Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211754.roa
File: AS211754.roa (raw, json)
Hash identifier: rg93G0580NX1YqEi96/RDGbtepJLUUYwaIkWHoXQA2o=
Subject key identifier: 51:51:87:C2:EF:05:03:58:E2:A4:C8:60:50:F7:D1:B1:D8:1C:C0:EC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1739F49094BBDD5F60CC9F405C8BA44E71C8F930
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211754.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 211754
IP address blocks: 2a06:a005:c90::/44 maxlen: 48
2a06:a005:ca0::/44 maxlen: 48
2a06:a005:cb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:39:f4:90:94:bb:dd:5f:60:cc:9f:40:5c:8b:a4:4e:71:c8:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=515187C2EF050358E2A4C86050F7D1B1D81CC0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:03:25:1c:15:14:a9:d5:07:ba:8d:a7:f3:
cd:ee:3a:21:07:ca:c5:a2:71:07:2b:a5:14:fa:b1:
2e:f4:3f:f0:bd:c6:03:29:f8:0a:56:72:8e:0d:7d:
be:fb:70:c6:ca:8b:78:42:76:55:77:00:a1:65:a3:
f8:4d:04:b2:a9:98:ea:7d:56:17:34:f2:96:57:f8:
fc:65:3a:f2:83:d6:67:52:cc:82:bc:62:da:da:fd:
32:4f:ec:a9:1e:ea:e4:76:47:68:8a:ac:b2:db:dd:
43:a2:cd:da:0d:ac:b5:a4:12:fb:8b:21:5c:29:61:
0a:66:50:a3:fa:ed:ad:c2:ef:b9:36:50:c7:ed:ff:
08:87:a0:cf:ec:7a:f9:89:e6:ce:d0:3b:44:2e:66:
a8:11:02:84:ac:52:15:58:ee:75:0b:a0:0f:fb:d1:
d1:0b:46:f9:d1:27:bd:23:07:1e:f5:0e:1e:7a:0d:
d2:c7:d4:5e:d7:c9:60:11:45:27:c0:d6:e5:ef:95:
79:78:73:16:8a:c2:19:91:87:a5:59:38:86:0e:03:
d6:f5:34:b4:41:81:38:55:54:ae:15:81:a3:52:db:
48:17:cf:a5:ce:0c:24:e6:8a:31:6a:73:69:54:01:
3f:c7:e3:c4:4c:b4:b2:54:f4:8d:5c:f9:46:c4:5b:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:87:C2:EF:05:03:58:E2:A4:C8:60:50:F7:D1:B1:D8:1C:C0:EC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c90::-2a06:a005:cbf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:fc:1b:03:3c:97:9c:ee:18:df:47:a9:2d:32:44:82:72:16:
e0:72:e4:80:b3:28:e4:db:98:3b:d0:32:76:94:c1:0c:e3:20:
d4:86:b0:a3:c1:3c:32:a9:10:91:0b:d2:47:ed:c2:48:80:1c:
fd:33:e1:f0:ac:5a:67:6c:0b:52:f6:64:f3:a1:20:4f:f2:cb:
2a:4b:17:fb:17:d8:2d:01:27:bf:5f:77:5a:fd:bd:d6:6d:0b:
90:a8:c4:74:78:a1:6b:ec:7e:84:dc:dd:1b:04:99:ee:15:68:
26:62:ae:e7:e0:9e:59:8b:a9:b8:a6:3c:16:b0:e3:e1:2e:e1:
4d:75:d0:ae:60:08:66:dd:4e:e9:43:82:0e:9c:2d:59:ef:81:
e8:b6:44:e0:b4:81:8d:27:b8:7b:29:a9:70:16:c6:86:5b:3a:
37:e6:c5:28:a3:f3:63:3a:07:1d:17:d1:6f:3d:87:3f:1f:1d:
31:46:ec:b9:62:3d:4e:74:99:66:2a:b3:59:39:d6:d1:e4:fb:
19:64:08:65:bf:0d:d3:e2:f1:39:f9:38:17:e0:35:8a:3a:1e:
40:af:6b:53:55:0c:db:b0:00:4a:b7:30:5e:1d:3d:a8:59:db:
a7:2b:f2:03:c1:42:d3:17:47:39:8c:d8:b2:ff:04:69:1e:c4:
e3:df:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org