Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214539.roa
File: AS214539.roa (raw, json)
Hash identifier: LhVnmBGdEpmp7hmjcboP6KLlcVBm15bX3YGKGWeSmYo=
Subject key identifier: 5F:6D:EE:79:96:9D:F2:6E:22:7A:E3:DB:C1:F8:FD:4B:25:F9:A4:F9
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 20FFAD723A705076D221FD5A2E91D24FFA87D93D
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214539.roa
Signing time: Wed 17 Jul 2024 19:52:52 +0000
ROA not before: Wed 17 Jul 2024 19:47:52 +0000
ROA not after: Wed 16 Jul 2025 19:52:52 +0000
asID: 214539
IP address blocks: 2a0f:85c1:835::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:ad:72:3a:70:50:76:d2:21:fd:5a:2e:91:d2:4f:fa:87:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 17 19:47:52 2024 GMT
Not After : Jul 16 19:52:52 2025 GMT
Subject: CN=5F6DEE79969DF26E227AE3DBC1F8FD4B25F9A4F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:31:af:cb:14:6f:db:79:92:b2:7b:84:c1:
56:57:9a:25:90:78:8c:ff:2c:1c:73:f9:bc:f5:7a:
3c:eb:d8:a3:6a:7d:98:33:d9:ef:99:95:86:42:a2:
15:d0:7e:dd:6d:b7:9c:76:78:01:5e:d6:a5:02:43:
66:7a:2b:59:80:7c:bd:5d:7f:e8:f6:9b:8c:9f:2c:
4b:b8:58:c1:5b:ad:d3:56:3a:51:f6:ca:d7:92:94:
3c:3f:1d:6b:45:65:69:0f:ca:13:9f:b7:4f:27:35:
43:52:52:39:c7:7c:4e:21:4c:f8:74:0a:bb:c0:5c:
ae:26:ad:5d:3b:b0:c4:35:3a:10:b5:cc:13:28:f3:
71:e4:31:6a:1b:f6:84:a6:17:b1:61:52:7a:dd:fd:
01:78:69:20:ff:01:1b:f7:ed:f4:8f:99:b3:c2:3d:
57:9f:4a:8b:bc:6f:40:93:d3:18:07:df:92:c4:7a:
eb:16:72:be:cb:b1:9d:4b:18:62:ca:cf:c6:f0:16:
8f:ec:81:8a:ed:1b:45:c7:fb:cc:75:10:d4:c0:80:
79:16:c2:82:83:76:ed:d8:50:0d:d4:2e:73:c8:cf:
8b:69:94:f9:1c:1c:74:e9:80:f8:ac:fa:2a:8e:b8:
dd:43:73:3f:7d:5a:32:30:ac:c1:a9:b9:3d:a8:69:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:EE:79:96:9D:F2:6E:22:7A:E3:DB:C1:F8:FD:4B:25:F9:A4:F9
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:835::/48
Signature Algorithm: sha256WithRSAEncryption
66:5d:2f:3c:a7:25:36:a6:d1:c0:3f:22:a5:27:86:0a:65:03:
0d:40:b9:7c:70:d1:e7:42:51:e0:5d:fe:8a:c4:2f:81:a8:8c:
eb:18:3b:ea:a8:55:9e:70:10:43:0c:1f:bf:8d:c1:7c:6d:ac:
55:d6:79:4a:29:65:d7:ab:60:cc:95:db:ee:71:a0:96:4d:9d:
13:c9:27:5d:49:be:49:db:36:1d:6f:b4:95:64:a1:54:a0:28:
50:71:25:5c:0a:f6:84:b2:21:a2:aa:98:63:ff:71:a6:ac:e4:
cf:57:6a:75:b4:98:cb:11:14:fc:4b:a5:e4:7c:3d:a0:dd:50:
3b:94:25:b0:23:b1:e8:e8:67:09:64:b8:07:ee:b5:ff:9d:2b:
4f:7c:5b:d4:04:8d:b1:d8:02:51:5a:cc:49:09:64:4a:ac:55:
a1:51:58:82:df:3d:ab:35:a4:38:85:ab:1f:5a:62:84:cf:57:
cb:74:76:07:f7:23:d4:45:86:df:fe:f4:ea:aa:03:69:99:46:
43:4f:86:9e:55:b5:99:51:a5:d2:3e:7d:2b:d9:0e:df:31:f6:
9a:e4:2d:d9:f6:e4:4d:2b:15:7d:fa:eb:6d:f2:e5:72:f0:f0:
44:64:7f:44:74:1a:aa:78:5a:89:9b:b4:b0:24:84:54:97:82:
e5:18:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org