Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211431.roa
File: AS211431.roa (raw, json)
Hash identifier: nlSCxhcsQTrpzPN6hPfCKLN+aYgn2Mn/DE2lk+Mktjk=
Subject key identifier: 61:14:B9:25:99:F1:AF:B9:3B:96:10:73:2B:1C:EF:79:E1:0E:BD:AA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 14D759E77C13A1838264BC9025F1400DA4741878
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211431.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 211431
IP address blocks: 2a06:a005:1720::/44 maxlen: 48
2a06:a005:1790::/44 maxlen: 48
2a06:a005:17b0::/44 maxlen: 48
2a06:a005:17c0::/44 maxlen: 48
2a06:a005:17d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d7:59:e7:7c:13:a1:83:82:64:bc:90:25:f1:40:0d:a4:74:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=6114B92599F1AFB93B9610732B1CEF79E10EBDAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:f2:9f:db:51:6f:2e:ac:70:e8:47:2d:5a:
fb:da:d1:56:63:d3:16:91:56:ff:6f:5a:e4:d6:d9:
69:b7:b3:41:dc:44:1f:00:2d:fa:e3:25:87:0d:72:
d8:17:81:a8:ce:9f:87:15:6f:b1:85:3b:21:82:0b:
42:fe:6c:2a:db:1d:84:fd:2a:86:e9:bf:08:bb:cf:
81:a3:b6:a8:85:11:50:de:5b:76:c3:60:28:b1:f2:
33:8f:96:2a:97:b8:e8:1f:c0:d1:7b:6e:6e:90:15:
44:b2:00:5c:c9:1d:f3:31:31:a4:35:75:ae:90:8b:
41:c2:58:8e:c2:8c:94:3c:e8:33:eb:8f:c3:5d:ba:
7a:69:ab:0b:fc:35:41:cc:29:73:af:2a:60:57:38:
17:7e:ab:04:80:d0:25:63:41:5d:49:d4:43:08:1e:
d3:4d:5b:f8:db:53:f7:21:72:c3:62:aa:c3:a8:09:
28:59:9b:bb:2b:45:ac:4e:f7:ee:ae:79:c2:b4:51:
f5:4b:b5:f3:4f:c3:21:0e:40:ae:69:df:23:2d:5d:
7b:7e:f4:d2:37:f7:5e:1e:44:3f:0f:3a:09:2c:37:
ca:a3:36:9d:a8:77:9b:bd:64:09:19:6a:74:99:aa:
76:36:6e:de:fb:c4:09:94:f0:bd:f8:bd:71:a1:c9:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:B9:25:99:F1:AF:B9:3B:96:10:73:2B:1C:EF:79:E1:0E:BD:AA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1720::/44
2a06:a005:1790::/44
2a06:a005:17b0::-2a06:a005:17df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:28:f1:ef:d7:ff:1f:fd:85:21:db:d5:ed:59:08:b7:d5:3e:
b0:f0:a4:d4:7f:14:c1:af:8e:56:23:a7:42:86:74:89:9a:f0:
96:ce:d9:cc:4b:16:74:ff:66:8c:74:18:f5:c0:43:d2:2c:1d:
25:d6:de:7f:45:cd:e9:24:da:87:d0:f8:76:47:52:26:63:25:
a4:e3:e3:04:19:43:56:e4:c4:a0:22:09:de:ce:38:5a:90:be:
e5:46:4a:5c:cc:80:d7:9d:f9:bb:ae:79:5f:7b:f5:21:4c:24:
e5:39:bb:42:52:87:c5:76:fc:48:c8:9e:27:0a:dc:8d:96:5f:
04:f8:f9:ec:00:41:7f:0e:78:e5:fa:39:8a:96:0a:df:34:d6:
92:23:e5:28:9c:c7:da:f0:92:61:4e:d8:62:6b:d3:2c:0a:8f:
d2:0c:40:fc:93:df:11:43:1e:24:61:8c:fd:36:95:e1:88:a9:
78:25:fe:4a:92:0c:76:f7:c1:b8:90:f2:70:9b:c9:18:c9:c3:
b3:ea:35:cd:64:69:07:8e:4f:1c:fc:58:ff:b3:3f:4a:90:3c:
d8:8d:eb:b4:ec:77:a3:b0:f2:7a:64:62:96:77:4d:b4:f0:b3:
a6:13:18:ac:a7:0f:27:90:4b:34:6a:db:2d:5f:7f:9f:2b:4b:
d0:f6:b8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org