Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212173.roa
File: AS212173.roa (raw, json)
Hash identifier: eJ/5KuGq2ZbCQm5LuCgdT2zL9DxJcItt/JHUDJO9MfQ=
Subject key identifier: 29:56:52:21:45:EB:FA:AA:C3:F6:60:36:BD:5C:06:57:5D:39:74:0A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1F7A48B39BEBF42D3BFE860BA032F94448CE011F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212173.roa
Signing time: Mon 02 Jan 2023 02:36:25 +0000
ROA not before: Mon 02 Jan 2023 02:31:25 +0000
ROA not after: Mon 01 Jan 2024 02:36:25 +0000
asID: 212173
IP address blocks: 2a06:a005:24d0::/44 maxlen: 48
2a06:a005:2540::/44 maxlen: 48
2a06:a005:2550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7a:48:b3:9b:eb:f4:2d:3b:fe:86:0b:a0:32:f9:44:48:ce:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 02:31:25 2023 GMT
Not After : Jan 1 02:36:25 2024 GMT
Subject: CN=2956522145EBFAAAC3F66036BD5C06575D39740A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:53:9c:e4:6e:6f:0d:f7:7d:6a:88:38:cf:
97:b2:ad:a1:26:5b:6b:1e:d2:30:f0:a7:bb:af:d1:
53:14:86:bd:b9:7a:8a:74:5b:bd:ca:1d:bd:40:b9:
3f:56:35:11:aa:f8:0d:be:a7:65:24:3e:42:0f:26:
a5:36:a5:2b:38:be:24:75:c5:bf:c8:dd:41:7e:31:
d0:b1:24:d2:05:12:d8:95:9b:b8:a3:53:d6:79:fe:
94:5f:d1:03:6d:9a:57:9f:e7:17:12:7d:b0:75:6f:
ef:5b:de:39:96:d9:4b:b3:2b:cf:55:f6:c1:0e:13:
b3:3f:8b:e4:59:c9:a4:c7:7d:67:ef:ce:48:e6:8c:
9f:f9:e5:b9:60:c9:79:c6:88:ce:3b:5b:da:cf:3a:
17:c7:f4:6c:b6:d2:37:3b:1d:87:4c:d3:c1:6d:12:
55:b0:8b:3f:a6:5c:ed:98:53:3f:13:7a:54:bf:26:
33:d4:92:09:0e:97:92:88:e2:c7:2d:eb:6c:a9:f3:
d4:a0:60:5e:3e:c1:69:d0:40:cc:35:e0:ba:ce:e2:
c0:f1:98:42:75:78:1c:0d:fe:ee:6d:e0:d4:63:cf:
d2:9b:98:b3:68:d7:66:e2:d2:d0:8d:cb:5f:1c:5c:
13:63:59:a0:74:a0:f7:7d:73:1e:ec:0a:7c:1f:d6:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:52:21:45:EB:FA:AA:C3:F6:60:36:BD:5C:06:57:5D:39:74:0A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24d0::/44
2a06:a005:2540::/43
Signature Algorithm: sha256WithRSAEncryption
1c:2d:4f:20:1a:51:4f:e0:02:07:bc:8f:a6:37:d9:55:a2:99:
99:2d:91:f9:d0:5e:41:34:f3:01:2c:ae:96:ce:be:26:70:4b:
72:34:2d:e2:9a:ce:a1:34:24:3c:26:be:3d:2d:0c:7e:52:4a:
95:1c:d5:6a:4f:c8:1f:f4:d8:1f:2d:66:75:bf:e8:73:c0:05:
1d:41:2d:b5:ad:ec:50:dd:43:49:e2:9f:f0:f3:38:be:b8:a1:
0e:ce:07:e7:31:07:91:bc:d8:20:5c:14:33:84:0f:56:11:6b:
be:f4:2d:65:97:c2:37:00:f8:fa:9c:8b:45:06:69:19:61:df:
0e:4f:6d:fe:81:c0:85:b2:f0:ac:42:7d:36:f3:f8:e0:33:62:
12:77:1a:b6:5b:39:65:13:e1:ef:7b:34:f3:38:3d:e9:ba:15:
d7:28:56:15:9e:b0:23:02:e8:73:97:be:4c:f4:88:38:cc:2f:
7c:ce:18:5c:bc:cc:c5:81:f8:95:e3:cd:39:7b:63:f2:cc:36:
30:ef:e2:ad:fb:89:3a:77:0b:00:be:69:12:dd:24:c2:23:92:
be:ac:12:79:95:fd:cd:64:d1:db:35:63:24:aa:a3:d6:7d:61:
ae:37:fb:2e:3b:92:35:cf:e6:73:17:d0:09:53:01:ed:21:18:
78:7e:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:22 2025 by rpki-client