Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211571.roa
File: AS211571.roa (raw, json)
Hash identifier: kip7GJ8TmiloogcjQU31BxumH2JuUpq0PCWGG3mA8d4=
Subject key identifier: AB:C1:95:C6:61:0B:DB:DD:D0:9F:FA:9F:05:8D:AA:43:9B:A2:7B:B0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7FC27EAD203C345F4F9566DF8527CDCE7E78BD90
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211571.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 211571
IP address blocks: 2a06:a005:85e::/48 maxlen: 48
2a06:a005:9c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:7e:ad:20:3c:34:5f:4f:95:66:df:85:27:cd:ce:7e:78:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=ABC195C6610BDBDDD09FFA9F058DAA439BA27BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:18:09:cb:06:c0:c8:5d:96:46:7f:06:43:
65:fa:ad:a3:fb:51:8f:c0:5c:71:f9:cb:74:2d:d0:
53:0c:fd:12:17:81:1e:e8:8f:ea:df:96:e8:d1:f0:
c7:d3:04:0c:96:30:d9:a0:cc:49:c8:94:fd:f2:fc:
1d:82:df:62:c1:11:39:0a:0d:0d:2a:fb:93:49:bf:
e0:ce:60:47:d8:64:ec:a8:85:be:c1:d7:6c:f0:1f:
01:68:f5:e0:c1:e4:78:21:44:12:8a:9a:b6:95:17:
0d:e7:88:4e:4a:44:b0:d4:73:66:47:2d:f6:7a:c6:
49:67:1c:4b:5b:b9:a3:9c:5b:88:6a:0e:8c:93:65:
ba:0d:40:cf:f6:1e:bc:6f:59:8b:fd:1b:53:c5:50:
e7:69:a7:31:66:5c:49:20:d2:a0:63:a8:ca:88:c6:
29:6b:24:d9:2c:d1:2e:ed:a7:1b:69:28:c9:ed:8a:
fe:ee:3a:cc:fb:4d:c5:77:38:07:84:e3:72:b5:c1:
ff:c5:1a:b7:a9:a0:a6:e1:3a:cc:49:cf:fa:90:cc:
32:8d:36:e2:1e:9e:10:70:7e:b6:aa:a7:7f:19:7e:
ad:ff:a1:fd:fd:9c:43:5e:25:f9:d6:54:80:79:b9:
c7:5c:bf:42:fe:ef:12:02:e9:f2:02:2d:86:59:07:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:95:C6:61:0B:DB:DD:D0:9F:FA:9F:05:8D:AA:43:9B:A2:7B:B0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211571.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:85e::/48
2a06:a005:9c0::/44
Signature Algorithm: sha256WithRSAEncryption
82:43:dd:8c:65:ad:f0:fb:08:f1:30:05:b3:61:a1:85:5f:70:
f8:e1:e9:11:37:75:d6:8d:94:5e:24:8a:fa:1a:c3:2d:ed:f5:
6c:24:36:08:c2:18:8c:78:14:53:c2:7a:59:be:69:02:3f:b6:
d8:01:00:26:ac:9e:2a:b2:4e:93:4d:3a:5d:72:07:a8:75:f0:
b9:e8:48:98:5f:96:f9:3c:e3:75:8b:44:dd:b2:be:c8:11:d0:
b0:62:69:c3:76:39:0c:03:f0:36:28:99:89:be:0d:fa:90:78:
5a:be:2a:c7:20:8c:99:26:82:c7:58:90:81:b1:6c:eb:5d:78:
b0:ec:4b:de:10:e6:7c:52:63:41:6b:ad:0a:a8:32:77:e4:7d:
bc:c7:60:8b:60:c2:1a:6a:b9:40:c3:96:3b:81:30:81:6e:92:
31:07:08:75:91:a6:d1:74:33:44:04:04:10:94:02:eb:7d:b4:
85:29:6e:69:dd:01:5c:74:37:4d:ee:aa:fc:9e:aa:23:31:38:
e0:50:9f:a3:1f:f3:52:31:f7:91:96:e0:0d:27:84:81:46:a9:
b7:75:6d:ff:94:9a:3d:40:4b:ff:95:24:42:11:1e:b3:6d:c4:
57:7b:92:43:72:f3:b1:46:44:88:d4:3e:e9:9d:bb:8c:a4:30:
a3:96:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org