Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214983.roa
File: AS214983.roa (raw, json)
Hash identifier: MMUYs3R8j6wyvffOskkt4pEpXrxmZOm0OPBRIg9ykaw=
Subject key identifier: F2:79:36:7F:9C:18:59:D7:CC:A6:8A:E7:4C:1C:29:A0:2B:86:31:62
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 519E6DE0482E08C04D5F0C9E1095A482A082EC32
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214983.roa
Signing time: Tue 06 Aug 2024 02:39:09 +0000
ROA not before: Tue 06 Aug 2024 02:34:09 +0000
ROA not after: Tue 05 Aug 2025 02:39:09 +0000
asID: 214983
IP address blocks: 2a0f:85c1:3d3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9e:6d:e0:48:2e:08:c0:4d:5f:0c:9e:10:95:a4:82:a0:82:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Aug 6 02:34:09 2024 GMT
Not After : Aug 5 02:39:09 2025 GMT
Subject: CN=F279367F9C1859D7CCA68AE74C1C29A02B863162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:37:f8:5e:5a:f9:47:ca:2c:16:1a:3f:ac:
c6:69:e8:8c:96:39:3d:46:2b:46:df:09:30:e8:2f:
54:89:e9:bd:2e:b4:ab:24:9d:d9:13:02:16:c0:ee:
dc:ae:7a:cc:f9:ab:58:4c:85:06:9d:97:5c:bb:98:
4a:27:24:d0:aa:a1:2c:9d:70:4c:cc:81:bb:9b:91:
35:7b:ed:4f:62:47:15:c4:ea:ce:5d:90:b5:18:50:
a5:4e:fe:6f:00:e1:9c:da:67:1e:a5:c0:27:ee:f2:
1b:bb:9f:57:8b:6a:88:21:9a:b8:a0:7e:27:3e:60:
a4:b5:e6:20:36:0a:19:e3:9f:fe:36:13:03:70:0e:
40:dc:76:02:21:98:25:4b:fd:f0:0f:6c:c1:41:da:
fb:f2:2e:81:71:43:fc:56:6d:6b:23:9f:2f:60:66:
77:35:bb:43:7c:64:20:93:8d:c4:4f:3c:e8:bf:ec:
da:a6:0c:c4:1d:a7:17:7a:b7:9e:00:f1:17:43:5a:
25:01:1a:62:a5:4e:94:71:43:e2:d5:47:a0:27:7e:
92:a6:d2:c8:0a:78:4b:a5:13:59:fa:76:77:76:6b:
23:25:2a:1f:c9:c1:ae:83:09:bf:f2:fa:89:18:a6:
5a:6d:ff:8c:38:0b:c9:ff:07:7f:8b:f4:42:9e:5f:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:36:7F:9C:18:59:D7:CC:A6:8A:E7:4C:1C:29:A0:2B:86:31:62
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d3::/48
Signature Algorithm: sha256WithRSAEncryption
2b:fc:bb:d9:c9:ff:3d:75:ad:c8:66:33:9b:d1:0f:da:26:cb:
e9:87:f6:38:00:fc:3b:fd:1d:f6:5e:8c:ab:c2:c5:a3:ca:ea:
39:b0:5f:1b:ec:16:df:e1:e5:78:87:65:8a:f3:24:72:a5:6e:
58:73:70:11:94:19:35:23:7b:5a:a8:56:e1:2d:5c:12:56:26:
56:60:95:23:97:03:68:cf:5a:03:0b:d8:15:55:87:6d:7c:39:
a0:6a:33:1e:c3:5d:db:30:1b:89:e0:a9:55:7f:9d:35:a2:55:
8e:3a:93:a1:76:c2:e0:b6:85:13:7a:9a:68:4a:0e:c6:99:5e:
ce:dc:b8:1a:04:01:4d:5a:5a:cd:21:89:d4:67:f9:8f:ae:c0:
ce:86:10:7c:41:d9:72:42:1b:bb:39:c4:5e:20:d9:92:dd:43:
89:74:40:2d:6c:98:fa:3e:98:02:50:69:ad:5b:74:a7:6e:49:
16:de:99:7c:90:43:e3:d6:b4:2b:19:d6:fe:b5:a4:3d:bf:c9:
68:75:4d:07:ee:64:2b:ea:2f:3e:a9:2d:af:1f:b8:30:5d:e3:
70:2c:4d:8d:9b:0a:5e:ce:6f:52:a0:68:f5:ac:37:53:31:51:
4f:90:70:6a:2d:57:3e:5b:7e:1d:27:7b:dd:11:53:b5:ee:b8:
84:ed:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org