Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213386.roa
File: AS213386.roa (raw, json)
Hash identifier: rm5ctzIIcxlqMAlT52DKXcSK6Z86lvBwq5tbSe0XLOk=
Subject key identifier: 5E:DC:7F:1A:4F:6E:23:28:AF:D6:59:07:24:9B:AF:77:79:8C:BC:DB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 30078892E821F87F8DB39E1A6F78DF3BF914A7C6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213386.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 213386
IP address blocks: 2a06:a005:2d7::/48 maxlen: 48
2a06:a005:2da::/48 maxlen: 48
2a06:a005:fb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:07:88:92:e8:21:f8:7f:8d:b3:9e:1a:6f:78:df:3b:f9:14:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=5EDC7F1A4F6E2328AFD65907249BAF77798CBCDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:07:84:13:34:87:ec:66:3c:c0:0d:03:64:
24:ba:b1:e8:48:af:43:cd:b2:16:1a:6b:3a:4c:07:
a9:05:45:24:91:78:f5:96:ac:08:d8:23:65:a8:95:
fe:d1:ab:0c:d4:22:35:d6:96:dd:c5:78:c5:e5:2d:
02:c9:98:e4:f3:2b:ed:6c:d5:b8:71:19:1c:28:55:
51:70:69:53:7d:c0:b3:01:ad:d4:0d:93:32:9d:15:
23:6e:72:f4:ef:b4:33:47:63:c7:80:2a:f2:6b:88:
80:12:c0:9d:b0:f7:bb:31:6f:15:ab:f3:ba:21:ca:
b6:c3:c7:84:44:d6:b3:5c:01:83:c5:08:c0:c9:1a:
4b:ad:29:49:a2:70:cd:d0:27:9f:fd:42:17:04:56:
87:a2:f0:0c:d8:10:77:b4:78:f1:d5:17:fa:3e:d0:
f4:b4:0c:39:cb:1b:6b:75:e2:61:0e:da:d6:b4:f6:
8b:42:d3:7c:4f:ea:af:53:38:7d:75:9e:0c:4a:d7:
47:19:18:86:a5:b4:12:50:db:c8:db:8a:fd:d7:db:
18:4c:6d:9f:52:0c:55:0c:c0:3c:91:c4:f2:a2:0e:
d1:03:ef:2c:5c:e2:b1:4d:87:2f:af:5a:f8:2e:5b:
e5:19:4f:e3:1a:f9:9a:13:98:1f:f1:3a:fc:ed:8a:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:7F:1A:4F:6E:23:28:AF:D6:59:07:24:9B:AF:77:79:8C:BC:DB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d7::/48
2a06:a005:2da::/48
2a06:a005:fb0::/44
Signature Algorithm: sha256WithRSAEncryption
01:5c:c5:2c:bf:f5:e7:0f:bb:f0:b7:e9:92:6e:51:dc:c9:34:
ca:60:3f:6b:87:53:a9:a2:8f:c7:82:4e:d7:a0:58:6f:88:d0:
1e:ee:ce:a2:c8:57:2c:36:87:cb:12:2a:ee:fb:99:11:9a:93:
bb:10:a2:f0:79:1d:2f:f1:41:df:eb:a3:47:fa:2d:ed:c2:76:
bf:7d:12:02:9f:18:8e:4e:5b:5a:b7:3c:71:3b:1c:09:fe:60:
e5:bd:9e:8e:09:c0:bd:46:9e:93:a9:75:ed:f8:8b:11:6f:c0:
c5:fd:7d:82:cf:1c:21:b6:b7:f0:4d:67:34:63:54:36:6d:b8:
59:7c:80:c1:2b:49:da:16:92:d7:0c:50:e6:1f:e4:e0:ad:12:
20:6c:15:e7:87:ab:d5:76:cc:84:0b:29:5d:c9:80:d5:9e:6c:
39:68:8d:f3:7c:1a:13:c9:3c:92:e6:8a:97:4c:fd:26:0e:81:
c4:fc:0d:7f:2c:2f:ee:27:59:05:88:7a:8a:82:68:8b:81:e6:
8b:8d:8a:70:b4:25:af:10:c0:be:a1:f4:fa:16:be:f7:7e:25:
8b:c9:6f:bb:1d:ce:d8:1e:01:6f:41:26:82:cc:0b:4b:54:0a:
13:59:a2:8e:37:9d:9c:61:99:22:a9:d8:5d:80:9d:87:c5:eb:
47:f0:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org