Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214475.roa
File: AS214475.roa (raw, json)
Hash identifier: TuoXH47ZrZHZc3I1aQ/8jrIw6rNfI9dsMEsORhx8+eU=
Subject key identifier: AE:5A:CB:40:BD:DB:D7:DF:2D:2B:AE:AE:6E:CB:48:B2:70:D7:00:3C
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 13ECE7B5A97E9A6207C2A077D7CE7A6E156369
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214475.roa
Signing time: Tue 30 Jul 2024 02:02:48 +0000
ROA not before: Tue 30 Jul 2024 01:57:48 +0000
ROA not after: Tue 29 Jul 2025 02:02:48 +0000
asID: 214475
IP address blocks: 2a0f:85c1:843::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ec:e7:b5:a9:7e:9a:62:07:c2:a0:77:d7:ce:7a:6e:15:63:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 30 01:57:48 2024 GMT
Not After : Jul 29 02:02:48 2025 GMT
Subject: CN=AE5ACB40BDDBD7DF2D2BAEAE6ECB48B270D7003C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:09:04:8c:51:8b:2c:e9:b9:b6:32:40:31:
cd:d8:ed:4a:e2:f3:df:c7:4c:9e:b9:e5:39:cd:f7:
f9:e9:06:b2:7d:9e:35:70:7c:a7:6a:75:d0:bf:60:
1b:a6:25:04:36:2f:0c:4e:0f:b9:97:4a:ae:ae:92:
d9:65:ba:cf:23:3f:3a:29:84:ba:17:b6:cd:46:cb:
a6:fb:d3:82:e3:25:21:9c:e6:2b:f1:d4:9f:83:7a:
e8:09:c5:a6:94:73:49:46:56:96:f3:eb:75:01:9a:
5d:e6:7b:0e:1d:3e:24:6e:57:4d:6b:81:37:16:77:
c6:fd:27:3f:18:39:91:f9:02:56:af:ec:85:ce:0d:
df:59:7b:a5:04:5f:a2:da:8d:af:cb:9e:7a:e6:87:
7e:c5:c3:63:fd:12:fc:aa:41:d1:c2:02:6d:43:d5:
e9:09:84:78:37:cc:70:63:0b:45:5b:82:a1:b4:91:
bc:50:c5:dd:08:20:9a:4c:ed:45:99:b3:7d:21:30:
57:30:02:eb:c9:ed:00:b8:08:b3:3f:56:3b:03:de:
43:72:2d:3e:35:3d:70:d5:9b:95:67:a9:11:2b:2d:
0d:ad:40:95:60:d7:fb:df:34:93:29:67:03:5b:d6:
69:24:76:9b:4a:49:8b:6e:93:e7:dd:50:75:a9:ef:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:CB:40:BD:DB:D7:DF:2D:2B:AE:AE:6E:CB:48:B2:70:D7:00:3C
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:843::/48
Signature Algorithm: sha256WithRSAEncryption
90:20:22:bc:e9:08:e6:ab:b2:98:16:ff:80:bf:11:84:11:23:
5d:e9:67:d8:20:48:da:a2:e3:b3:8c:23:8c:36:e7:54:b5:8e:
b9:38:5e:b3:fd:6a:24:b5:26:83:fa:02:9a:d0:ee:c9:a6:52:
8d:77:a6:f0:de:f7:5c:07:94:df:d4:49:0b:af:08:af:0e:72:
68:40:0c:d3:ed:b0:f1:b5:61:12:ce:fe:0a:a3:4d:35:b5:f6:
73:4b:14:d5:1c:e2:ca:14:52:75:b4:10:ab:74:66:7a:0e:d0:
c9:6c:e8:fb:a0:d9:ef:5a:b1:22:37:1e:8a:40:21:fd:1c:8e:
00:c1:24:fc:11:04:79:10:8e:5a:1b:3f:c7:0f:13:c4:af:18:
fb:9b:0b:58:eb:eb:8b:c0:e9:54:7c:93:34:03:ee:4f:41:85:
22:5b:a3:de:ad:fb:d3:60:da:fd:ec:0b:6d:48:04:f3:ca:37:
c9:1a:e4:c0:27:0b:be:81:d5:c9:80:f1:0a:e3:ad:c1:1c:76:
0f:67:72:1c:fd:74:ef:46:fe:62:c6:e9:4d:d0:ca:ae:0d:51:
fa:79:de:a0:75:16:12:a7:ca:3a:68:fe:f9:a6:c5:71:c9:77:
6e:ca:b3:3d:c7:51:e7:c4:a7:14:ab:5b:29:97:30:a3:9e:f6:
60:49:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org