Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213045.roa
File: AS213045.roa (raw, json)
Hash identifier: ssu4BC2DOAYv5lK/3eFcKIH4KRQChM5RuPcV4DJ5urw=
Subject key identifier: DF:C6:F0:5E:23:13:CA:69:8C:F8:F1:8D:B8:41:F4:C1:16:AF:D2:09
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6CDB5EEB4029B768150D0E57D7C0A25728B62114
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213045.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 213045
IP address blocks: 2a06:a005:e20::/44 maxlen: 48
2a06:a005:1140::/44 maxlen: 48
2a06:a005:1ef0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:db:5e:eb:40:29:b7:68:15:0d:0e:57:d7:c0:a2:57:28:b6:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=DFC6F05E2313CA698CF8F18DB841F4C116AFD209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:2f:28:60:3c:22:eb:c3:68:11:c1:94:12:
fd:f3:12:d1:a7:3a:72:81:aa:ca:25:82:20:e2:b2:
14:f6:f1:a2:b5:ff:5a:7b:80:98:3b:22:d4:5a:13:
d4:bd:c9:5b:0f:13:74:d4:97:ae:16:13:a9:b7:02:
88:9a:c2:05:47:f5:24:d7:e5:23:23:77:65:20:1e:
df:a1:9b:e7:6a:88:22:43:73:92:4f:e3:08:44:ff:
6b:a6:e2:5b:92:7d:34:c9:97:4c:2a:44:27:2d:01:
f9:8d:07:c1:11:2e:a6:63:7c:5e:c3:57:ed:1b:8f:
05:fb:d7:4a:fb:84:97:2d:ed:bf:66:dd:56:e1:91:
a9:f8:14:74:09:5d:6d:20:4c:6e:45:5a:c3:3e:f3:
a4:6b:45:f2:90:df:f4:3a:2d:ff:07:97:d3:3e:cc:
43:02:3f:c9:ac:5b:e9:bf:4b:4b:77:cb:ed:62:7f:
f0:0a:d0:6f:f0:6b:f6:e4:96:53:02:b5:a1:74:58:
c6:27:f8:9f:d7:81:c4:db:9a:36:3f:fa:98:23:ed:
ca:b1:a2:99:9a:7b:24:83:8a:2f:e4:c7:a5:36:97:
7e:45:c8:42:2f:fc:a7:c7:69:23:f6:7d:ae:8d:88:
3b:83:8a:17:ab:8f:15:92:2e:26:54:6a:c2:8a:df:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C6:F0:5E:23:13:CA:69:8C:F8:F1:8D:B8:41:F4:C1:16:AF:D2:09
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e20::/44
2a06:a005:1140::/44
2a06:a005:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:d6:7b:de:66:54:18:48:e9:dc:bd:90:9d:c0:5c:ad:81:56:
7f:ad:be:9b:4a:54:b6:d2:64:0d:5d:9e:73:03:79:dd:f0:c8:
28:4f:23:62:69:f8:2a:7c:f2:e8:cd:3d:d6:19:7f:3e:f7:f9:
b1:f5:3e:a7:68:b2:56:f9:d6:ed:68:cb:a2:58:80:01:a4:fb:
df:9e:fa:52:61:0b:4a:88:52:a9:5e:fb:41:6a:43:57:d0:9a:
e7:82:4e:72:74:54:29:49:6a:a9:17:0a:ef:e5:b8:7a:a8:c3:
4a:8f:db:40:e0:bf:21:5f:61:2d:90:11:c2:b7:4f:8f:dd:e7:
85:6f:57:5f:1b:d4:17:f3:d1:77:91:b0:44:2a:2e:ec:53:af:
d4:00:94:4b:b2:7d:f0:40:bc:34:54:f1:65:4d:1a:ad:44:56:
0b:99:d1:83:22:d0:b9:27:55:3c:e5:4a:c3:5c:d3:d9:b2:2f:
8f:eb:55:83:8e:0c:5a:9d:96:d8:d4:08:bb:f3:02:51:27:c7:
22:a8:98:a2:f5:76:3b:a9:47:c7:eb:dd:0f:b8:df:a1:25:09:
89:a6:dd:62:be:5c:cf:42:03:3f:bb:1f:cc:e0:11:4c:8d:66:
34:a6:07:c9:0a:2a:83:63:93:df:6c:0a:a6:7d:7f:fd:3a:53:
fe:a1:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org