Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211562.roa
File: AS211562.roa (raw, json)
Hash identifier: CM+6phJzz9c6thO8FSJDxAUug7TjbgdnTxKwfioZlPY=
Subject key identifier: 80:31:59:84:CF:73:AD:9F:CC:57:B7:8F:83:FC:7D:79:83:DF:88:03
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 39625DC19D67D413648F76290CFEDEBF08A3418E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211562.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 211562
IP address blocks: 2a06:a005:2990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:62:5d:c1:9d:67:d4:13:64:8f:76:29:0c:fe:de:bf:08:a3:41:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=80315984CF73AD9FCC57B78F83FC7D7983DF8803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:d7:57:f4:f9:6e:4b:76:4c:ae:9a:e8:5e:
fa:c1:8b:60:e2:20:07:1d:64:fd:e2:ce:84:7f:4b:
64:ec:b3:90:4c:61:46:22:85:5f:07:29:0b:6e:78:
12:38:03:cc:d9:4d:53:69:31:54:0a:66:12:bd:c2:
2d:84:b4:97:58:40:a9:cc:b2:86:01:ac:6c:31:2c:
6d:b7:da:60:1a:1b:62:4c:45:84:b7:95:b8:05:1e:
4a:df:58:a0:5d:d5:79:92:41:83:dd:22:67:1f:3a:
fa:44:d8:c9:d6:f3:4d:43:a8:2a:fd:58:9c:60:63:
9f:37:02:97:17:5a:32:62:9d:ca:59:76:ff:86:60:
5b:b4:ac:22:8b:e1:48:31:42:7d:7d:44:d2:30:2b:
a3:95:b8:6d:2f:a9:74:3f:8f:f3:d5:a6:18:b6:b8:
ed:57:37:0e:c5:69:64:bd:8f:21:62:57:05:f7:5a:
47:20:37:ca:9e:c9:b1:44:fa:a4:cb:eb:cd:b1:ac:
36:8b:ac:9c:9c:60:06:43:cf:0b:4e:d5:27:c6:d9:
95:0c:78:2c:20:63:c9:80:4a:b4:35:3d:df:c5:78:
79:d2:7d:ca:dd:29:c4:88:5d:d7:ee:4c:8a:50:a0:
8a:55:2d:42:e1:9e:0b:78:4e:48:32:f6:23:6e:4d:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:59:84:CF:73:AD:9F:CC:57:B7:8F:83:FC:7D:79:83:DF:88:03
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2990::/44
Signature Algorithm: sha256WithRSAEncryption
00:41:2a:a1:09:c7:16:50:86:80:a7:e4:0e:9f:43:99:02:e6:
bb:b8:c8:b8:7b:7c:5d:3f:89:3a:78:81:43:a7:59:de:75:f7:
f4:0a:3d:2e:61:27:36:85:d3:f3:5a:d7:5f:f2:d4:98:a0:59:
ff:6f:13:a7:50:19:a0:59:d8:82:1a:d2:b1:56:e6:96:ba:a9:
76:7d:6d:70:c5:40:7b:36:5d:5e:b7:68:d9:d4:a0:4c:66:26:
50:c5:77:85:76:16:a0:57:38:e3:4e:e3:ab:14:85:d1:85:43:
6b:85:81:e6:f4:a4:d4:29:9c:99:97:b9:64:45:69:99:7f:79:
f2:b9:68:13:58:37:91:57:78:d1:22:65:5a:40:22:af:53:6d:
21:72:7e:ae:aa:8c:bc:db:ce:66:6b:b5:9d:3c:ea:29:a2:c2:
e2:51:6c:62:27:fa:37:a5:1e:13:59:c2:f3:01:e6:d9:69:97:
dc:ee:33:9d:fc:da:89:49:50:71:4c:e4:71:32:dd:66:5d:bb:
65:77:8d:c6:08:c5:e1:12:6f:9f:78:e3:e6:1b:36:64:8a:c7:
6b:d8:a5:46:56:35:91:1c:7f:c0:bd:f3:37:77:23:50:a0:7d:
36:ff:50:7e:b7:cb:61:28:34:29:f3:bb:32:d2:a4:f3:fc:fc:
f9:a8:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org