Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213288.roa
File: AS213288.roa (raw, json)
Hash identifier: MnZ9CuvP0yZmcF57cC4LEndAU1Jyo3jj53PzH0gQrUg=
Subject key identifier: FE:E2:38:1D:D8:4A:DA:6C:A8:9A:5D:D1:44:29:9B:0C:43:5E:90:70
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 39FDA8816B0DCD75EDF6E158665037E79D08F50B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213288.roa
Signing time: Mon 02 Jan 2023 15:12:42 +0000
ROA not before: Mon 02 Jan 2023 15:07:42 +0000
ROA not after: Mon 01 Jan 2024 15:12:42 +0000
asID: 213288
IP address blocks: 2a06:a005:ba0::/48 maxlen: 48
2a06:a005:29e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fd:a8:81:6b:0d:cd:75:ed:f6:e1:58:66:50:37:e7:9d:08:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 15:07:42 2023 GMT
Not After : Jan 1 15:12:42 2024 GMT
Subject: CN=FEE2381DD84ADA6CA89A5DD144299B0C435E9070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:c7:9f:9e:8a:f8:26:ed:72:34:41:59:8b:
81:89:3e:95:f4:48:80:e8:be:78:8d:25:da:06:c5:
5e:a4:e7:9b:1a:d3:5e:8b:0d:76:43:f1:3c:2d:8c:
7c:f3:93:b9:92:16:dc:7e:56:46:b8:6c:41:17:42:
e6:70:33:9d:15:03:c3:42:92:a7:f4:c0:4e:10:cb:
eb:f8:2a:e0:00:cd:68:d8:fa:00:c3:00:47:35:56:
87:95:10:cd:19:f4:c2:75:f8:fa:fc:0e:15:92:28:
fa:cf:45:c3:f9:03:6a:fe:32:49:03:bf:2e:29:b4:
fe:fa:60:0a:28:b1:e9:1e:3d:ec:5e:62:59:5e:a0:
71:46:87:de:ad:9d:93:54:97:4c:bf:8a:d9:f2:6f:
45:3b:9a:e2:b2:b4:ad:36:db:2a:86:43:a9:d8:ee:
e2:34:75:73:1f:97:16:70:f8:2c:7a:ce:01:ff:d2:
e9:c7:5c:e1:92:88:3f:9c:90:04:cd:1f:ac:6c:c3:
19:ac:13:98:b5:d8:bb:66:fb:64:61:6f:fc:88:67:
bc:94:32:e7:16:23:fa:a1:af:cd:8f:69:09:29:e3:
8b:a2:96:63:14:b5:73:56:9d:6f:09:b6:3d:42:22:
cf:e6:3a:63:29:69:42:ce:81:b4:a5:eb:08:78:ad:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:38:1D:D8:4A:DA:6C:A8:9A:5D:D1:44:29:9B:0C:43:5E:90:70
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba0::/48
2a06:a005:29e0::/44
Signature Algorithm: sha256WithRSAEncryption
00:9e:71:dd:b9:bf:11:14:d9:63:3d:8e:a3:08:6c:5d:8d:18:
29:85:78:f7:c8:bc:a5:3d:0e:60:57:7f:d3:c3:de:76:d5:de:
6a:d9:c4:60:70:fb:74:b9:5b:73:70:9f:b9:0c:75:05:27:5e:
b4:9f:ed:f9:80:14:ad:9c:a2:0f:9a:ba:44:6e:b0:9d:d4:b3:
97:a1:b2:db:27:ec:c9:2e:cd:fd:12:67:6f:10:93:66:2d:d3:
a7:28:32:39:c6:06:5c:ff:42:c2:74:0e:3c:0c:d7:8d:5a:8f:
38:bd:8b:ff:24:e8:88:78:30:1e:4a:cc:60:d8:be:27:02:53:
47:72:fb:39:92:2f:ad:29:87:b6:92:8d:74:9e:77:b1:72:d8:
f3:5d:ea:db:93:d9:fc:d8:2f:f7:b7:80:52:69:2d:aa:f3:c6:
e4:fa:69:8e:9a:11:88:45:e4:6b:ed:d8:6e:40:51:52:18:27:
af:c0:85:80:71:8b:4e:d9:0d:be:90:74:81:14:0e:b6:3f:ac:
8a:24:20:2a:5f:de:9d:35:ef:af:6c:f7:60:9f:81:0f:25:11:
8d:3e:09:64:c8:3e:5b:c5:52:7d:9a:da:6c:68:c2:21:b7:92:
fe:f3:9d:33:df:78:8b:ae:1e:d7:3e:6c:70:0c:ca:13:e5:3b:
22:f3:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org