Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213327.roa
File: AS213327.roa (raw, json)
Hash identifier: C5Cl5DBmXGa2vmrZtoCv18kXUsu4FzNvZqJbq49sJ5U=
Subject key identifier: 05:FA:2B:3E:32:B7:18:00:27:E1:DF:29:A9:8B:A2:22:41:04:4B:58
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 035B465D3F87AF5850850A65348E572F9785788F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213327.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 213327
IP address blocks: 2a06:a005:1272::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:46:5d:3f:87:af:58:50:85:0a:65:34:8e:57:2f:97:85:78:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=05FA2B3E32B7180027E1DF29A98BA22241044B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:c2:ce:dc:2e:d8:13:c3:d8:e2:2a:42:85:
81:47:f8:b6:0c:02:39:dd:fb:28:ab:2d:29:de:0a:
df:fe:31:4e:b9:86:e4:75:7f:3f:78:89:f3:f6:e6:
48:ab:e5:19:4c:73:1b:98:a5:84:0b:06:89:dd:15:
11:75:61:e3:08:1a:7a:9f:1c:ae:1c:c6:55:0d:5f:
a7:15:e1:b2:d0:fd:d1:b2:c6:f5:94:eb:e1:96:f4:
f1:9d:c9:a3:fc:8a:b2:8d:bb:f9:d7:e0:e6:ec:a2:
b1:e3:83:63:cf:e9:94:33:42:9c:dc:7e:19:47:38:
30:db:04:dd:e3:65:08:53:b1:1e:da:1f:f2:61:2a:
66:a7:48:2c:85:02:07:e9:cb:8b:d0:bf:a7:f6:d5:
f8:c9:fc:8c:6c:57:ca:8a:e1:01:e0:a3:dc:61:77:
92:eb:d3:97:87:b4:11:df:7c:f0:ee:fb:eb:16:7b:
57:63:c1:9b:f1:99:ec:11:c7:90:59:b1:7a:38:31:
29:31:c1:44:3d:f0:2a:dd:14:3f:8c:1e:f4:82:9a:
b6:13:d5:ac:78:37:4b:0f:e5:8c:0a:d0:5b:c7:e6:
6e:89:ea:2c:57:14:98:e6:6b:3a:2e:a0:7b:ac:4b:
d2:7f:8c:8a:99:d8:fb:9d:cc:48:07:cb:1e:2c:17:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:2B:3E:32:B7:18:00:27:E1:DF:29:A9:8B:A2:22:41:04:4B:58
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213327.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1272::/48
Signature Algorithm: sha256WithRSAEncryption
16:41:57:1c:00:c1:9c:f2:e5:3e:78:ac:9c:4c:d3:b4:33:20:
90:67:e1:52:94:89:dc:1f:b0:d5:1d:ca:00:85:9a:02:48:41:
65:01:bc:8a:9a:a5:d7:47:f7:a5:d7:6e:e9:29:e5:cc:ea:74:
4b:4c:f9:6e:66:66:83:0e:20:26:60:ac:b1:03:d8:c3:3c:f1:
7f:39:60:60:cb:8e:bb:ae:db:b9:29:7c:e4:d2:1d:1c:7f:bc:
a3:55:a8:24:a8:c0:93:1b:80:0b:ee:3a:d0:64:e6:94:31:e9:
0b:f2:f7:0e:df:3d:41:f0:c2:72:e8:b1:00:81:52:e5:c3:f2:
20:51:c4:66:92:5a:e0:03:7f:77:cc:05:1e:d4:26:76:07:7d:
32:42:f9:37:11:07:a4:cd:ff:38:d5:3e:d5:08:af:9d:73:48:
12:13:78:a1:19:17:31:dd:56:72:c0:81:99:ac:b6:0b:af:34:
62:c1:19:a3:80:a3:e9:61:5c:e9:29:53:a1:a0:05:09:ab:08:
cf:7d:c3:f1:e5:58:f4:da:cd:00:4b:96:6c:7e:5d:da:ee:b1:
25:80:7a:71:05:5f:8e:d7:99:2b:c8:59:7a:bc:45:18:bf:6e:
ae:a5:8d:17:14:47:e5:d2:ec:aa:39:d3:b3:9f:cd:4d:9d:d0:
16:f9:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:35 2025 by rpki-client