Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211367.roa
File: AS211367.roa (raw, json)
Hash identifier: MGymMpv4N9bF9Dvv+f+8G65xTKT0xOFYjW4UW4tdkJQ=
Subject key identifier: 6C:8E:F9:D3:A7:81:DB:9B:BC:B4:45:0C:83:FA:97:82:B2:D5:00:58
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0BEA67303EBE3AF60AEDA77E62D692E999D78E37
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211367.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 211367
IP address blocks: 2a06:a005:420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ea:67:30:3e:be:3a:f6:0a:ed:a7:7e:62:d6:92:e9:99:d7:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=6C8EF9D3A781DB9BBCB4450C83FA9782B2D50058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:ee:72:ba:14:02:83:71:9b:fb:af:e4:ef:
eb:c9:96:27:3d:b8:fc:81:20:51:48:ea:41:95:01:
9c:ab:94:d7:b8:5f:1c:37:c1:b6:3c:09:25:e0:96:
52:18:60:cd:f3:42:9b:89:a8:6e:28:99:94:65:9c:
ee:59:cc:3c:a3:c8:70:66:2c:93:ab:e6:37:dd:1f:
5b:a3:4c:b0:53:4f:02:d5:3c:6a:3d:a6:33:5b:c2:
62:ca:70:4c:4f:93:60:11:19:37:f1:e5:fa:a8:d1:
32:f4:67:4f:8f:10:ae:9a:73:0c:3c:7d:3a:67:87:
35:4c:d7:cc:82:f4:ce:6a:5f:f5:96:0c:41:c8:2f:
b3:eb:10:f1:1e:61:cf:54:7f:26:ae:19:d2:47:af:
a3:0c:73:62:b3:d6:1f:97:4e:4e:29:d7:e4:39:40:
9b:d0:3f:e6:30:2b:74:64:c9:d1:93:99:9a:b9:50:
72:6f:7b:45:35:35:f2:80:3e:eb:a6:25:47:b3:41:
b4:09:fc:66:d4:24:ea:90:3a:58:34:67:44:ad:12:
3a:e5:7a:e0:39:e9:dc:d6:b7:c1:65:43:13:5d:ed:
4e:e7:3d:c9:8a:44:2a:fd:e0:54:b9:e1:93:a4:82:
e6:b6:ed:49:a6:5c:72:dd:5b:75:a1:1a:68:4d:f5:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:F9:D3:A7:81:DB:9B:BC:B4:45:0C:83:FA:97:82:B2:D5:00:58
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:420::/44
Signature Algorithm: sha256WithRSAEncryption
92:31:db:9c:dc:a1:27:e0:c0:3f:38:b7:d0:05:dc:43:57:26:
41:92:e4:7b:df:3d:da:18:39:0b:bb:d7:d1:47:a7:76:26:14:
24:c6:2c:e7:7f:21:b1:86:05:5b:7a:5c:a9:00:a6:4a:94:3c:
98:a4:72:4f:58:a8:2a:68:4d:23:02:68:80:3c:fe:63:6f:46:
f2:d0:8b:39:df:80:40:28:00:b8:b2:4a:79:9c:91:e8:0c:89:
f0:92:14:28:e9:0a:d2:d5:76:3c:9e:5f:1e:40:88:ad:8f:92:
c8:7a:8b:a9:0e:7b:e7:23:ff:71:49:62:11:76:09:d9:44:76:
ea:2d:71:c1:55:73:dd:a2:6c:59:a4:4a:3a:06:c4:f3:2c:d5:
8c:fb:c5:81:df:65:5b:22:a0:2f:6e:85:b1:76:47:17:3b:0d:
38:ba:5e:84:2e:a1:0a:96:c2:4f:d4:88:cc:9d:d9:ba:7c:9d:
86:09:2f:ad:0a:8a:7e:a0:44:46:37:c0:4c:bf:45:71:9d:8d:
59:e2:1e:98:23:2d:be:26:d8:41:04:9a:5c:32:50:b0:6b:22:
1c:aa:17:2a:b3:be:9b:be:30:b8:30:84:d3:36:ad:15:2f:f8:
1e:41:24:72:4c:43:af:47:a2:d2:e9:b4:b5:f4:8d:a5:af:ec:
eb:99:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org