Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212359.roa
File: AS212359.roa (raw, json)
Hash identifier: qd2SZbP/V7AYc9wPBnN5oHU0lnOTRTxb15BQ8bH6hE0=
Subject key identifier: DB:01:A8:D9:B4:4F:AC:AC:4C:93:FB:C6:83:3C:F7:63:D0:68:BA:F9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 135F86320C02D1BC82B4AB1E4ECAF8973CEECBC6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212359.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 212359
IP address blocks: 2a06:a005:1c0::/44 maxlen: 48
2a06:a005:1d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:86:32:0c:02:d1:bc:82:b4:ab:1e:4e:ca:f8:97:3c:ee:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=DB01A8D9B44FACAC4C93FBC6833CF763D068BAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:79:95:8e:af:15:8e:bb:b4:34:c3:8b:c5:
c1:b9:2f:f8:e7:e2:6d:93:79:4d:95:49:24:f1:b8:
e9:f1:ed:b0:3c:24:9a:fe:b0:22:10:f4:fc:dc:d2:
fe:16:d9:75:6c:d1:be:43:fb:41:ee:2e:b6:d3:0a:
54:71:1b:6a:4c:db:ed:e4:47:2b:34:a0:f2:6a:4b:
67:6a:78:83:f0:df:ad:2b:88:65:60:97:69:aa:f8:
2b:f9:bb:f3:3d:15:2d:7b:6a:fa:1e:7a:52:ae:db:
3a:3e:d2:71:6e:cf:25:3a:9e:30:5b:a6:f3:97:21:
89:42:6a:b3:1d:74:71:d4:cb:a1:bd:0f:3a:4c:56:
25:c5:04:5a:2d:e9:7f:c1:86:91:b1:29:1a:97:8a:
38:5e:cd:19:38:10:4c:18:85:78:f9:6d:a6:c7:39:
06:99:6b:3b:d2:9a:61:7a:59:7f:2c:10:d1:7f:f3:
9b:a7:06:05:41:cf:a4:11:b2:13:57:ee:e5:ae:a6:
f3:86:07:8e:6e:b6:a5:e8:e7:ed:44:7b:ea:92:c5:
ef:8d:8e:08:8e:48:45:3b:0c:02:f3:b7:b9:06:e4:
11:2e:d0:56:a4:2b:af:7b:2f:9b:12:12:bb:80:46:
65:af:8f:23:ac:13:e6:c6:88:e6:fa:4e:86:04:f4:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:A8:D9:B4:4F:AC:AC:4C:93:FB:C6:83:3C:F7:63:D0:68:BA:F9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c0::/43
Signature Algorithm: sha256WithRSAEncryption
02:42:83:44:ad:e2:95:1e:e1:1f:d6:82:6f:3b:2d:ee:1e:af:
9d:e9:f3:bd:e5:70:32:3a:e1:ab:72:08:73:24:bc:14:b0:6d:
48:b2:8e:61:7b:1b:a4:47:08:d1:40:11:f7:94:78:55:c3:a1:
2b:d2:2b:29:cf:21:34:5c:fe:8e:12:d0:4d:93:eb:e1:d2:b5:
6d:43:be:e5:8b:ff:f3:b1:c9:86:f3:f9:6a:61:f6:3a:78:a5:
16:0f:a2:f0:86:c0:35:ce:c1:ba:0b:d3:e1:ff:2a:e0:30:08:
6c:e2:cc:bb:88:b5:19:41:6f:45:41:2a:e2:03:0d:10:5a:69:
e6:c9:c6:1e:80:59:f4:78:5b:13:4e:c3:ab:67:80:dd:1c:2d:
48:bf:f4:7b:86:1f:ed:ae:a4:c7:9e:51:5f:2a:71:92:82:80:
36:3f:9b:6c:d8:26:34:8a:05:6b:5e:4b:43:76:77:eb:b9:ac:
04:a1:32:af:80:7c:d3:15:9d:4d:75:c1:58:6c:1c:67:18:92:
17:0c:a5:eb:9f:77:9c:de:c2:dd:32:8a:b6:15:63:52:eb:a2:
49:d4:08:70:c9:d2:71:44:79:09:84:9b:4e:49:07:90:3a:05:
e9:45:94:1e:9a:85:c0:db:17:96:f0:7a:11:7c:13:1f:f1:37:
8e:7d:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org