Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212242.roa
File: AS212242.roa (raw, json)
Hash identifier: uG9ma+FrqW6z+gqUVMFnqJXlqrI6LHSMA3OHaGR3X2s=
Subject key identifier: 9D:AB:01:4E:B5:B7:B5:EB:D6:2E:2A:17:F8:FF:4C:08:D6:B4:47:D1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4AC998F83C739B4CEAFE7629FBE91DBA4D30971E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212242.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 212242
IP address blocks: 2a06:a005:2450::/44 maxlen: 48
2a06:a005:24c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c9:98:f8:3c:73:9b:4c:ea:fe:76:29:fb:e9:1d:ba:4d:30:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=9DAB014EB5B7B5EBD62E2A17F8FF4C08D6B447D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:c1:16:15:4a:df:bb:22:2d:41:8e:14:34:
fc:72:7a:ed:d5:c4:e3:b7:27:ae:1f:d3:94:95:22:
0a:67:1a:42:ba:05:97:c2:50:dc:5c:01:c6:fe:39:
42:e4:8f:a8:8c:59:68:49:3f:5c:7a:33:b7:60:17:
d6:61:27:03:69:0f:72:40:71:5d:8d:13:57:a0:a5:
08:e8:06:1d:d6:31:67:67:ed:83:fb:c2:e4:87:94:
a9:ee:00:de:46:b6:e3:1e:20:4b:26:4f:91:f1:60:
cd:7f:64:77:b7:4e:d6:c9:40:b3:19:64:7f:d5:84:
01:5c:61:81:18:e9:12:72:dd:99:19:30:93:61:f0:
fa:76:e6:e7:b4:26:1b:6a:87:7e:97:1d:9c:b0:4c:
c9:b4:68:73:5e:8e:04:a8:80:81:a2:d0:6e:d5:1c:
95:db:0e:38:93:88:fa:36:87:e4:21:b5:35:bc:e3:
a2:1e:46:5d:44:91:8e:2e:c1:ba:81:7f:1e:38:43:
ed:35:b1:8c:5f:7d:6d:1a:35:6e:36:84:92:6a:89:
fb:1a:13:12:b7:32:ca:69:dd:a1:74:8c:97:99:31:
54:5d:84:f5:b4:42:c8:d9:a3:43:49:c8:f1:dd:6f:
23:30:6b:b2:d3:d3:d3:aa:d6:60:98:3a:f9:e5:fb:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:01:4E:B5:B7:B5:EB:D6:2E:2A:17:F8:FF:4C:08:D6:B4:47:D1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2450::/44
2a06:a005:24c0::/44
Signature Algorithm: sha256WithRSAEncryption
18:aa:b8:57:6b:9c:68:28:e4:a1:dd:1a:43:15:4b:31:39:66:
f4:32:d0:96:3d:79:38:ac:c2:32:0c:cd:2c:12:b5:73:1d:4d:
42:66:77:a9:b5:4a:e6:91:54:80:41:b7:9a:6a:7b:2a:12:b2:
6d:4f:6c:80:60:a7:21:e0:c2:fc:5a:b1:38:13:e1:f8:de:f5:
79:19:03:92:a0:67:e6:a3:6a:a1:23:23:70:74:f8:da:6c:23:
87:7e:17:9d:21:8e:89:ff:b2:6f:d1:9b:ea:68:e0:6f:1a:cb:
f7:b8:8b:8b:54:6c:a8:4f:76:f7:bc:b3:26:89:bf:6f:fc:01:
e0:62:f9:ed:ea:c0:3e:db:d1:c5:69:fa:35:dc:93:ca:a4:bd:
7f:e8:c3:95:11:b5:f7:c9:04:e0:ea:db:eb:39:c7:2f:56:ea:
e5:fb:36:c7:7e:06:07:c3:ec:a3:56:ae:1e:bf:b2:21:d2:09:
78:5e:9b:f7:c8:3e:48:e9:52:b3:b5:33:c6:15:e8:c5:f0:d5:
c2:ed:40:6d:5f:13:c4:ae:b7:64:28:48:bb:58:8b:44:1e:fa:
0f:09:0d:ce:c9:f6:25:c1:fb:f6:8d:b0:5f:72:77:5e:6e:a4:
3c:3a:10:10:c7:67:1b:38:46:5f:20:c6:9b:fd:c0:86:f8:5d:
5f:35:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:11 2025 by rpki-client