Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212948.roa
File: AS212948.roa (raw, json)
Hash identifier: hQhBE0+hOsFaZJ6/tfmKdwfPR32+HNzcNrYjQYiLojM=
Subject key identifier: 36:5D:20:14:51:B1:2C:E1:B0:C5:0F:8D:F1:AB:D9:5A:FE:96:5C:F5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4CB533B54BFB14AE2D6B5B0445716A455F0ADEEF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212948.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 212948
IP address blocks: 2a06:a005:1509::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:33:b5:4b:fb:14:ae:2d:6b:5b:04:45:71:6a:45:5f:0a:de:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=365D201451B12CE1B0C50F8DF1ABD95AFE965CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:f4:32:fa:bb:29:71:ba:6b:f0:dc:a4:5d:
18:c5:98:e7:2a:19:d2:69:f7:03:42:c6:7a:6c:ed:
75:bc:72:57:41:13:e1:da:e8:22:38:9b:a3:a5:7b:
db:a3:62:2d:b3:21:97:9c:a2:b6:f6:96:37:d0:c2:
a8:50:6c:2e:db:90:68:7b:8b:8c:55:fc:bb:10:a8:
73:65:ab:29:fd:27:bf:55:3e:79:91:fe:6f:6b:30:
79:4b:0f:41:cf:39:72:4b:e1:d0:75:fa:05:fa:c0:
ec:ab:b5:61:0e:42:5f:8f:fb:55:91:b4:c0:e2:16:
ce:23:bc:55:82:e4:d8:0d:d7:5f:38:ff:77:0b:f3:
aa:b2:32:e4:a0:a9:e8:55:6a:f9:f1:02:30:ee:b9:
78:28:68:5e:2e:61:30:ec:4b:44:95:b3:3c:2f:d8:
ad:94:b9:d1:39:19:b2:e3:59:d8:de:7e:56:9e:a4:
c1:e0:75:65:66:96:66:22:94:88:5b:ff:ec:7c:ea:
c1:43:34:65:12:57:7d:13:25:5e:d1:0e:02:0f:c3:
88:5f:14:51:fd:c7:56:c5:40:ae:97:e0:9d:40:2a:
ca:8a:7d:da:d9:41:1c:22:a0:a2:99:07:35:79:d6:
5c:e1:49:15:a0:8f:32:54:85:cd:04:d4:1c:3b:8a:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:20:14:51:B1:2C:E1:B0:C5:0F:8D:F1:AB:D9:5A:FE:96:5C:F5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1509::/48
Signature Algorithm: sha256WithRSAEncryption
76:fc:89:1a:5c:d6:0a:34:85:3c:61:ac:8c:14:a5:36:3f:dc:
be:23:85:75:4c:7e:06:bd:3c:60:f7:1a:ce:48:69:af:78:ea:
ae:24:88:9e:b2:2d:8a:81:08:1c:a8:d5:bd:cb:38:df:38:3d:
2b:82:40:7a:b6:82:b0:d1:1d:76:db:aa:2c:3e:ad:86:6c:05:
28:22:8c:3d:4c:11:17:31:db:bb:1b:82:88:95:3a:40:ab:0e:
6a:93:aa:3c:7a:f1:71:dd:8f:9b:a5:d9:75:da:33:69:55:18:
4d:81:4e:9a:cd:7d:77:ff:c7:15:17:84:de:c1:87:47:28:81:
df:c3:d5:da:0f:01:35:bb:eb:b1:85:fd:55:7c:fa:c9:32:62:
30:bd:d9:e6:cc:c9:df:97:63:13:b0:73:d5:1f:92:c9:22:78:
d9:59:d5:a9:e2:8a:51:fa:49:52:38:3c:bb:3c:37:48:20:3c:
79:8b:8c:c5:7e:53:ef:72:70:a9:e9:8f:45:52:91:da:24:e9:
77:ef:38:0d:c2:7c:d7:96:87:8f:11:e5:ab:c7:cd:87:3d:0a:
ad:06:97:1b:e0:8f:1f:1b:47:25:10:82:2c:5e:d4:45:41:e0:
64:52:1f:bb:38:3c:e6:7f:70:bf:d3:9a:6d:ef:8f:2e:c8:c3:
c5:7a:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:34:02 2025 by rpki-client