier: JL90u35p5I+9yrVkYJy8yZW7lEU2vHkSPqdBAZKjt3g=
Subject key identifier: 2C:E6:56:ED:25:DE:02:AC:81:F1:66:AD:62:B8:DF:58:66:B6:35:31
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3D6F86CF90DDFCE4FDC235643290F41BB62F3D67
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211233.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 211233
IP address blocks: 2a06:a005:19b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6f:86:cf:90:dd:fc:e4:fd:c2:35:64:32:90:f4:1b:b6:2f:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=2CE656ED25DE02AC81F166AD62B8DF5866B63531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:7b:e1:6c:0a:82:ea:dd:c6:f0:45:5b:7b:
47:fc:79:ca:35:2d:f7:81:8e:1f:c5:3c:5a:db:a5:
63:97:85:8e:7a:05:cc:3e:e3:fd:5e:d3:b1:c1:1c:
e2:b9:2d:f4:76:0d:4f:2e:a9:70:b5:7a:af:7f:78:
62:68:c8:ae:ea:89:8a:2f:67:f6:73:d4:83:aa:e5:
99:7e:02:9c:81:80:f3:bc:a4:1b:d5:5d:96:31:9b:
cb:91:9f:43:85:70:a0:68:fe:ae:c7:9c:b5:3b:22:
17:1a:6d:a1:48:bc:1d:5e:46:81:57:b4:a5:3b:e7:
cb:c1:ce:3a:9f:67:06:4c:ff:0c:0d:fc:1b:a2:cb:
ec:c6:5c:f6:c8:42:b5:23:af:5b:cd:51:cf:f0:57:
90:f3:34:6e:49:e9:8a:a1:8c:bc:35:98:02:63:9b:
b4:d6:5e:f8:02:f1:3c:43:11:3a:df:83:ad:e6:5f:
07:e0:45:0e:76:d5:45:23:f8:b1:30:f1:e8:81:99:
e5:0d:47:72:f9:26:ce:6c:af:df:54:d8:3f:cc:69:
4d:31:53:8f:2b:5e:4a:01:87:11:71:af:b1:30:40:
ee:54:80:65:1e:aa:dd:f5:e5:63:10:a0:d3:94:ba:
7a:de:8d:89:00:42:df:7d:d6:ae:e0:2b:5f:53:8e:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:56:ED:25:DE:02:AC:81:F1:66:AD:62:B8:DF:58:66:B6:35:31
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19b0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:4b:4c:9e:31:54:7a:4d:71:2d:95:3a:50:ab:15:4c:cd:89:
d1:35:d4:af:34:f2:e7:aa:f3:10:6b:91:7e:a2:05:9d:00:9c:
40:37:6f:d8:f2:f7:79:83:30:d3:78:cd:96:48:51:19:90:0e:
04:aa:09:01:82:29:10:a7:38:33:f7:8e:0b:4c:b8:87:f7:d7:
75:79:f7:90:d8:8c:ef:ef:75:2d:ac:48:a3:83:f1:21:f4:cf:
94:b4:98:c5:00:30:2f:ca:ce:0a:e3:bd:9e:a2:d7:e3:1f:0a:
1f:e4:95:7d:a5:9b:81:25:96:47:ef:c1:25:66:c4:49:88:d3:
1a:c7:ea:a9:7b:74:37:6c:8b:ee:44:db:85:87:9f:dc:36:e8:
8f:15:f6:66:95:4c:05:9e:57:59:b6:7a:34:ca:00:00:55:46:
b2:9a:b2:2b:e4:62:61:fc:f6:55:ae:ea:56:94:38:a7:85:dd:
5e:a3:22:1a:53:a2:22:b6:3a:ca:b3:22:90:50:ed:ba:97:97:
73:46:94:65:ce:05:71:86:85:ac:f1:66:bf:b3:76:c2:19:70:
be:08:52:c6:f4:a8:36:f5:06:30:15:71:b5:d9:9b:07:a3:fd:
f7:2c:8f:61:80:86:b2:8c:e3:66:bc:f1:34:3d:83:ee:02:ae:
3d:af:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org