Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211843.roa
File: AS211843.roa (raw, json)
Hash identifier: iTDQ4aVEIo0gw8DE4dP1EsOOoznthI+oMf0TWDwNMhE=
Subject key identifier: BB:77:A5:B8:91:DE:C0:A4:02:14:E6:D3:6B:85:C3:67:FD:08:1C:07
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0BF8F79886B08A406467A96808874E21B39D3140
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211843.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 211843
IP address blocks: 2a06:a005:a13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f8:f7:98:86:b0:8a:40:64:67:a9:68:08:87:4e:21:b3:9d:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=BB77A5B891DEC0A40214E6D36B85C367FD081C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:d3:9d:52:98:00:d1:c3:5f:33:73:69:51:
e9:14:9b:08:24:e2:59:d3:98:da:88:90:70:fd:6d:
f1:ce:db:01:63:67:94:34:38:1b:ea:f6:69:4e:67:
4c:6a:c7:2b:8e:ee:9a:fa:a9:82:31:26:c5:a9:91:
bd:db:94:e3:79:f1:f3:e8:98:fa:c3:3c:6d:4d:7a:
25:6e:29:f2:1e:d9:3b:fa:3f:0d:e3:aa:e6:b8:4b:
71:77:1a:ed:57:0c:41:dc:73:81:99:ce:26:68:49:
0f:e5:80:24:67:70:29:06:17:86:84:ca:fb:ba:cf:
a3:8f:63:f6:ea:b1:0b:c3:74:22:2d:30:44:13:9d:
d2:4e:17:a3:f9:6e:2a:df:fa:f0:9f:52:f4:e1:eb:
9e:2b:dd:a0:a4:74:b9:73:a2:cd:0c:55:71:a4:2f:
b7:28:82:f9:b7:9d:e6:0d:ca:94:56:ca:64:49:cd:
08:17:3f:af:e5:3f:66:78:9b:48:0c:fc:81:e0:a0:
4c:7e:b4:20:5c:a5:8a:b2:47:75:46:8b:bd:8c:0a:
e9:82:c2:ee:e2:12:68:4b:8e:e5:0c:c4:1d:d4:cf:
c9:18:5b:76:f0:21:65:4e:c3:51:c2:54:03:4e:df:
26:6d:bb:2a:7b:06:52:6b:03:d1:4f:d5:3b:ba:69:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:A5:B8:91:DE:C0:A4:02:14:E6:D3:6B:85:C3:67:FD:08:1C:07
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a13::/48
Signature Algorithm: sha256WithRSAEncryption
7c:3c:34:f0:fa:6e:0c:07:da:65:6a:6f:13:e8:53:3e:62:0d:
61:e5:49:b7:0c:56:0c:14:15:6d:32:e3:5c:12:2e:f0:61:e9:
f8:18:8d:6d:da:3c:80:3f:6b:70:23:57:d7:62:bc:b7:96:65:
a5:df:a4:75:6c:1d:f6:a9:7a:3b:46:70:64:db:82:ab:5b:c9:
27:6d:c0:7a:a8:f2:08:26:a2:af:62:98:4a:dc:f1:cf:32:d7:
7f:a3:6c:88:76:bc:64:3a:bd:dc:2f:7a:7c:db:b6:f7:eb:75:
44:ea:36:33:e6:dc:7d:c8:c9:24:f2:be:24:c7:3a:bc:8c:5f:
60:64:85:b2:99:80:3f:59:82:e9:3f:72:bf:0d:e0:6d:87:4b:
ad:25:94:0e:da:2d:82:66:11:95:02:55:a5:60:30:21:f7:57:
a7:49:da:ab:e2:bf:3f:84:ab:8a:be:c8:0b:8c:85:87:2c:3d:
c5:de:13:fb:db:c0:d3:88:29:bb:f5:f4:4d:70:1f:6e:86:02:
4b:d6:1b:0d:3a:dc:6a:a6:0b:41:29:92:18:82:3c:77:54:df:
29:77:39:10:f0:5d:28:1b:45:a9:88:e5:a4:bd:f4:5e:00:f6:
6c:23:5a:71:f9:86:0a:6e:1c:8c:cd:91:49:6e:c1:c7:8d:cb:
d0:f8:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org