Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: HdlO/yHW3I46KLVy7H9VRQ8Nz+per+hU3XybpGYELKM=
Subject key identifier: 8B:8E:8A:41:43:A3:93:E0:8E:34:C5:C9:A1:8A:01:13:23:01:B6:D4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 14692EAEE19A4D025EB5271B0ABE7D6CA595FB0E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211484.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 211484
IP address blocks: 2a06:a005:2440::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:69:2e:ae:e1:9a:4d:02:5e:b5:27:1b:0a:be:7d:6c:a5:95:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=8B8E8A4143A393E08E34C5C9A18A01132301B6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:0f:47:40:54:f3:85:79:19:66:2b:4c:88:
9c:d7:76:bd:de:12:6a:07:94:0b:75:82:de:05:ea:
73:c2:72:dd:43:bc:d3:4c:6b:96:57:b0:2a:4f:96:
7c:2e:dc:33:99:29:12:cc:9a:59:ed:67:c8:fd:29:
ca:92:83:e0:ff:8f:38:50:fd:19:88:9e:67:25:36:
db:08:9f:e7:d4:a7:a8:c8:cf:99:09:d2:0e:fd:8e:
86:17:ed:02:a8:79:7d:ed:63:35:88:e4:39:56:9b:
71:c7:50:6e:e6:ac:64:55:ad:de:99:3f:6d:1c:fe:
0f:32:69:04:1d:b7:36:ac:19:90:35:11:c1:d3:9f:
2b:98:90:2c:3a:91:3f:36:d1:71:69:0d:df:08:40:
19:8b:51:e8:09:3c:33:63:11:35:aa:54:49:a1:28:
ba:60:fd:a0:df:d6:37:79:14:21:32:f9:d4:76:d0:
72:2f:7a:47:a7:0e:7a:d7:3d:c6:4b:1b:0b:36:44:
03:10:0e:e2:da:78:d3:59:58:f4:29:21:2f:b2:cd:
28:6f:27:78:3d:f3:fa:9b:97:bd:2f:c4:9c:85:a5:
81:99:9e:aa:1b:5d:e8:42:51:7b:be:7d:2b:8a:db:
9b:e6:6f:1a:21:7e:55:fa:6f:41:16:55:a7:9f:7d:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:8A:41:43:A3:93:E0:8E:34:C5:C9:A1:8A:01:13:23:01:B6:D4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2440::/44
Signature Algorithm: sha256WithRSAEncryption
59:91:f8:fe:aa:08:15:be:38:66:79:11:9a:20:d2:3d:dd:c4:
aa:0f:05:72:ab:86:97:3a:e6:81:96:e0:d7:ef:03:3c:27:97:
bd:dd:9a:9c:fc:40:3c:30:83:5f:d5:bb:1b:2d:25:53:db:36:
fb:5e:d2:5f:85:d9:34:2c:b2:67:df:02:cb:9f:23:76:86:7c:
c1:92:e9:de:0e:3d:08:b9:a6:f5:0e:08:20:1f:e3:d6:9f:ca:
71:aa:f4:70:22:d3:24:de:79:67:5f:07:27:2b:ac:a0:86:cb:
af:c9:18:94:f8:d5:1b:1a:20:fa:b4:5c:84:77:bd:ac:54:ec:
ea:8e:0d:b9:39:33:bb:18:32:a9:dc:88:1a:14:94:ba:b3:a1:
a7:91:23:67:81:3f:f9:1e:63:93:5e:6a:cf:42:a8:77:26:3b:
15:4e:16:77:f7:a8:0b:1d:0d:87:31:19:37:d5:0c:48:c4:00:
e9:48:d9:b1:d5:94:bf:1e:e0:2d:ab:a9:ef:34:0f:49:d9:c1:
51:62:b5:f0:13:1d:36:e6:cc:a5:64:ae:e3:f9:d2:4d:f9:93:
63:12:c0:0c:fd:f8:4a:80:85:79:ee:f2:3a:66:5f:fa:24:94:
1f:46:94:a3:ab:d0:93:34:1e:14:0e:86:67:e3:4a:27:4e:75:
51:20:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org