Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213239.roa
File: AS213239.roa (raw, json)
Hash identifier: h74O4P1YUqrdx/6RGy/U0n+J03KS+sGxXkKJy7vrWEY=
Subject key identifier: E8:60:EC:EC:FB:63:8F:85:C9:97:56:63:DB:E0:00:17:3B:40:A2:1B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 630D6DBF3ADB25A86052400EA5FDB216A3BFF01B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213239.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 213239
IP address blocks: 2a06:a005:d2f::/48 maxlen: 48
2a06:a005:1086::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0d:6d:bf:3a:db:25:a8:60:52:40:0e:a5:fd:b2:16:a3:bf:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=E860ECECFB638F85C9975663DBE000173B40A21B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:b0:40:63:86:5c:24:d9:7c:d0:0f:a3:95:
7b:09:16:6f:0b:8a:6c:f1:0e:c2:74:d3:13:ba:73:
8f:9b:03:19:d6:bc:84:20:0e:b7:a2:a9:45:65:54:
53:f7:34:ae:3c:b2:f3:bf:7e:0e:92:ec:13:5b:4c:
d9:44:c7:66:04:eb:43:0a:4a:d6:fb:cf:50:fe:86:
92:bc:ad:38:69:7f:9a:57:e0:20:24:4f:52:92:fb:
d1:42:2c:bd:e8:b3:c0:5e:9a:59:97:f1:ab:5f:70:
a1:f7:94:b1:f0:3f:08:c0:2d:f3:4c:94:d2:7b:f9:
ef:23:5b:6c:61:79:01:0e:92:c5:dc:36:e3:cc:c5:
1e:ab:5e:c9:83:ae:91:04:85:a7:e8:08:fb:86:87:
14:9e:d7:cd:76:d0:42:c5:ab:c3:35:b1:12:57:ba:
19:39:aa:e6:61:ea:7b:2c:aa:2a:cf:30:ea:18:13:
2d:7f:38:6e:e0:88:e3:d6:28:3a:5a:60:92:0a:77:
9a:68:88:24:6e:f1:6f:04:a2:69:91:e5:75:84:9e:
89:75:ff:f5:aa:ef:e8:52:4d:a4:85:dd:a2:88:03:
46:36:7b:30:63:52:0d:29:7d:a5:4f:9c:85:93:2f:
cb:11:e7:c6:83:9e:39:b8:33:92:4a:ab:31:4e:fb:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:60:EC:EC:FB:63:8F:85:C9:97:56:63:DB:E0:00:17:3B:40:A2:1B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2f::/48
2a06:a005:1086::/48
Signature Algorithm: sha256WithRSAEncryption
65:32:d6:1d:e3:10:9a:9d:80:94:ec:57:55:6f:8a:34:93:0d:
a0:fe:e6:6e:dd:8e:97:58:4c:e6:45:43:28:84:24:4b:1f:34:
8c:8b:f6:48:b5:c1:d6:4c:a8:49:fd:6e:af:5c:0f:09:c9:ad:
f4:2f:8a:ef:df:9d:49:ad:d0:85:4a:a6:84:35:4f:af:c2:b2:
6e:61:bb:13:75:9f:21:b9:fb:64:d2:f0:9e:8b:bd:8b:2c:2c:
0c:d8:73:c5:1a:6b:75:4d:d6:f4:d1:9a:16:28:95:6b:41:6b:
03:ca:f0:60:5b:75:5c:f7:e1:db:c6:5a:fd:cf:15:c5:a7:58:
0c:15:23:ed:dc:44:06:00:07:7e:b4:73:16:af:79:ba:b0:c1:
bd:41:42:53:d9:5e:c9:7a:1f:1e:0a:c9:cf:f6:ad:29:96:3c:
17:e5:4f:5b:e7:af:40:b2:56:f9:fa:b0:93:49:e3:a0:65:b8:
ee:51:ce:00:7e:7e:0c:9a:e1:1f:92:e2:a9:a1:dc:6a:27:9f:
5c:45:d8:b8:c2:bb:5b:5a:21:c4:c4:30:4b:2f:33:38:b7:d6:
08:ce:6c:4b:07:34:2b:a2:68:84:73:89:0d:e6:04:64:a5:b0:
c6:a3:ee:5d:46:45:f6:e1:40:eb:af:43:e2:ce:6c:a6:aa:8a:
f3:f2:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org