Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212995.roa
File: AS212995.roa (raw, json)
Hash identifier: +2FDQqngyJkRMhG+efJmg3co7ovQX+GabAYKRrHQtqs=
Subject key identifier: A5:34:96:CD:2A:7E:8C:94:15:C1:C6:E5:94:89:E2:56:CF:F1:AF:1F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 60DABB96ACEDD415D2207FEC80501B99CE845B01
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212995.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 212995
IP address blocks: 2a06:a005:4a0::/44 maxlen: 48
2a06:a005:cd0::/44 maxlen: 48
2a06:a005:d10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:da:bb:96:ac:ed:d4:15:d2:20:7f:ec:80:50:1b:99:ce:84:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=A53496CD2A7E8C9415C1C6E59489E256CFF1AF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:ec:da:9c:5d:1c:7d:41:3d:71:98:5a:5a:
dd:a7:17:d1:79:24:c6:0f:57:6a:62:86:90:5f:33:
b4:29:3d:07:ec:e6:c3:0a:fb:a7:e4:ce:b4:db:3c:
bb:d7:ce:2b:ae:9f:68:c2:1c:59:5e:50:ee:07:00:
8f:a3:a6:20:69:be:49:86:a8:3a:b1:d4:57:05:f3:
0a:6d:c7:e1:1e:0b:c9:14:a1:1e:74:39:65:85:27:
58:83:9c:77:0b:1e:58:6b:6d:b8:f9:15:af:7a:78:
16:5a:c9:18:50:bf:b1:8a:cb:dd:68:ac:76:50:61:
e6:21:4d:e2:eb:ec:4c:c4:da:a4:ac:93:4b:1d:ba:
a5:3e:e1:ff:b9:a5:92:46:d2:0d:72:ec:2e:63:f5:
f6:9e:8b:95:ae:e7:43:d8:41:16:c4:dd:43:2a:d1:
1e:b4:f0:b0:4d:37:86:f6:c7:28:8d:6e:0e:6e:b0:
75:eb:cc:0a:50:62:49:be:67:bb:50:b1:ab:bb:5c:
4f:f6:d0:5b:47:9e:6e:33:68:f9:63:99:a6:64:ab:
41:4b:94:94:c6:44:c6:fb:29:be:38:af:0b:2d:be:
78:c0:f4:59:2d:09:5a:45:f2:60:29:c3:ae:37:0c:
61:f0:6b:77:a6:b4:3c:31:36:bc:ca:1d:7a:ce:85:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:96:CD:2A:7E:8C:94:15:C1:C6:E5:94:89:E2:56:CF:F1:AF:1F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4a0::/44
2a06:a005:cd0::/44
2a06:a005:d10::/44
Signature Algorithm: sha256WithRSAEncryption
73:3e:43:13:a4:2b:bd:86:3f:3b:09:51:a5:4c:98:2a:81:4b:
ab:34:57:e9:63:59:72:ad:d2:c8:d5:c0:95:b1:eb:cc:eb:40:
0a:2e:09:d0:55:52:70:a9:67:40:45:a2:35:51:e2:75:fe:72:
8b:e2:d6:52:5a:52:dd:72:4c:e1:ae:0f:2a:89:e1:ca:aa:f3:
4f:79:47:47:06:7d:ff:11:6d:8e:9d:24:44:ac:ed:27:59:84:
fc:0c:93:01:03:f6:f5:9c:d7:36:f9:1b:a0:7e:97:47:82:f3:
87:2b:cc:7b:74:16:1c:0a:91:4e:59:b6:78:3f:0f:d6:f5:58:
d2:9f:ea:91:70:4f:da:77:7a:eb:c3:fb:15:1e:37:46:75:a8:
4b:9c:5f:69:45:95:b3:f4:ba:58:82:f9:44:97:3c:53:34:6d:
71:b1:3e:66:73:d2:00:29:dc:0d:e9:07:f5:8a:ce:b5:60:cb:
d3:cd:b8:52:e5:6a:61:1b:fc:d5:b5:80:f8:c2:c2:6d:05:49:
b6:57:8a:39:46:ce:aa:e4:8c:41:ff:23:a9:e7:9a:e4:7f:8d:
33:d3:6c:4f:8d:c2:a8:5c:f6:ea:9a:f7:e7:07:76:87:39:0d:
f6:fe:fa:8d:f8:b5:67:cd:9a:3c:f0:44:b6:72:2d:64:de:03:
31:8d:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org