Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: EP3bMU/wxLcOPoG+FtGKN102rDksZ1cJ2B1n8HRUTMw=
Subject key identifier: 52:90:97:2C:F1:44:31:22:87:18:10:7A:9D:C8:5B:89:7A:0E:16:C5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 188EB0D12475460980D42EF6236F27A87E1795AD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213036.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 213036
IP address blocks: 2a06:a005:5a3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8e:b0:d1:24:75:46:09:80:d4:2e:f6:23:6f:27:a8:7e:17:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=5290972CF14431228718107A9DC85B897A0E16C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:84:60:27:99:85:53:5c:37:11:bb:2a:12:
9b:60:a6:66:af:3b:82:34:a0:ca:78:87:64:77:a6:
fd:b0:24:1f:00:61:9e:59:ea:71:28:22:b8:f1:f0:
3c:ce:25:79:eb:91:bb:de:41:06:e5:05:f5:41:bd:
d8:aa:eb:eb:12:f5:c0:1d:9e:16:b9:88:ae:f5:85:
05:b3:68:e7:10:6d:1b:6c:4e:fb:cb:60:25:6d:31:
a8:44:91:45:21:3c:39:09:4e:4c:ae:7d:70:cc:73:
ac:14:5e:46:05:bf:28:65:67:01:1b:ee:52:87:cd:
c6:4f:d9:d7:21:73:e9:80:bc:48:40:9f:5e:36:0e:
6f:72:58:b6:4a:fe:77:3f:3e:d6:f1:1c:b1:6d:43:
4e:a8:78:10:e8:bc:ad:e5:52:6c:2e:d4:86:69:35:
6f:ee:0c:bf:a9:50:42:c6:45:e9:c7:c5:fc:85:78:
11:52:87:e1:5e:13:66:be:e4:18:f7:44:a4:f2:5e:
e5:f2:db:ad:dd:da:bc:2c:10:b0:02:8d:81:b3:94:
d1:73:b1:e6:cf:16:ef:18:8d:80:25:f3:c1:6b:0c:
87:71:5c:3f:8e:bb:d6:e1:0b:f4:50:5c:dc:c7:49:
ad:17:f0:74:0a:64:c8:89:94:51:17:89:d3:04:04:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:90:97:2C:F1:44:31:22:87:18:10:7A:9D:C8:5B:89:7A:0E:16:C5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a3::/48
Signature Algorithm: sha256WithRSAEncryption
95:a1:ff:fc:36:e5:cf:32:cf:c9:fd:54:3a:bc:4d:58:87:75:
c0:30:7b:1f:0f:f5:a2:97:e4:1c:42:9e:4a:85:dc:94:1d:88:
21:95:d7:37:d5:69:80:c0:d2:03:e9:8c:fa:a3:0d:f7:74:46:
fd:cc:b5:56:44:29:d2:2f:c0:b9:a8:8a:41:b3:6f:5a:23:78:
58:a2:e2:6c:86:68:b4:ee:c7:11:2a:bc:ef:4b:81:dc:84:62:
de:4d:ad:aa:d8:0d:bf:ce:0c:96:9d:ec:c0:e7:3c:36:18:99:
18:c9:b4:ae:f4:7f:54:e3:83:cf:97:d7:53:9b:f6:dc:91:be:
7c:07:a2:b3:9b:6e:74:96:3e:5d:57:0e:45:50:6c:33:db:cb:
f5:06:0a:85:bc:3f:1a:3a:2f:67:b8:55:bf:21:42:70:d4:36:
3e:a1:ad:2b:bc:30:3a:89:0d:99:cf:f1:ae:b5:a3:51:39:58:
af:b5:4e:df:e2:fa:60:99:73:83:1f:28:0d:1f:e3:19:90:0c:
f2:fc:07:a6:a2:19:a5:d1:12:04:6b:14:4e:a9:6c:5f:09:95:
04:c3:5a:7c:1c:5e:c1:8e:f0:a0:13:d8:1d:28:32:c6:06:12:
17:0d:cb:ff:e9:c9:5a:d9:b2:16:8f:0d:01:60:0c:9f:ef:98:
61:87:d0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org