Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212336.roa
File: AS212336.roa (raw, json)
Hash identifier: QmjNijF8Em5WgHwkFil4WLInHZ1cJla5g26UK+2xack=
Subject key identifier: 39:46:FE:55:02:47:8D:6D:D9:11:38:92:29:81:C1:05:8B:63:D4:10
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 06A7C55ADF03F43094A46C37879250A46B48FF41
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212336.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 212336
IP address blocks: 2a06:a005:5f6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a7:c5:5a:df:03:f4:30:94:a4:6c:37:87:92:50:a4:6b:48:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=3946FE5502478D6DD91138922981C1058B63D410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:11:8d:5b:33:ab:d0:8f:8c:25:30:a1:93:
bc:2c:aa:76:23:f0:19:db:d6:28:17:85:e3:5c:03:
ac:bc:f0:c6:a2:61:fe:5f:c0:54:d9:f3:60:21:78:
5b:3f:87:f6:69:51:ad:da:0d:a0:ba:a6:25:70:21:
c1:e6:b9:ba:9f:44:76:fa:06:f4:db:7b:98:b0:8c:
c3:d5:6c:5d:00:7c:18:5c:38:9a:70:31:8c:90:ae:
e0:73:f3:82:63:80:34:2c:64:4e:62:a8:5c:54:f4:
ad:63:c9:8b:aa:50:5a:31:15:7f:ff:aa:ec:cd:8a:
1b:b4:65:d2:ea:ac:6a:48:cb:46:7d:24:dc:e7:20:
3c:fc:ea:1a:04:45:41:8b:55:28:72:0f:fd:86:03:
ce:56:c0:25:09:db:ab:95:08:f1:d6:27:63:c8:11:
12:79:46:19:73:84:f1:64:b1:d5:fa:4a:39:9e:85:
47:82:1e:ff:60:b9:77:b7:5d:13:00:06:27:a8:2f:
1b:d7:ca:31:db:25:73:56:71:43:e5:c2:35:b5:9f:
cd:a1:d2:a1:0a:a9:24:0d:03:aa:ba:bc:6e:f8:34:
09:49:7a:d8:d3:77:50:ad:7e:ef:a9:e3:50:f1:8f:
e4:7c:a1:ed:90:a6:5e:10:a3:80:10:ae:62:41:ec:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:FE:55:02:47:8D:6D:D9:11:38:92:29:81:C1:05:8B:63:D4:10
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f6::/48
Signature Algorithm: sha256WithRSAEncryption
5f:89:a2:0d:8c:00:c2:e5:e4:34:86:cf:32:22:eb:94:d1:a6:
df:8b:29:f1:b9:be:e3:ec:41:e9:1a:e9:c8:f0:ae:2a:ef:26:
f6:c5:0a:e7:85:9b:51:51:be:25:0c:f8:d2:95:60:b8:c0:43:
8c:6d:a0:af:aa:f4:f1:1d:79:87:f0:8a:c2:db:f2:4d:4d:53:
fa:96:9e:1b:4b:f5:06:57:ed:35:3e:e2:d3:52:90:11:d1:34:
20:8f:7c:ec:70:8b:c2:9e:d2:53:b4:a6:e0:05:25:a4:a3:70:
a9:c0:d9:2c:02:09:1d:47:c2:41:95:a3:96:62:9b:32:20:df:
4f:39:d7:bd:89:b2:9e:4a:05:3b:b1:8d:89:de:40:1c:2e:0f:
90:19:9d:b4:34:a7:5e:99:a7:e9:c5:d9:04:86:64:c1:f8:d1:
d1:4b:2c:42:cf:c8:42:d8:e0:f1:13:39:9d:6d:e9:6d:03:f4:
0b:02:4b:84:f7:16:38:66:02:17:aa:1e:62:bc:75:c8:ac:6d:
2e:58:e8:a0:b4:cc:c0:67:9a:1d:1b:d4:86:98:75:ef:0b:92:
99:b5:6b:b0:ef:85:53:c5:ee:81:72:55:06:7b:63:37:fa:70:
db:dc:9b:a4:3f:54:e6:38:02:bc:c5:84:fd:10:c8:f6:89:0f:
67:55:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org