Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212789.roa
File: AS212789.roa (raw, json)
Hash identifier: BfADerC3GHHMA6DxfESE33vp57X/IrhJ/Q8UHKdvYeA=
Subject key identifier: 5A:E5:65:19:11:96:14:E2:18:C2:B2:2C:B2:B0:74:42:5D:83:86:20
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5CB71C676FFA07B2B7A19D450252EC0BA943352D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212789.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 212789
IP address blocks: 2a06:a005:1ca0::/44 maxlen: 48
2a06:a005:1cb0::/44 maxlen: 48
2a06:a005:1cc0::/44 maxlen: 48
2a06:a005:1cd0::/44 maxlen: 48
2a06:a005:1ce0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b7:1c:67:6f:fa:07:b2:b7:a1:9d:45:02:52:ec:0b:a9:43:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=5AE56519119614E218C2B22CB2B074425D838620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:a2:be:3a:4d:c7:9b:bf:9f:f3:b0:ea:be:
55:c4:c5:30:6a:4e:55:70:ec:91:46:b6:9d:7b:d8:
0d:46:72:bd:5a:f2:e7:24:67:72:3f:9a:52:e4:81:
12:7e:80:2d:0b:f7:8f:d5:32:5e:2e:ef:53:87:14:
52:02:1a:72:f9:92:29:2a:0f:26:79:a2:e4:09:ff:
83:b9:a1:96:10:6f:a7:35:2c:6c:dc:3d:00:bd:0b:
27:41:db:53:0c:54:7d:c9:b4:8f:88:aa:14:1d:5d:
3f:80:fd:ec:cd:1c:cf:e6:3c:ae:fd:e2:07:cb:86:
5e:e5:59:14:60:f7:d6:fe:6f:6b:1c:72:d9:99:3d:
35:f4:f3:b9:31:64:02:c5:9d:8b:2c:c2:79:9e:03:
75:8d:75:4b:fb:4b:8d:91:a2:4e:85:8f:30:d4:eb:
68:5e:85:39:f7:7e:bf:93:0e:be:23:62:b1:e3:12:
aa:1d:0c:96:a3:41:7e:cc:f6:fd:b5:eb:7b:de:42:
46:8c:6c:fb:72:23:27:be:64:cf:15:19:4b:aa:3f:
18:66:9b:c9:cc:7d:f4:cc:a8:b6:bd:bb:00:a4:0a:
68:98:fd:46:94:15:da:e7:83:ba:69:8a:ef:f0:ff:
e5:82:ff:8a:a7:cf:d8:0a:50:15:37:e4:a1:2a:36:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:65:19:11:96:14:E2:18:C2:B2:2C:B2:B0:74:42:5D:83:86:20
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ca0::-2a06:a005:1cef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:83:63:52:d8:e4:5f:f9:90:b3:10:b5:ef:0e:b9:98:8e:3a:
0c:2c:50:8e:19:bb:03:62:0a:93:b8:d8:25:da:81:e2:2d:a4:
79:d5:ae:f7:aa:3f:99:9b:9a:eb:43:a4:39:2a:87:38:4d:0d:
b0:b9:16:9b:e6:72:4f:32:c2:77:d2:34:86:9b:8d:20:52:a7:
fb:c2:82:5e:75:11:dd:d3:ad:e9:86:a1:64:62:58:37:9b:06:
84:a4:94:6f:71:30:f7:4c:fb:83:2d:b6:65:10:98:70:f5:3d:
c3:17:7f:11:98:3b:18:f4:ff:ae:3b:85:1f:81:d7:dd:86:e5:
e5:b0:74:61:3f:33:63:b4:35:56:1e:a5:6b:d1:4d:f3:17:6e:
3e:fb:3d:52:df:71:92:48:6f:3a:ef:7a:6b:3d:fe:59:61:fe:
a5:c9:c2:e6:69:bb:d1:a7:20:8c:1a:ce:ab:02:e3:91:37:14:
b4:7e:3a:dc:a7:d9:7f:0d:ca:f2:9e:4c:1e:9d:6b:22:7f:64:
14:fe:fa:43:97:e0:3c:49:04:f4:ae:d5:a2:b7:d0:3f:a3:f1:
fe:d5:b8:1d:94:89:0e:70:10:01:a2:42:4d:54:f3:b6:a1:ed:
d9:f6:ab:4f:e1:b6:f5:2c:06:9a:b4:49:fa:75:88:5f:b6:33:
13:76:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org