Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61228.roa
File: AS61228.roa (raw, json)
Hash identifier: tpKo/abd+08ZSnqNKTAWrcaNUt9FOyybHw4uJDMxNCE=
Subject key identifier: E0:AA:0D:85:AC:D6:14:C4:CC:BE:8B:FC:8A:13:27:8D:5A:F0:F5:09
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 162EE26DD3A99A7465CF80A660EC058461F2B741
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61228.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 61228
IP address blocks: 2a06:a005:5ad::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2e:e2:6d:d3:a9:9a:74:65:cf:80:a6:60:ec:05:84:61:f2:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=E0AA0D85ACD614C4CCBE8BFC8A13278D5AF0F509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:df:22:13:68:b0:a8:70:2e:b2:8f:8e:e6:
41:0a:4a:cc:7f:91:2b:48:e4:b1:92:f2:0b:1d:50:
31:4e:d5:5a:6c:eb:70:49:b3:13:10:7b:be:18:37:
70:21:87:5c:b2:17:55:fa:bc:f7:97:2d:36:1c:6d:
9f:a2:b1:2c:a4:e4:53:71:9d:77:ea:00:86:52:a0:
79:dc:18:a4:60:7d:b2:fd:8c:c0:5d:de:a1:1c:fb:
8a:e5:14:ad:1e:d9:23:bb:93:04:bf:c3:5a:5c:aa:
4a:82:7a:d1:7e:43:1a:af:8d:16:01:5b:dc:73:f9:
6c:cb:54:1b:46:96:3a:4f:56:62:2e:cc:b5:03:96:
ce:7a:20:37:57:8c:86:ea:6a:fb:35:31:cb:98:83:
d6:aa:aa:e8:91:73:44:c2:bb:69:f1:b0:e3:b2:de:
37:9c:15:8e:40:58:51:65:f1:95:40:23:12:bf:c2:
76:6f:76:fe:47:a5:62:2e:bc:76:fb:f7:37:f3:9a:
dd:62:22:bd:b6:c0:d0:9e:c9:9c:71:a5:c8:24:19:
29:4f:69:c3:e8:d1:ba:8e:dc:ab:ac:00:70:56:a4:
97:ea:55:4f:dd:f8:79:b5:c4:de:75:2e:6b:11:5b:
67:fa:da:0f:4c:aa:b0:f3:23:28:8f:62:05:f4:83:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:0D:85:AC:D6:14:C4:CC:BE:8B:FC:8A:13:27:8D:5A:F0:F5:09
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS61228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ad::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f5:ba:b9:9a:58:e7:ba:db:8f:33:8e:76:a8:83:28:f3:bb:
0f:c8:d8:b3:e9:16:15:0f:71:4c:de:35:4c:af:63:b8:dc:8d:
cc:c5:89:6b:89:2d:90:97:cc:ff:71:27:c1:7f:e8:73:69:d4:
04:f4:f7:ca:f8:bf:ec:75:0d:2a:09:94:1c:c0:95:73:5d:81:
2a:46:fb:8d:01:b9:23:60:b8:28:ff:c1:43:42:9d:27:ca:cd:
1b:80:ac:30:db:fa:ea:39:01:db:8a:a4:b1:ed:f7:a6:cb:a9:
17:55:bd:d0:d6:d4:94:be:3b:a9:89:d1:83:3b:52:a9:7c:93:
a2:f2:d7:4c:7c:3b:27:78:c4:82:1e:dd:05:ac:9c:65:dc:c7:
45:7a:61:7e:08:01:e1:5e:c7:b5:45:ff:a8:d2:fa:6e:4c:d9:
28:f6:c3:a8:7b:78:2d:e3:a9:1c:8e:af:b3:d9:72:85:09:ae:
cb:81:7a:e3:ea:02:c8:03:78:98:47:30:4d:42:d4:ea:7c:70:
34:03:81:01:4c:63:85:08:1d:43:42:c0:1a:51:e4:19:55:15:
9f:e4:ce:3e:b2:a6:77:95:1f:79:85:38:b0:7f:c9:e9:f2:97:
19:bf:56:ac:a6:46:90:c8:d6:52:86:0e:c7:c3:47:5a:a6:3d:
ae:cd:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org