Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212049.roa
File: AS212049.roa (raw, json)
Hash identifier: oA11V6WgO72MApH0vVBiZGHnESTgzWMYS53Prr0yka8=
Subject key identifier: 99:46:5B:CA:8D:53:1C:4E:2D:71:E4:8E:C0:D7:04:B1:9B:28:5D:AF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2157E93E1F6B30FA66580E4A8C41A2E2998E349C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212049.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 212049
IP address blocks: 2a06:a005:1083::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:57:e9:3e:1f:6b:30:fa:66:58:0e:4a:8c:41:a2:e2:99:8e:34:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=99465BCA8D531C4E2D71E48EC0D704B19B285DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:e3:bb:46:30:15:d9:49:09:56:cc:0a:39:
78:f4:6a:89:72:9f:64:d1:18:0e:6f:79:a2:40:da:
9a:cd:c4:fa:9e:8b:fb:d9:f6:57:d2:35:90:40:22:
ad:36:b4:0e:0d:c1:15:2d:a9:09:99:75:ab:91:e0:
32:d6:22:3b:58:89:6f:0e:dc:48:54:0e:55:e4:82:
86:c2:fa:c3:78:a5:e8:28:4c:d4:5b:5d:7d:b6:24:
4b:bd:c7:7a:88:1b:b0:63:21:ea:95:95:bf:e1:91:
de:01:ec:7d:83:25:f4:49:03:38:e3:0c:5f:a7:f0:
e9:28:0f:31:48:09:ae:5a:b5:5b:2f:62:b9:23:69:
58:c5:4b:f3:b8:72:50:41:3f:12:3a:dd:f4:97:72:
85:d0:85:88:d8:e1:da:1a:5f:37:a9:28:56:63:13:
3d:36:18:42:a1:7e:00:b5:65:53:15:88:65:9a:a1:
ed:0e:aa:bb:e9:9d:77:40:6b:d5:f0:19:5f:dd:aa:
42:5c:8e:22:b8:50:b5:b9:36:ad:0c:3d:e0:c0:7d:
7f:43:dd:5b:4f:ed:df:7f:43:ec:a1:eb:8f:69:c5:
8b:14:39:92:d8:ae:ce:ff:85:c0:2b:0e:23:23:a1:
a7:82:33:ce:cf:69:99:01:5f:66:92:9d:98:f8:38:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:46:5B:CA:8D:53:1C:4E:2D:71:E4:8E:C0:D7:04:B1:9B:28:5D:AF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1083::/48
Signature Algorithm: sha256WithRSAEncryption
77:0a:15:be:31:2a:e6:72:fa:94:27:95:7e:45:7c:90:6a:31:
3e:bb:88:84:bf:2c:18:74:60:59:ff:71:81:27:47:79:66:a7:
36:e5:b4:88:ba:03:92:49:44:e3:5a:46:15:e7:53:2e:6c:d4:
5b:50:71:9f:f9:88:3f:63:88:04:30:d1:91:47:66:f7:ac:89:
c4:eb:50:73:f7:01:eb:4e:65:da:76:e1:ca:f5:05:e3:f7:8c:
fa:ac:a5:17:4c:22:10:0b:8f:de:b9:bd:97:f8:7c:c8:7e:3c:
48:f4:16:57:ed:79:74:01:3d:e0:b8:c8:98:00:05:f2:e9:a9:
29:59:3f:68:f6:52:17:41:2f:ea:26:11:f4:28:9d:45:f2:1e:
fe:de:3f:99:1e:1c:6a:01:3f:83:d7:28:14:d5:cf:81:e1:ec:
e3:d3:32:5a:14:83:ef:5f:fb:5b:68:a6:46:c7:bb:6a:8e:68:
31:2d:14:ef:ab:b5:d1:8e:3e:d8:82:21:7d:fb:84:f5:2a:ac:
e7:6a:67:e1:92:66:f9:4c:e7:14:f6:77:ce:d5:69:78:60:62:
52:87:53:50:8b:16:77:45:e0:5d:b6:4c:52:fc:44:98:08:8f:
f4:e1:38:dc:fc:24:fc:7c:9e:d3:78:4c:1c:ea:66:ca:6f:12:
10:34:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org