Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212360.roa
File: AS212360.roa (raw, json)
Hash identifier: sHVBUSkk+rBSMQ7SH5yW4N+IVJayzNMTdSHNfIHVT0E=
Subject key identifier: 43:3E:0E:25:A9:97:73:B6:3C:65:0E:BF:C3:97:CC:D2:51:D8:E1:2F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 604382211915052C45B6ED819F5269183339AE48
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212360.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 212360
IP address blocks: 2a06:a005:180::/44 maxlen: 48
2a06:a005:1e0::/44 maxlen: 48
2a06:a005:1f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:43:82:21:19:15:05:2c:45:b6:ed:81:9f:52:69:18:33:39:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=433E0E25A99773B63C650EBFC397CCD251D8E12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:86:27:2b:cb:d3:16:42:37:03:2a:90:fb:
a6:27:8a:ab:d9:d7:8b:49:9c:95:f5:e8:0a:55:85:
a0:a8:f0:41:54:b9:84:f5:5d:cc:eb:58:27:72:42:
1f:80:c4:88:08:71:0b:fb:9f:33:be:9b:8a:56:68:
31:c8:7e:eb:14:ef:fa:47:cb:24:5d:79:75:9a:33:
7c:5b:b5:1f:f6:68:fe:7c:58:97:6e:ec:8e:f0:6e:
f3:20:be:1b:dd:1d:38:ad:0d:c8:22:95:d0:80:a8:
11:c0:4a:87:0f:58:c1:c9:ef:e6:dd:00:ab:35:42:
39:03:d8:f5:f1:03:5c:b7:e2:cb:a0:47:19:96:0a:
79:ac:f4:69:54:af:45:be:c5:83:6a:76:9f:84:48:
79:b8:c4:49:f9:08:07:cc:11:b9:2c:b0:f4:1a:d0:
8c:d2:34:a2:cb:cf:b8:0f:fa:1b:f0:5b:35:1b:0a:
52:2b:85:f2:ff:e9:5f:dd:3d:91:80:24:8b:e3:7a:
49:a6:a4:1f:c7:79:3a:51:ba:8a:a5:bf:6e:bc:07:
f5:ff:0c:66:7a:c3:09:4a:70:56:c0:ae:39:20:b5:
d1:de:5b:6c:91:ca:8d:35:d8:7c:7e:44:9b:3c:05:
84:9b:e4:a9:78:b4:92:ce:d8:05:87:e6:e2:85:56:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:0E:25:A9:97:73:B6:3C:65:0E:BF:C3:97:CC:D2:51:D8:E1:2F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180::/44
2a06:a005:1e0::/43
Signature Algorithm: sha256WithRSAEncryption
39:8b:9f:fe:0a:2a:b6:e1:2b:5d:0a:91:5a:04:32:41:6f:82:
1b:10:2a:6e:ed:bd:1e:ad:d3:1d:d6:93:72:82:8a:bf:71:a5:
9f:9c:a0:f7:b6:8f:92:8d:be:3b:b4:43:5c:5f:69:05:3b:26:
8d:ab:08:16:b7:96:a1:3e:22:7e:fa:69:74:85:66:73:30:37:
c8:70:50:5b:62:e7:6d:11:c6:5e:f5:9a:74:cf:ff:05:5e:3c:
d3:26:fc:27:38:99:13:6b:e5:23:cc:f2:be:6a:40:6b:d7:49:
c7:c5:5d:05:a9:15:96:d2:b0:1d:b6:7b:1d:b3:ad:9a:fa:03:
94:e7:72:bb:6f:4a:c4:52:2f:2a:11:05:d5:38:3b:3f:b7:d2:
f8:c2:07:3f:aa:41:a7:22:2c:e5:94:87:72:11:b4:3e:39:81:
e3:f2:f0:4c:09:e6:9b:41:b3:7d:2c:af:c2:73:f6:fa:cc:8b:
c0:38:8e:61:2e:ac:ca:06:ae:0b:a1:12:e0:c9:de:51:5e:91:
c5:d0:d6:6c:a7:e7:14:9a:a6:13:b4:3f:a2:ea:cf:93:c9:0d:
d4:3d:51:b1:90:e3:0f:d8:f5:be:4b:4e:0c:e3:10:7b:dc:06:
a9:11:ff:bb:ef:7b:21:73:de:6c:57:44:26:d1:6c:24:ae:f9:
63:48:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org