Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214546.roa
File: AS214546.roa (raw, json)
Hash identifier: E+K86jDVvFEB3FORR6UAY8Mk+X6RxO62GRQQ26048t4=
Subject key identifier: 24:30:3F:B3:D6:B7:18:AD:5B:1A:BF:E1:46:68:33:75:FC:09:BC:47
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 0E74588B613AA372419E8D865915B1DF496345C2
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214546.roa
Signing time: Sat 20 Jul 2024 20:46:29 +0000
ROA not before: Sat 20 Jul 2024 20:41:29 +0000
ROA not after: Sat 19 Jul 2025 20:46:29 +0000
asID: 214546
IP address blocks: 2a0f:85c1:829::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:74:58:8b:61:3a:a3:72:41:9e:8d:86:59:15:b1:df:49:63:45:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 20 20:41:29 2024 GMT
Not After : Jul 19 20:46:29 2025 GMT
Subject: CN=24303FB3D6B718AD5B1ABFE146683375FC09BC47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:0c:9a:9e:7f:48:a3:9d:18:ed:c7:f4:a8:
bf:ea:80:f2:1f:35:c4:d9:8b:35:0a:98:bb:fc:5d:
6a:4e:69:9a:a8:e8:c3:21:5d:0a:9d:70:9f:45:cf:
22:a3:f1:67:66:d8:6b:49:fb:8a:0e:01:58:27:3a:
10:de:17:d5:c5:2d:ad:ec:ff:04:76:66:b5:85:e3:
72:95:8d:79:ec:ee:9e:d9:4e:2e:12:79:a6:ce:09:
6f:8f:79:00:8e:f5:d4:d9:ea:70:42:97:65:63:ff:
f3:01:bc:26:7b:57:d2:1f:a6:a5:0f:f5:f1:24:3c:
fb:5c:71:51:a8:54:d6:ab:15:8e:7b:eb:f6:90:52:
79:a1:c1:7d:c5:1d:ae:ba:f4:d5:47:4e:f0:11:df:
61:bb:a6:68:3d:66:34:51:95:72:ac:a3:dd:fd:1e:
50:6f:51:e2:89:24:ce:3f:eb:cc:5a:66:ae:64:51:
3b:d1:2f:9b:e3:3b:8d:68:02:08:8b:25:3c:6a:ed:
c1:03:82:d3:19:a6:30:61:13:f5:b9:21:79:71:86:
8d:f9:99:28:b7:78:80:a0:35:dc:02:a5:aa:74:ff:
d2:71:a1:f5:c6:ce:56:66:19:e3:f7:c6:64:1d:64:
c2:3d:7f:4c:9f:e2:8b:03:9c:55:d0:3b:fd:19:f5:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:3F:B3:D6:B7:18:AD:5B:1A:BF:E1:46:68:33:75:FC:09:BC:47
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214546.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:829::/48
Signature Algorithm: sha256WithRSAEncryption
89:0c:4f:b3:5d:df:d0:37:db:98:79:fb:a0:29:f6:b8:88:fc:
f6:ca:22:d2:da:3f:c1:a9:a3:09:78:be:60:02:14:d0:fe:b2:
99:0e:78:3a:9a:dc:d0:34:0c:0d:17:68:46:dd:5a:49:e0:88:
4b:c2:ba:7f:46:fe:d6:04:dd:50:68:40:1b:58:12:15:70:96:
36:00:d8:5f:f2:9a:14:99:ee:35:27:9e:d1:f2:34:96:1a:74:
b7:fb:0a:7e:c6:2a:fb:ed:51:ea:d6:66:b5:35:4f:68:33:78:
44:b4:f8:56:ba:b2:cb:76:14:1f:08:30:98:73:8a:80:c9:62:
eb:51:b4:8c:cb:cd:cb:8c:64:1d:f7:f4:e8:d2:3c:84:31:c4:
6b:5c:a8:90:22:c5:a9:8e:59:b6:fa:84:0a:5f:c0:bd:be:99:
bd:f3:cb:b6:8b:b3:f1:fe:d6:4a:ee:a5:23:04:27:4e:46:05:
ff:b7:ca:ce:a3:49:73:8f:2e:48:83:28:25:65:a9:6b:6a:c4:
10:c9:05:58:02:c2:c9:4a:fa:9f:33:98:6c:20:32:ba:0c:3b:
2b:c2:e1:29:b1:e1:fb:cd:b1:04:ac:41:3d:f6:9f:9e:2f:1d:
e5:c1:54:7e:fd:b0:0a:32:13:9b:49:e2:36:3c:f2:71:17:6d:
d1:42:88:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org