Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212252.roa
File: AS212252.roa (raw, json)
Hash identifier: Ji9h3CGFOKP0Dd0jiH3XRyNe9zdsEbDFXnhuUJDxrzI=
Subject key identifier: B3:AB:15:22:B0:A3:8C:DD:DD:EF:56:C9:22:DF:76:C2:7C:24:6E:88
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 34CA2AD0D3CEF59E43D01E2DEA6E1F87A28F7CB6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212252.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 212252
IP address blocks: 2a06:a005:2430::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ca:2a:d0:d3:ce:f5:9e:43:d0:1e:2d:ea:6e:1f:87:a2:8f:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=B3AB1522B0A38CDDDDEF56C922DF76C27C246E88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:97:69:f3:57:93:12:a5:6d:ce:39:0b:79:
7f:61:78:fe:23:dd:80:d7:7c:67:55:b1:9f:9c:3c:
de:6e:9e:55:fb:28:f0:ce:59:42:76:49:d5:c4:3e:
57:84:39:2a:72:3b:62:0c:07:fc:f7:68:4c:a9:05:
b3:c3:02:b6:41:27:34:7b:d7:ee:e0:e2:17:a2:e4:
bc:ae:7e:4c:bc:79:e2:b3:70:4d:5b:b3:87:fb:f8:
21:8b:ed:90:6b:6d:66:be:f6:f5:56:7b:d2:42:18:
4e:56:da:18:2f:a3:08:6a:5f:3d:46:9e:a8:53:28:
b5:bc:2a:13:91:6a:c4:29:5a:99:88:27:56:56:31:
37:c0:4e:27:ec:f0:d1:af:c0:16:04:1b:79:48:ce:
0a:02:ea:31:e3:62:c1:7e:ed:e2:ef:1a:1c:23:f3:
42:94:8f:2a:b4:8d:a0:ad:9f:28:72:70:49:d0:7c:
06:93:01:bd:6c:80:5a:69:a2:b1:45:ee:5c:5c:5a:
40:8e:ce:04:c8:97:64:86:2d:f9:0f:b2:69:5e:69:
b5:50:44:9e:9f:93:cc:02:ce:fe:b4:d5:c3:90:9c:
cb:91:ba:6d:e9:48:95:ac:87:22:9e:5b:89:6a:e3:
7e:41:43:22:17:da:a2:ff:c7:59:20:1f:bc:61:6c:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AB:15:22:B0:A3:8C:DD:DD:EF:56:C9:22:DF:76:C2:7C:24:6E:88
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2430::/44
Signature Algorithm: sha256WithRSAEncryption
75:7b:7d:84:32:5e:c2:02:a5:d7:83:3c:1e:f4:5f:1d:52:73:
00:94:ed:a8:bb:6e:9d:b1:c4:69:42:3d:1d:65:5d:1f:66:34:
d1:56:47:7c:83:02:08:97:65:e0:e3:22:b4:26:0a:79:74:66:
1e:ea:88:08:e3:23:f1:61:e0:db:59:46:29:59:98:70:97:7e:
42:2e:2b:bf:21:89:af:c2:21:07:be:5f:8f:f1:52:1d:94:8c:
eb:c2:00:d8:18:ac:18:ba:c4:90:3d:53:b0:fc:e4:c6:a2:4d:
3d:f0:8c:a5:58:4c:2d:7e:39:f7:cb:d1:f0:60:bb:1d:f0:b7:
14:4b:22:d1:66:93:d1:e4:48:4f:ee:70:ca:70:ae:8d:c1:1e:
80:67:10:15:2d:17:1c:eb:59:32:27:dc:22:89:13:fc:24:7c:
98:d7:37:d2:99:ce:0f:ed:82:24:43:18:5d:d7:8c:cf:dd:cc:
9e:b8:4f:04:b2:a3:44:14:98:87:35:f6:26:97:55:30:2f:44:
9c:43:49:46:c2:e0:da:4e:9e:58:99:fd:9a:e2:83:46:20:a5:
cf:55:5d:93:f1:f6:be:80:1b:ca:9d:e7:80:be:63:f9:7f:1d:
16:81:da:13:c7:53:ec:fb:40:35:bb:d5:19:f7:fa:93:c9:2c:
12:a3:6e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org