Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211266.roa
File: AS211266.roa (raw, json)
Hash identifier: SVTW2rjndKO+JQJJiDtTbpIB1JrW9iZwnM/jPp9mUmw=
Subject key identifier: E2:ED:8E:22:E4:08:7A:93:9A:6B:2A:12:07:AD:33:0C:06:1C:64:45
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 679418B0209FC8382524A5045014E03B968428F2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211266.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 211266
IP address blocks: 2a06:a005:900::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:94:18:b0:20:9f:c8:38:25:24:a5:04:50:14:e0:3b:96:84:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=E2ED8E22E4087A939A6B2A1207AD330C061C6445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:69:45:ef:5d:55:39:cb:c3:23:01:fb:95:
b2:c2:69:fc:b1:03:e3:ac:62:4f:5c:b5:8f:70:dc:
d5:bf:87:6c:4a:15:32:b5:d7:d5:0e:e9:2a:01:5b:
6c:34:0f:fc:6b:65:6d:ea:0b:b3:2d:fe:8e:13:f8:
4f:91:9c:9d:88:ee:aa:8b:8f:24:a9:48:98:1b:33:
8d:ee:0e:26:63:67:fc:a5:60:b0:37:b9:5e:e8:0c:
5f:78:b2:fc:c1:5c:eb:f2:5c:0d:d1:d7:bf:84:a2:
7a:1e:68:c0:27:ce:df:76:1e:b1:87:fc:6e:94:f5:
0c:5b:6b:e9:74:92:34:97:ef:e9:f4:95:30:64:3d:
40:64:bd:19:cf:d0:09:f4:12:6a:99:ea:26:b8:0d:
4b:71:ac:5f:58:23:79:50:4f:c6:43:f3:af:c7:5a:
52:e6:97:0e:74:06:4a:9e:c8:f7:d8:20:70:88:ad:
25:68:dc:1d:da:41:d7:d0:9e:7d:71:e4:a5:45:fa:
cb:ef:41:a5:29:44:4c:80:6e:be:de:e9:2b:de:5c:
41:1d:6f:69:80:47:b0:d2:a3:a3:e2:33:1a:cb:31:
bc:c6:90:3c:b1:a5:dd:af:f9:95:32:a8:1e:37:8b:
61:6b:00:0f:d8:8c:d6:31:7e:61:11:a2:cd:51:31:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:8E:22:E4:08:7A:93:9A:6B:2A:12:07:AD:33:0C:06:1C:64:45
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:900::/44
Signature Algorithm: sha256WithRSAEncryption
9a:dc:0c:e5:86:d0:b3:aa:f3:b6:9c:ba:a8:02:dd:cb:7e:fe:
a8:e7:2a:2f:8e:33:e6:5e:b9:fb:ab:fb:35:d8:85:9d:bd:10:
75:44:35:d4:87:b0:56:36:85:96:e5:6f:9b:c8:d1:df:64:d2:
46:6b:5e:5f:3b:d5:72:58:1b:65:0c:d8:bf:3a:4a:2a:03:75:
29:e8:d6:b0:97:98:14:c0:58:5c:46:36:e9:09:fd:7d:72:6b:
ea:4b:11:73:3b:04:7e:a7:fb:b0:cc:08:54:47:d0:ec:5b:c2:
a1:ff:96:39:62:20:a8:14:02:26:8d:3e:4f:d0:19:f4:76:bc:
50:43:b2:2f:db:4d:bd:68:87:7d:42:bb:08:6e:74:41:4c:ca:
9a:95:76:56:7c:a6:18:6d:ce:49:c2:7a:fc:4c:f0:09:af:46:
bc:0a:ed:5e:4c:ce:f3:4d:98:2f:60:71:be:79:8d:62:0e:56:
1c:c0:9e:fe:42:90:48:b7:be:7c:4f:09:9e:05:bc:ca:bd:1a:
8d:ea:c2:25:6f:ba:80:f3:58:4f:12:e5:40:40:da:07:cc:57:
44:8a:bc:1d:13:83:ba:b4:41:63:7f:3d:51:e9:2c:cd:8e:85:
4e:07:a3:cc:32:aa:c4:27:b8:ba:61:4c:c8:56:35:b0:51:78:
bf:96:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org