Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213286.roa
File: AS213286.roa (raw, json)
Hash identifier: FgOmBcIWVfz3bePHoyYW0tj70COXhFp7nqDjLefQZRU=
Subject key identifier: 6F:78:22:5C:54:BA:FB:E0:AF:CB:B0:04:48:26:8D:F5:19:D6:31:59
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 674E0D0D26FCA2F8241956FED11EDE2E3E921B94
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213286.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 213286
IP address blocks: 2a06:a005:17::/48 maxlen: 48
2a06:a005:1e::/48 maxlen: 48
2a06:a005:852::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4e:0d:0d:26:fc:a2:f8:24:19:56:fe:d1:1e:de:2e:3e:92:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=6F78225C54BAFBE0AFCBB00448268DF519D63159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:e9:1f:e4:4c:25:4b:ff:49:39:78:72:01:
3c:ac:a5:1e:2e:c5:ef:8f:a5:4e:e3:63:ad:b4:be:
9a:a5:eb:22:a4:3d:d8:76:eb:02:42:0e:d2:c2:5c:
a2:2e:6a:b8:ab:3b:a0:95:c8:52:36:d9:40:b1:40:
c2:35:59:84:e9:2f:9b:f3:16:11:c4:75:09:40:43:
e5:90:69:86:24:07:ca:33:ad:53:49:5b:28:66:28:
58:c0:eb:2f:ee:a4:06:5c:f0:fb:da:d9:f0:99:29:
ad:66:cc:12:e5:fe:d9:a8:c9:4b:19:04:a0:fe:17:
54:ea:53:a6:69:a7:83:d3:1c:f9:87:d8:78:c0:a5:
9e:65:37:af:f3:ba:6e:60:27:ca:43:ea:c0:13:c0:
dd:27:9d:bc:b0:1a:c4:c8:5b:be:5b:ec:c9:8d:cb:
fb:b8:d6:66:92:c6:a0:9d:e8:bd:c5:d4:78:41:ae:
e4:94:3d:14:46:ee:31:de:d1:71:18:d1:47:1f:e5:
65:2d:8b:5c:53:45:da:f5:86:3e:2b:a6:16:44:3d:
95:6b:f0:13:98:1a:38:bb:34:13:b1:65:c0:a1:df:
3b:1b:11:1b:e9:0d:62:b8:8c:20:73:ce:e0:79:32:
d5:3d:18:e3:73:cb:81:2e:e2:cc:fa:46:c9:d8:17:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:22:5C:54:BA:FB:E0:AF:CB:B0:04:48:26:8D:F5:19:D6:31:59
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:17::/48
2a06:a005:1e::/48
2a06:a005:852::/48
Signature Algorithm: sha256WithRSAEncryption
90:a8:cb:69:fa:8f:b2:92:96:ea:a0:1d:f0:91:ee:ab:a1:c9:
de:80:da:ca:5f:5c:45:61:18:ba:39:bc:90:c3:76:57:5b:92:
89:8d:f5:38:71:a9:03:f2:d8:2c:a3:e0:c2:a7:44:92:a2:9c:
e8:7d:c5:de:51:28:ff:c8:2a:43:85:a2:ff:81:18:45:f1:3c:
cf:d7:38:b2:d9:d4:20:09:4a:84:12:39:a4:f9:5f:29:46:8c:
10:ce:01:38:ad:ad:f5:39:76:ae:77:c3:c8:af:5d:c6:32:4b:
22:2b:11:5d:62:fe:e0:36:3c:d7:03:84:36:e8:4c:33:02:6b:
2a:55:fd:f9:be:86:93:7b:ec:20:f8:5e:ad:ff:14:5f:12:58:
8a:38:5a:65:f6:4d:a2:61:60:b1:45:94:17:90:d5:66:a2:cc:
df:9f:11:5b:4c:e9:a7:f4:1a:a3:78:0c:51:3c:a0:ff:10:e9:
57:d0:84:ee:21:83:49:06:22:e2:e2:39:e8:1a:8a:8e:9f:65:
cf:eb:90:dc:f6:2d:ec:83:d2:92:28:84:a4:cc:10:26:ff:a0:
c1:54:f4:b2:e9:17:66:a7:b7:57:6c:6f:63:71:5e:6d:5e:e2:
dc:0a:b9:72:6f:d2:a2:a5:d9:f8:0b:cf:61:e9:32:db:0f:89:
8f:ff:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org