Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212164.roa
File: AS212164.roa (raw, json)
Hash identifier: KCsCdagWROmBSHcOMhi7BbCHbSvKJGqrn2kfq+qLk9A=
Subject key identifier: 5F:D5:79:98:5A:77:DF:04:1B:EF:3F:3F:09:D8:3F:27:44:7C:55:51
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 18629BA536418A5EA6F6CD4A35606095A52A1F5E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212164.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 212164
IP address blocks: 2a06:a005:1167::/48 maxlen: 48
2a06:a005:1168::/48 maxlen: 48
2a06:a005:1330::/44 maxlen: 48
2a06:a005:25e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:62:9b:a5:36:41:8a:5e:a6:f6:cd:4a:35:60:60:95:a5:2a:1f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=5FD579985A77DF041BEF3F3F09D83F27447C5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:f6:63:20:6b:01:ce:01:ac:47:80:4b:85:
89:d7:75:8e:65:9a:48:fb:ff:b6:ff:6e:ab:ea:4a:
60:55:d7:d8:0f:17:28:02:38:bd:c3:de:f2:1b:41:
d8:bb:c0:2b:70:31:6f:9b:05:54:8d:1a:b6:91:71:
e3:4f:aa:87:50:80:4c:4a:07:74:ee:f2:97:dc:d2:
25:0b:3e:3f:13:32:97:42:bb:e8:c1:c3:40:83:c1:
1a:b7:b8:42:66:3d:eb:15:9e:f0:47:ae:58:8f:f3:
5e:3a:75:1d:6b:f9:6a:67:09:a5:59:b7:d4:dc:45:
f1:4e:23:6b:82:2a:6a:8a:73:aa:47:41:82:7a:aa:
f1:ce:7d:1e:a8:51:50:06:49:b2:39:4a:a3:01:8e:
56:a6:73:48:f6:2a:a3:09:11:43:df:9b:49:66:c6:
87:8c:d0:b9:63:a1:b6:5a:c9:49:ea:f8:40:f9:b3:
ab:be:55:18:6e:ed:f4:90:fe:cb:87:7b:c0:2c:b4:
4b:7a:1c:b0:f6:70:02:01:06:7f:49:5d:af:a8:0d:
26:0c:17:0f:b3:91:e2:e0:8d:3a:8b:d3:d1:d7:52:
ff:6e:d0:f5:9c:e5:2a:b8:51:10:b6:3b:7c:0d:45:
6b:23:81:d0:b0:b2:93:3e:44:d1:78:a3:1e:a3:2c:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:79:98:5A:77:DF:04:1B:EF:3F:3F:09:D8:3F:27:44:7C:55:51
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1167::-2a06:a005:1168:ffff:ffff:ffff:ffff:ffff
2a06:a005:1330::/44
2a06:a005:25e0::/44
Signature Algorithm: sha256WithRSAEncryption
89:b6:a4:02:99:8a:cf:12:94:83:1f:aa:cd:66:3f:95:1d:8b:
32:26:c4:d9:77:7d:1b:c5:00:3f:02:17:ae:4a:12:cb:86:6e:
ac:57:6b:38:fe:64:92:1b:7c:12:6b:5c:fe:eb:0b:e3:53:3d:
41:7a:62:50:f6:94:4e:1c:54:bb:df:30:2b:35:af:85:2a:e2:
6f:38:31:6b:4b:d4:3e:b5:23:c4:ea:ce:c4:07:63:50:8c:47:
27:77:ef:00:45:ab:4d:9c:e6:9d:35:73:f3:33:9c:09:68:21:
41:b8:0c:24:76:b3:b6:e7:b3:5a:b7:ca:82:7a:18:ae:38:15:
b7:7d:e8:fd:57:ae:10:14:41:09:84:ba:ba:06:83:fc:f6:4f:
88:ad:04:eb:ee:05:e8:82:e2:0a:f8:27:3b:10:de:28:e1:b9:
fb:d8:d6:7f:f6:72:b2:83:0e:eb:96:f0:84:72:57:cd:7e:67:
73:13:f5:36:27:f6:18:ad:5b:97:31:67:a5:b9:da:2d:50:d4:
68:f9:a6:eb:ab:a0:ba:1e:70:4f:7c:60:1d:3a:f9:cc:5f:1c:
64:82:06:76:4e:44:59:a2:82:68:16:8c:45:fb:0a:ca:00:56:
da:6e:b7:12:c3:c4:11:3f:87:68:6a:d1:5a:3b:1d:86:58:8d:
f6:06:99:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org