Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS7721.roa
File: AS7721.roa (raw, json)
Hash identifier: EXJJZDY/ERWOxbb9K0JBjNbGQbfS0Oxh8WFyaA96ZdE=
Subject key identifier: 09:B2:56:C5:54:04:21:03:92:E3:7D:87:D1:BE:66:0D:99:D2:DD:84
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6903EBD6A664F87C395F7E1BBB5CE4194A24B4EE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS7721.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 7721
IP address blocks: 2a06:a005:220::/44 maxlen: 48
2a06:a005:230::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:03:eb:d6:a6:64:f8:7c:39:5f:7e:1b:bb:5c:e4:19:4a:24:b4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=09B256C55404210392E37D87D1BE660D99D2DD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:6f:dd:70:ad:f6:c4:8b:65:0b:9b:be:1a:
d5:2f:8b:a3:63:a9:97:4e:33:ef:51:e7:cc:9c:fa:
82:b0:f6:3f:0f:6d:37:57:4f:86:41:3d:bb:a1:7e:
aa:0c:83:76:0a:1a:39:0a:7b:9e:1e:65:79:76:a3:
3a:43:de:1d:4d:b2:49:09:68:af:ad:15:f8:18:79:
93:f0:b1:7d:d3:f6:61:b9:1b:07:69:26:74:1f:d2:
36:f0:c6:b0:1e:4f:59:e2:83:86:03:42:cb:ad:bb:
43:88:fa:9c:ff:01:b4:31:85:ff:96:8a:09:b7:fc:
47:d9:a6:bf:b0:84:2f:99:c6:08:c8:41:1d:92:d6:
5e:15:76:31:74:89:23:36:00:f3:b2:54:ba:46:7c:
6e:fb:e6:43:36:26:5a:ed:0d:a1:93:78:04:e9:a1:
bb:5b:5a:20:d8:e5:c9:ae:59:bf:5d:a3:f0:79:ff:
e1:59:24:96:7c:d0:e7:88:b1:67:e1:66:3c:97:23:
1e:1a:f7:96:33:39:59:ad:20:4d:59:15:b8:f6:54:
fd:f3:46:e7:49:58:10:21:5a:30:44:e8:81:f5:34:
52:0e:ec:5c:39:50:a7:5e:e6:d9:61:b9:38:27:d9:
1b:a6:c6:ab:5e:8d:63:6d:13:08:3e:1f:e2:5c:b9:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:56:C5:54:04:21:03:92:E3:7D:87:D1:BE:66:0D:99:D2:DD:84
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS7721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:220::/43
Signature Algorithm: sha256WithRSAEncryption
08:9e:c6:73:6f:56:69:a1:ac:70:47:88:e2:7e:4c:8e:b5:85:
d3:e0:37:57:84:4b:ba:19:7a:29:af:14:14:7a:a3:77:11:59:
a0:3a:59:37:19:e2:ca:1d:3f:87:4b:20:f4:80:92:aa:9f:78:
7e:f4:0c:de:13:c9:7c:76:20:52:a2:65:a0:8c:e1:8e:78:e0:
8d:76:f0:73:81:e0:44:46:51:69:15:88:47:7a:36:18:01:19:
85:8f:97:cc:42:a8:7c:90:5b:3d:65:5e:6d:39:a1:fd:5f:4c:
57:8d:35:c3:10:9b:31:0c:83:a6:a0:5a:24:a8:86:52:e3:64:
42:41:54:07:ba:31:4d:11:f4:d5:32:e5:e0:93:01:b9:68:0f:
16:51:89:0a:a1:68:08:04:3a:dd:b0:51:df:c6:32:ef:2f:00:
09:79:ca:29:6b:4d:74:ea:90:36:e6:99:a4:b4:7d:9a:04:67:
4a:55:17:8d:23:07:a7:f6:2b:f5:2b:b2:a1:88:45:b7:00:25:
9d:bf:6a:51:0a:94:2d:71:05:84:66:52:96:f4:3a:b2:44:9f:
9c:5b:3a:53:11:b4:17:36:7e:4d:3c:f0:af:d3:5b:77:9b:1d:
73:45:e8:97:75:80:6e:f1:3f:46:f1:3f:78:a8:1d:21:dc:87:
93:6e:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org