Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214841.roa
File: AS214841.roa (raw, json)
Hash identifier: g9ioxbjg040Ffv7hhqUfwsfNRq6a4LShSGhndcHDteQ=
Subject key identifier: 03:52:F2:2D:44:BA:DA:BC:11:1C:27:B2:E1:C5:44:D2:F9:00:7B:0D
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3435E122E78B47A9F3CCBC2FB00846C578FD7A13
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214841.roa
Signing time: Fri 12 Jul 2024 03:32:52 +0000
ROA not before: Fri 12 Jul 2024 03:27:52 +0000
ROA not after: Fri 11 Jul 2025 03:32:52 +0000
asID: 214841
IP address blocks: 2a0f:85c1:801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:35:e1:22:e7:8b:47:a9:f3:cc:bc:2f:b0:08:46:c5:78:fd:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 12 03:27:52 2024 GMT
Not After : Jul 11 03:32:52 2025 GMT
Subject: CN=0352F22D44BADABC111C27B2E1C544D2F9007B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:8e:5c:00:4e:b4:83:89:26:f8:c5:ce:a2:
8b:6a:5b:26:e9:88:22:ad:92:f0:f0:5f:91:02:7b:
a8:4c:6b:70:b1:7c:40:6d:1c:15:76:29:8b:ae:93:
a3:03:67:43:b4:56:8d:fe:1c:ec:c5:07:de:52:2a:
62:9e:f3:88:51:25:d3:d3:e9:1a:74:bf:5b:5c:3d:
8e:51:20:4e:22:24:cf:d3:d7:2b:a2:39:1b:93:3b:
93:bd:d2:de:b8:45:31:83:05:ab:8d:0a:89:bb:d6:
31:8d:61:a2:ee:ca:44:c2:13:2d:f2:cc:41:76:a0:
44:c1:1c:96:44:08:1a:cb:90:79:b6:73:7b:fb:67:
1a:cd:e9:2b:ff:a1:dc:33:30:52:65:0e:75:1b:22:
a6:fb:d7:6d:de:ae:b7:89:9f:ec:ac:8a:90:28:4d:
4a:5f:57:e8:ab:05:16:89:ab:df:27:b0:ec:84:1d:
27:65:c7:8a:7e:78:2f:c1:25:83:db:65:ad:9c:75:
e4:db:da:ce:4f:04:ab:c5:3c:33:02:8a:a6:24:a1:
db:10:06:a9:89:ab:4d:72:76:ed:44:18:c9:0c:91:
ce:be:2f:14:22:9a:95:8f:c1:0c:02:c4:94:24:a8:
b4:8b:b2:7b:b4:68:74:49:77:a8:ed:26:4d:f1:b1:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:F2:2D:44:BA:DA:BC:11:1C:27:B2:E1:C5:44:D2:F9:00:7B:0D
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:801::/48
Signature Algorithm: sha256WithRSAEncryption
b0:dc:07:b0:85:b6:aa:8d:78:0b:23:ad:04:44:57:69:90:60:
09:28:92:ce:79:00:e8:01:b2:6b:d1:2a:c4:b7:02:3f:4e:5a:
ab:11:ce:7d:1e:e6:7c:00:71:a9:bf:37:6e:61:98:de:9a:e6:
79:b5:65:10:84:e5:86:b7:d1:34:c4:f9:09:d4:c9:be:39:0a:
bb:0c:99:59:30:1a:c4:a7:05:e2:cd:9b:dd:0c:c7:18:d4:77:
a7:e1:02:55:67:5d:d9:62:80:ce:43:87:39:b1:2f:37:b4:f8:
1e:cd:af:d7:ae:4c:5f:75:52:51:d2:2c:c3:4c:1a:2a:51:56:
86:97:9f:6b:84:51:d1:f3:0e:f5:da:d3:4f:5c:1d:0b:98:fe:
36:70:68:4e:d5:07:3a:cd:d2:63:01:9a:98:36:91:ec:86:36:
3f:79:f4:7f:9b:29:2f:39:bb:fc:c9:ec:6c:ad:6a:ce:6c:52:
7f:4a:4a:9a:95:7c:f9:4a:cb:1c:6f:33:31:d1:68:a6:e6:71:
e6:fc:a1:3e:49:36:4e:49:fa:45:01:10:cf:89:f9:51:34:d2:
13:09:75:b4:77:de:98:81:5d:85:74:47:85:7b:d0:fe:fe:bc:
a4:1f:3d:10:9e:70:fc:52:38:d8:8c:6a:b6:2d:81:2b:bf:82:
ee:62:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org