Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: yHgAIzExMcLMz3WBjeToyRGk8/DQuCoSo3dAqdaR14E=
Subject key identifier: B4:9F:27:4F:CD:1F:36:E8:0D:33:A3:6A:61:A7:25:50:3E:54:D8:88
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6DC200960B131311E0FE2E8C37632DC8243D4DA1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212895.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 212895
IP address blocks: 2a06:a005:5d0::/44 maxlen: 48
2a06:a005:6d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c2:00:96:0b:13:13:11:e0:fe:2e:8c:37:63:2d:c8:24:3d:4d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=B49F274FCD1F36E80D33A36A61A725503E54D888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:72:79:0b:56:2e:06:57:c8:b2:1e:1d:61:
e8:c6:a7:eb:29:ad:f0:47:ee:92:da:de:6e:6d:46:
3b:05:15:87:2e:c6:3a:33:9d:24:0b:23:5a:da:c4:
5b:7b:b8:6a:70:c9:a3:e0:70:b6:c9:db:3d:7e:e5:
65:96:ef:8d:e7:fd:e7:ce:d7:85:0a:13:e0:64:1d:
1b:53:10:b8:9b:16:a6:d5:29:58:4d:de:1f:6b:30:
ef:54:9d:dc:d4:6a:e3:09:b0:d7:1f:63:2d:90:e0:
14:f0:7f:9f:af:84:bd:37:af:f0:08:57:41:eb:a8:
ea:02:84:7c:18:37:47:71:b8:31:d2:fc:ad:33:14:
53:10:e5:dd:0c:d0:4e:a7:75:bd:9f:c6:52:1e:1a:
b7:91:1e:43:88:6a:64:9f:f2:96:ba:81:d6:03:a5:
bc:a5:ff:f4:a3:6e:d8:58:a8:00:fb:97:d1:74:39:
3a:9f:e7:d2:14:40:41:70:23:fe:7b:a6:bd:41:c9:
60:0b:6a:8d:33:45:8d:63:a9:07:28:77:73:01:36:
77:e7:ef:6c:43:17:ee:d2:31:d8:68:36:f4:93:80:
96:33:10:7d:48:21:3b:23:c9:e3:45:5d:b1:56:57:
6e:bc:75:68:be:bc:3d:6b:fb:dd:9c:54:82:cc:a2:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:27:4F:CD:1F:36:E8:0D:33:A3:6A:61:A7:25:50:3E:54:D8:88
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5d0::/44
2a06:a005:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
43:b3:c7:18:81:8b:b5:22:fe:e1:38:d1:7e:9e:30:bc:e1:08:
66:f9:f0:12:7a:3c:a2:fa:1f:02:2b:4c:c3:e5:a7:bb:73:be:
94:cf:52:82:dc:fe:11:eb:1f:08:ed:c4:b3:58:8a:6b:0b:ed:
a3:27:d6:ad:04:ac:85:e6:22:24:3d:5a:20:64:89:c1:28:8c:
80:5c:ab:07:92:0b:cf:f6:3c:1c:ae:0a:a2:75:0d:2d:da:fc:
b8:66:d7:17:37:c1:16:4c:7a:90:88:1f:b8:5c:4a:c3:41:ec:
63:dd:04:c6:0a:84:e7:0d:44:72:1b:21:bc:3e:a2:8b:5e:0c:
3b:74:7b:0b:87:6f:e0:26:50:20:39:07:2e:a4:d5:de:ef:6c:
2b:a9:71:c7:b8:0a:46:87:ee:20:aa:3e:0c:20:11:63:44:90:
95:56:b9:cb:34:d9:c4:6f:af:7c:c0:c7:80:5f:9a:f0:cd:7c:
41:6d:4c:5f:9b:dd:28:8c:e7:7c:95:38:99:c4:16:f9:d5:6a:
e0:67:70:04:46:8a:b3:d4:fd:88:52:90:6b:87:ba:fd:91:a5:
ad:67:f5:be:d6:32:8c:08:c6:b5:48:ef:5d:bc:8c:aa:16:57:
05:a3:6b:38:dd:f2:a8:31:3d:75:34:2d:aa:68:78:39:45:da:
22:6f:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org