Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: 3dOSQCeSyOAdq+K+RJosOuvgZrQfuwTCkykdzgmgMos=
Subject key identifier: 0A:62:82:1F:EF:56:EF:BA:D4:9E:F9:EC:89:13:C6:73:D0:58:BE:E5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 22429A442273598AD5104CD03CE705EDC0466CCC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213312.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 213312
IP address blocks: 2a06:a005:620::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:42:9a:44:22:73:59:8a:d5:10:4c:d0:3c:e7:05:ed:c0:46:6c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=0A62821FEF56EFBAD49EF9EC8913C673D058BEE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:09:e8:88:97:75:11:9d:6c:4b:a8:06:28:
d9:e4:48:d6:2e:d7:0b:39:99:38:a1:39:a1:be:9f:
21:58:28:1d:84:79:98:f5:ae:65:cd:a4:bb:45:20:
58:e2:1c:f9:93:ec:33:eb:dd:bc:27:0e:f8:5d:4b:
7f:57:31:f7:fe:b9:b0:42:9c:09:12:af:4f:39:47:
85:04:d3:07:7c:43:a5:2b:55:75:6b:5b:3d:6c:6b:
80:fd:a2:4c:9e:66:24:9c:79:85:45:a3:21:fe:57:
27:a9:41:f3:69:f7:71:92:18:da:f2:39:51:80:8a:
d8:3b:2d:1a:b9:d2:1a:0f:86:d6:1e:99:7c:ea:df:
da:1e:55:96:dd:f9:db:2e:29:25:1e:64:29:97:d9:
e9:41:65:34:30:42:8c:a5:77:26:30:7f:ce:a5:7f:
a2:e9:82:15:53:86:6b:04:1d:49:97:08:6d:43:27:
aa:03:19:da:0b:0b:84:8b:1d:3c:30:f8:84:61:40:
10:f4:33:1c:0c:2d:09:b1:99:f0:76:3c:93:b8:3b:
10:dd:2c:e1:e9:dc:b6:8d:1f:f0:7a:57:59:41:1f:
e2:ad:dc:78:85:d8:60:3e:b2:ff:d4:59:8a:79:62:
2d:69:ad:bc:39:15:23:43:91:15:3e:9a:07:4f:10:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:82:1F:EF:56:EF:BA:D4:9E:F9:EC:89:13:C6:73:D0:58:BE:E5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:620::/44
Signature Algorithm: sha256WithRSAEncryption
75:cd:c6:d8:e9:d7:ae:05:37:f3:33:3d:f1:cc:80:da:50:b5:
13:f4:cb:37:2d:8a:21:01:ce:b3:4a:c3:2d:6e:d8:7b:0f:cb:
e3:3a:e0:8f:d8:5a:17:c7:0d:79:6c:d3:cb:31:3b:50:b2:bc:
98:cd:cc:a5:25:57:82:2d:52:88:e4:bc:86:a0:6b:f1:03:46:
fd:15:65:d0:9e:ce:06:38:72:2d:93:3e:56:59:18:2e:02:77:
29:d6:2a:dd:a3:b3:2b:c8:f5:e3:b7:fc:49:4b:aa:1a:de:8e:
48:5c:3f:10:fc:d6:d5:36:19:c2:eb:8a:4a:c4:e4:2e:80:a6:
c1:3c:f6:71:fd:ba:48:28:13:c6:5c:fc:e0:10:cb:bf:24:f7:
ed:3f:e1:61:ca:ec:08:d5:be:7b:d5:80:0e:91:37:bf:d7:c4:
df:61:bd:63:fb:d2:3d:42:a9:a4:8d:27:07:a9:3b:00:ad:d7:
e3:cf:ec:aa:9b:36:ee:58:0a:fb:11:15:fe:2a:33:91:b0:94:
5e:cd:16:f4:05:67:3c:f0:43:f8:82:db:00:56:13:f4:4c:91:
72:63:c4:6a:24:1e:7f:50:6c:2d:5a:c1:51:7a:42:17:37:0d:
64:28:89:08:33:c6:02:0b:3d:a5:46:01:8c:ee:12:13:18:f2:
d8:4c:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org