Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214634.roa
File: AS214634.roa (raw, json)
Hash identifier: 5owckpXc3hoHayv0JwRbCpB57NJuWqQg2KMcSlH/7ec=
Subject key identifier: 00:EC:45:C6:56:4B:9C:80:19:3D:B4:71:EC:A9:76:8F:B9:AF:A3:66
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2719D3430A84F7A3E025F12663F2E74F8A51227F
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214634.roa
Signing time: Wed 17 Jul 2024 19:41:47 +0000
ROA not before: Wed 17 Jul 2024 19:36:47 +0000
ROA not after: Wed 16 Jul 2025 19:41:47 +0000
asID: 214634
IP address blocks: 2a0f:85c1:825::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:19:d3:43:0a:84:f7:a3:e0:25:f1:26:63:f2:e7:4f:8a:51:22:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 17 19:36:47 2024 GMT
Not After : Jul 16 19:41:47 2025 GMT
Subject: CN=00EC45C6564B9C80193DB471ECA9768FB9AFA366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:5d:45:bb:fe:87:22:c9:86:f8:76:4d:fe:
dc:da:34:38:64:78:df:bc:9c:2d:46:72:c9:f8:a4:
4e:c4:ea:77:ff:72:d2:bd:1c:19:6d:b8:12:83:03:
72:9e:49:37:62:ad:d7:62:d0:7b:9c:5e:ae:df:fd:
6e:20:1e:04:f5:db:cb:e8:7d:13:c3:66:ac:76:5b:
ab:9a:14:3a:da:bd:9e:08:90:ad:77:af:a2:e6:4c:
1e:00:89:f6:ec:b2:c6:89:79:db:9d:21:b3:1b:da:
5a:2b:f6:06:6d:76:5d:7a:3b:5d:f1:ff:c5:db:6a:
18:a5:b1:62:87:be:ef:f6:78:ed:3e:7d:ee:8d:30:
02:0c:28:17:90:c7:5b:73:c0:40:85:c3:45:48:04:
28:02:38:34:8c:34:79:15:3e:6b:ab:1a:52:d9:7d:
66:1b:ec:8a:1f:76:79:6f:c2:5f:56:78:fd:d2:8a:
5b:ae:8f:93:54:1c:2a:df:9a:3f:69:3c:ff:c3:93:
13:71:b1:47:58:87:58:fe:01:4d:66:78:5c:14:33:
21:46:5e:34:b5:09:30:55:b3:fe:fc:01:c8:f8:cf:
04:a6:99:db:15:b3:96:e1:63:21:dd:33:ea:f6:3e:
c0:05:73:e2:ff:c6:fe:51:41:b2:76:93:96:ea:e6:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EC:45:C6:56:4B:9C:80:19:3D:B4:71:EC:A9:76:8F:B9:AF:A3:66
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:825::/48
Signature Algorithm: sha256WithRSAEncryption
1e:43:ae:10:79:c4:90:33:65:5f:f8:b5:5d:5b:b2:35:19:1f:
4e:d7:89:8e:82:93:ee:49:24:48:93:6d:79:81:30:18:e6:b7:
db:35:22:c0:f2:9e:e2:cf:ff:ca:fe:14:2b:bd:31:a8:82:23:
90:43:45:9b:f7:73:62:d3:da:51:20:ba:0d:ec:bc:18:f8:ae:
bf:3b:ed:60:40:ed:01:6b:61:e2:91:16:8c:1f:d8:5b:85:76:
21:4e:fd:a4:f3:4d:d7:3d:20:ee:5a:41:31:1a:32:20:8b:60:
ed:71:c3:1b:7c:32:c6:70:6d:59:e2:d7:5e:15:2a:6a:48:60:
81:d8:c1:6f:b0:cf:e0:ef:c1:8f:98:a3:ec:3e:40:06:c0:27:
6b:d3:42:d6:4e:40:07:c9:67:84:13:03:98:11:a7:5a:30:e5:
e7:4c:71:a3:ae:91:f0:b4:4a:1b:26:a9:53:cf:b9:0b:37:2c:
15:1d:79:15:c7:fa:1c:3c:53:be:de:17:3a:2b:c9:56:16:ac:
1f:d6:e7:51:78:87:a7:88:70:a5:29:1a:3d:42:e5:0b:ec:9a:
a6:48:80:22:fd:8a:51:92:e5:34:24:36:5c:79:f0:7b:64:7d:
92:fa:fe:fb:8b:5d:bd:e4:b7:95:6a:c4:cc:16:53:f3:76:25:
41:d8:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org