Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211495.roa
File: AS211495.roa (raw, json)
Hash identifier: rMgqovCjEKpMBrkEytr47Dxh2Ys8MddUd4160k+NeMs=
Subject key identifier: B2:E7:9C:3E:DA:E6:74:47:E9:DB:F8:59:96:E2:F7:33:B9:16:0F:97
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 53E6996359283968590968FE5868B9F3D82E9BAE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211495.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 211495
IP address blocks: 2a06:a005:6b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e6:99:63:59:28:39:68:59:09:68:fe:58:68:b9:f3:d8:2e:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=B2E79C3EDAE67447E9DBF85996E2F733B9160F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:aa:53:72:cf:d2:ff:7b:e9:ca:bf:56:3a:
b4:9b:37:e2:81:5c:e3:4f:86:d5:c6:c1:bc:1a:72:
e1:6d:86:e6:aa:47:25:b7:1e:19:6b:fa:71:6b:ce:
b3:6b:5c:26:5d:a5:10:62:bc:ce:d1:02:1d:e4:0b:
93:a1:78:91:f9:14:25:b8:3f:01:67:31:3a:48:8b:
12:10:5d:dc:7f:20:60:f9:21:95:6b:e5:c1:2a:aa:
27:56:50:8d:4e:b2:ae:a8:34:72:5f:76:8c:8e:3c:
00:61:90:79:6a:33:37:61:e4:f7:78:85:7e:5b:6c:
a4:73:ed:25:34:3b:24:41:62:dc:76:c6:c1:0f:b4:
3c:80:e9:8c:7b:b8:01:36:6c:32:dd:81:15:f1:5b:
f1:39:b4:c6:20:e3:50:e4:ae:6e:3a:c0:c9:fc:26:
e5:93:4c:46:9b:6f:29:8f:74:f6:b4:1f:6d:e4:0f:
64:0f:6f:a5:b0:af:78:84:48:e9:e9:6a:2b:b6:51:
c5:64:dc:0d:32:76:6b:4e:99:d5:d8:d3:ad:c5:56:
85:58:7b:54:cf:48:d4:7e:73:c2:bf:88:3e:c6:73:
25:b0:98:04:14:92:91:db:28:cb:7e:15:cf:05:36:
19:4e:43:90:d6:94:d6:ff:8d:29:a0:40:14:b5:69:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:9C:3E:DA:E6:74:47:E9:DB:F8:59:96:E2:F7:33:B9:16:0F:97
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:61:42:a0:65:7a:1d:2b:75:d8:e9:0b:a2:b0:ad:46:e8:05:
1b:dc:b2:01:63:bf:00:38:0c:95:4b:8d:86:14:6d:4e:f5:68:
7c:37:74:bf:01:c1:93:38:2c:a7:4e:e5:88:32:21:00:58:ef:
5a:c4:0c:be:c9:6d:70:46:57:1c:37:86:85:47:c6:2a:db:8f:
dd:7f:9d:7e:67:97:4a:2e:d5:71:e8:ea:b9:cd:32:b6:c2:1e:
79:19:17:c0:e6:77:ab:91:b8:c7:f1:ef:c6:b6:90:ab:bc:ca:
92:62:f0:bc:dc:0d:26:58:8e:4f:bf:aa:17:c2:df:a2:4f:9c:
a9:d2:5c:35:18:ef:cd:ab:56:5d:f9:0b:57:42:32:a9:c5:03:
a1:c5:ef:be:d2:34:76:fc:c0:b5:e2:b2:28:5a:40:88:3c:1f:
ae:fe:eb:d9:68:7f:7c:b4:eb:1e:ed:04:46:99:35:99:f9:b4:
17:46:7d:08:2d:29:d2:62:39:98:01:6e:a8:95:d9:ba:39:c3:
27:87:ce:24:bc:9e:8b:e6:cc:42:b7:b5:31:91:4a:d0:00:64:
a3:48:85:b5:01:88:2d:86:3b:03:68:16:af:72:c4:2f:49:8c:
46:97:39:01:70:7b:4e:22:c7:51:53:24:30:52:de:50:f6:ec:
15:d3:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org