Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211535.roa
File: AS211535.roa (raw, json)
Hash identifier: kmK64IF3w33dg3z+Xgyl7RTr1iVnxQy3zgLhY3D4rYk=
Subject key identifier: E6:DA:0E:10:DE:BA:B8:15:28:E4:10:41:50:2C:ED:C6:89:5F:0D:5D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0E3DD3CD98C810BCC7B4E6BE43402A363BBC4151
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211535.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 211535
IP address blocks: 2a06:a005:1670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3d:d3:cd:98:c8:10:bc:c7:b4:e6:be:43:40:2a:36:3b:bc:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=E6DA0E10DEBAB81528E41041502CEDC6895F0D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:1d:cb:ad:ec:0a:0e:d5:88:52:27:c5:e6:
59:73:79:25:23:35:ab:3b:cf:ca:c5:cc:8d:37:5b:
9e:cc:3a:8b:17:c1:d3:e1:aa:8d:52:2c:c7:5a:2a:
6e:02:44:a1:bd:eb:b1:8a:de:c2:bc:ee:e5:44:0b:
51:f8:e0:87:5b:39:ac:0a:07:1a:08:a2:d5:0b:d6:
05:9a:88:11:74:49:27:8d:6f:e3:25:74:f2:a6:2f:
a5:7c:46:f3:a3:c7:1c:7f:4a:7f:9a:4a:31:e1:12:
dc:1f:13:9b:5c:62:b3:f0:72:2d:79:c3:36:98:8c:
73:3e:d0:bc:7e:c2:20:6d:6d:79:d7:e9:a7:f0:84:
26:39:a1:c3:17:f2:98:55:10:f7:0e:04:32:af:7a:
70:37:59:0a:eb:32:a8:e5:91:fc:a5:a4:4a:e7:f3:
71:9f:e1:d5:91:03:2e:82:03:ed:20:9b:54:25:a3:
ed:c2:43:b1:b2:f5:68:73:04:2b:f3:b1:59:b7:f3:
be:c8:b2:f0:fa:b5:66:b7:7b:c3:e0:b0:f2:e6:72:
db:91:5b:09:39:21:68:73:0e:f8:2f:31:9c:ac:b4:
c6:8a:5d:b4:eb:85:90:7c:1e:c1:5e:79:05:0f:28:
b3:b3:15:ff:0d:67:5f:73:2a:95:36:b2:71:f2:05:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:0E:10:DE:BA:B8:15:28:E4:10:41:50:2C:ED:C6:89:5F:0D:5D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1670::/44
Signature Algorithm: sha256WithRSAEncryption
3e:20:2f:da:36:c5:53:2b:6f:3e:37:c1:d6:4b:60:5f:ca:44:
27:4d:12:0c:6c:1c:5d:a9:9e:50:4b:53:6a:94:ea:22:8b:c9:
ef:89:39:80:d4:4e:f1:b0:c1:36:19:73:2b:66:b8:b2:aa:2c:
3d:4d:7b:0e:85:88:70:13:e0:3c:52:62:98:a4:0f:ec:5d:be:
c4:7a:7f:65:a1:a3:a0:ff:83:56:e9:e8:72:f6:d5:2f:9e:f5:
9b:3a:ae:74:a1:bd:a8:b9:f3:9f:e8:6e:ce:d7:33:8b:83:5e:
29:b2:f5:c1:3d:d1:51:44:14:a6:0b:4b:f1:90:a8:05:dd:2e:
7a:ae:41:96:35:c0:21:e3:bd:c3:0c:1e:90:87:3f:a1:ed:ec:
72:c5:23:68:30:d4:10:60:2c:17:2b:87:70:4c:8c:5e:f4:e5:
57:91:36:8b:47:23:a5:51:78:a6:b4:d2:86:0c:45:46:e3:bd:
4a:60:38:29:5b:8f:aa:ad:61:d2:46:15:bc:2c:18:ba:1f:7d:
d8:5b:78:5f:6d:30:93:5f:89:2f:8e:01:2d:b1:c9:61:e6:a3:
0c:b2:4f:0c:b4:a5:76:d3:fe:4a:52:a6:3e:70:05:93:16:9e:
3b:97:5f:89:f5:0a:d4:0a:78:19:f3:2a:4b:f3:ea:93:66:2e:
c1:21:af:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org