Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212983.roa
File: AS212983.roa (raw, json)
Hash identifier: cEM2tjg5wA8AEhRa2r0dgYG+OoOfnWJUff31cmp4QDM=
Subject key identifier: E9:61:CC:FC:B6:D3:1A:7D:42:EA:FD:B0:41:9F:B4:B4:3D:2F:C1:1F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 636F79B63C5568D1E412F1544109FFDEF3C8E7D6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212983.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 212983
IP address blocks: 2a06:a005:13::/48 maxlen: 48
2a06:a005:43e::/48 maxlen: 48
2a06:a005:480::/48 maxlen: 48
2a06:a005:483::/48 maxlen: 48
2a06:a005:a04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6f:79:b6:3c:55:68:d1:e4:12:f1:54:41:09:ff:de:f3:c8:e7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=E961CCFCB6D31A7D42EAFDB0419FB4B43D2FC11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:73:e1:a9:42:f9:bd:1c:67:42:d9:55:4b:
64:64:89:38:91:46:b2:de:a8:db:6b:aa:23:c7:02:
77:81:24:2e:d1:87:e2:ca:79:ec:26:db:3b:06:fa:
53:92:bf:e1:0b:c9:f5:d0:e8:65:62:72:36:53:92:
a1:86:5c:6f:86:72:3f:78:f3:29:c1:75:d7:04:37:
2a:4e:81:e9:9e:c3:b6:e2:68:0a:4f:75:54:e7:99:
6c:07:b9:2a:15:95:dd:5d:c8:65:11:d6:ef:71:d2:
00:6e:33:fa:0b:a6:83:be:29:b4:4e:78:2e:1a:f8:
87:e6:4e:25:1d:d5:3b:4a:d4:f8:31:29:bc:ac:f6:
a1:c6:c1:52:1d:fd:38:a4:11:d5:c7:71:dd:cf:b0:
4c:fc:78:23:59:8f:36:82:06:86:66:9d:7a:c2:3e:
bb:39:ac:be:56:7a:28:80:cd:0d:7a:14:a6:d4:41:
2a:60:84:75:a0:fb:e1:8e:71:eb:05:9e:52:17:68:
64:1e:e8:b8:d2:ad:32:4a:db:52:7e:43:93:94:93:
dc:4d:d4:72:3a:51:37:bb:a2:3d:49:0a:82:e2:fe:
54:48:77:2b:43:17:4e:05:41:fd:2c:6d:51:e2:56:
04:eb:78:05:35:34:32:bf:aa:8d:4c:de:a6:91:5c:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:61:CC:FC:B6:D3:1A:7D:42:EA:FD:B0:41:9F:B4:B4:3D:2F:C1:1F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13::/48
2a06:a005:43e::/48
2a06:a005:480::/48
2a06:a005:483::/48
2a06:a005:a04::/48
Signature Algorithm: sha256WithRSAEncryption
27:72:71:9c:c4:3f:ec:65:9b:1e:e3:74:1d:da:e5:ca:81:53:
8a:ed:02:39:3d:34:38:20:b8:4b:9e:e8:d3:0f:fa:6e:b2:cd:
fe:33:6d:81:05:ce:09:10:79:6e:3e:f8:33:fb:28:00:20:46:
18:38:4a:a2:eb:c3:9b:08:e1:46:09:1c:44:9c:d1:27:f9:ee:
57:e7:b9:c7:be:10:04:4e:0b:89:5f:a9:ce:ef:5b:8e:a8:6d:
d7:fc:ce:ef:3a:a4:6d:da:73:0a:6d:85:5d:3c:6d:3b:d2:10:
81:db:d3:e5:a0:29:ef:eb:75:c2:10:33:ef:ec:5b:d6:10:4e:
d1:2d:7c:36:e9:8b:85:f2:07:40:56:5a:2a:3f:9e:3b:a2:8d:
b9:8a:72:f6:a9:37:38:8f:cc:e2:50:6f:ba:e2:6f:81:f2:49:
bb:ad:c0:fc:46:ef:4f:ce:74:98:e9:a9:f7:57:41:22:30:60:
3e:14:0c:a1:53:32:43:54:0b:89:26:f8:18:c1:16:68:cd:14:
74:bc:56:02:0d:49:49:00:ca:c1:e1:a6:e1:b6:52:c6:80:72:
cf:76:d2:6f:97:0d:6a:14:18:34:aa:c4:19:80:ce:cb:9f:15:
b6:b1:38:d8:f3:45:9b:57:44:20:9d:33:49:ff:e6:94:fd:a0:
90:65:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:47 2025 by rpki-client