Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51312.roa
File: AS51312.roa (raw, json)
Hash identifier: uNc92+NxmFSfyUJx2PhVEjCLQWnKIDc/mDrvYmw0Pcc=
Subject key identifier: BF:D3:6D:62:90:B3:F1:C4:BA:0E:03:B4:F4:36:87:B9:39:E7:7E:58
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5F646B9375A69AB6E137B559014B831402014605
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51312.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 51312
IP address blocks: 2a06:a005:2280::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:64:6b:93:75:a6:9a:b6:e1:37:b5:59:01:4b:83:14:02:01:46:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=BFD36D6290B3F1C4BA0E03B4F43687B939E77E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:eb:49:18:09:14:e6:ba:4a:51:b8:e5:f7:49:
0b:84:5d:b1:eb:af:64:9a:98:8e:51:64:15:aa:f6:
e7:93:fa:d7:9f:36:3a:56:cf:01:a8:ea:3d:77:70:
d8:c6:85:82:7e:c7:96:f9:cb:41:6f:d3:05:fd:9b:
4d:68:27:f5:51:29:53:6a:72:c7:09:39:31:fc:fa:
22:eb:b0:3a:bf:32:70:fb:5a:01:7a:12:f6:fc:ac:
de:3c:e9:60:d8:0a:48:75:ac:d7:15:f9:25:80:5d:
7c:f8:2a:de:ea:e9:e0:2c:c0:86:e5:72:c2:6a:69:
c8:6b:21:37:df:04:82:36:6a:27:dd:35:3b:50:41:
1b:61:09:0c:b3:a9:a5:b0:e8:87:f3:e1:4c:d5:a4:
ce:20:81:20:51:a9:96:a5:4c:50:d8:bd:42:41:d1:
81:0c:4a:5e:72:dc:01:9b:8d:f2:fd:81:99:11:34:
e8:01:c8:51:dc:3f:c4:b6:2d:f9:8b:fd:21:cd:82:
42:ad:8d:5e:55:f0:94:02:c5:81:82:a4:20:bd:f2:
aa:01:a0:8d:f4:15:37:7e:9d:5e:29:fe:2b:24:2e:
65:fe:ac:74:59:06:fd:16:2b:94:73:f0:63:f2:2e:
56:85:34:bf:1f:0f:95:e3:c3:0f:ec:77:98:3e:8e:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:6D:62:90:B3:F1:C4:BA:0E:03:B4:F4:36:87:B9:39:E7:7E:58
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS51312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2280::/44
Signature Algorithm: sha256WithRSAEncryption
93:89:27:51:2c:bc:c3:fd:96:2a:d4:ea:83:4b:e0:6d:e6:48:
95:30:7d:ef:64:58:18:5a:90:97:0e:ee:9a:45:80:7e:f6:2d:
50:39:b3:55:9c:1d:d2:bf:dc:88:60:69:1d:94:03:e2:fd:26:
f0:db:17:6d:93:99:33:d7:b5:b2:cc:69:66:2d:e9:38:fa:88:
c0:a2:ba:6e:db:9a:c5:67:9d:58:7a:a7:5a:67:5b:1e:38:e9:
a0:96:e2:31:92:b2:ae:5d:b2:da:09:9c:78:d6:77:1d:85:15:
02:96:b5:ef:49:e9:9a:44:68:c4:f5:46:be:58:54:f8:9d:62:
8e:39:a1:bc:d0:b3:e7:31:54:ec:4b:be:e0:b3:2b:d7:06:ad:
8f:8b:94:e9:42:71:91:57:94:64:da:d4:a5:f9:23:04:a1:be:
4a:60:bd:3e:e9:e6:0f:c9:8f:26:09:48:ac:e8:e7:4c:c8:f4:
fd:95:e2:2c:ef:aa:38:b8:35:5c:d6:ef:61:b3:6c:38:95:70:
41:40:54:30:60:14:f1:c5:32:3f:80:f6:b8:f3:2f:db:01:dc:
08:e7:8c:96:5b:fb:a2:d5:75:60:b4:e8:d4:b9:64:a8:3d:f6:
85:ed:8b:3f:80:28:c2:ca:f6:06:74:e4:f4:91:31:bb:d1:64:
d8:88:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org