Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212387.roa
File: AS212387.roa (raw, json)
Hash identifier: Wd0K7TGS86kzMCNP8U1i2NUZLKI/NNfB14qQAcspN6I=
Subject key identifier: 0E:07:91:F7:C9:06:CE:75:FE:CA:00:10:46:B2:4F:F6:F2:76:AF:34
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2DEE1246A06970FD30EC99E0C87F909B17D648F5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212387.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 212387
IP address blocks: 2a06:a005:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ee:12:46:a0:69:70:fd:30:ec:99:e0:c8:7f:90:9b:17:d6:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=0E0791F7C906CE75FECA001046B24FF6F276AF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:cf:74:36:ae:14:ee:22:f0:c8:1d:cc:f2:
97:3c:80:c5:5f:e5:f0:df:1f:c1:50:37:b1:5a:e3:
99:03:3d:5f:6b:db:90:c9:58:fe:e8:ea:38:23:af:
83:9a:9f:b5:10:74:91:62:b2:f5:58:1b:47:f8:57:
18:d7:bd:f8:94:7d:ff:7b:f1:ba:1f:e2:c2:33:5b:
8a:d7:7f:a5:ff:05:c1:e8:5c:65:14:6b:51:f1:94:
6c:55:6c:89:64:ce:2d:c6:49:28:43:dd:4d:f1:74:
57:61:45:36:fa:32:d9:82:b1:c3:4a:31:03:a2:13:
31:02:50:76:1b:41:4b:b7:68:6f:3a:08:90:67:fa:
0c:ab:3a:fe:ce:6d:a3:f2:81:11:08:ce:5e:3c:d3:
1e:eb:e9:7b:ba:df:50:ec:b8:3e:c3:d1:8a:44:08:
d8:47:96:60:64:83:b8:b0:1f:89:f2:fb:f9:36:40:
20:65:b0:50:3d:52:d4:29:90:b1:72:10:f2:ce:34:
03:1a:ba:7a:2b:a2:4a:bd:a4:69:6b:6e:ab:67:48:
2f:6f:55:11:db:9e:dc:7d:38:bc:5e:c5:dd:0c:54:
86:a4:b1:1f:16:74:54:c7:40:84:91:3a:f3:60:14:
83:a4:18:0f:21:d0:f1:bc:61:33:fb:93:5a:88:5c:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:91:F7:C9:06:CE:75:FE:CA:00:10:46:B2:4F:F6:F2:76:AF:34
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:9::/48
Signature Algorithm: sha256WithRSAEncryption
49:0e:22:ad:8e:de:15:7e:f2:9f:14:bc:55:b8:fe:e7:62:6d:
fa:77:0a:04:99:f8:7a:12:fa:cb:cf:e1:bc:01:2d:01:7c:6d:
bb:50:ae:45:64:95:d3:50:c9:4d:c6:77:0e:73:1c:95:3c:81:
ae:9a:75:c6:a2:1b:ea:98:4b:e1:19:15:85:48:55:e6:26:5b:
b2:7c:f0:7c:9b:6e:de:2f:7a:2a:d0:c5:54:92:25:aa:2c:53:
19:e8:30:a5:36:1c:31:2d:f0:0c:2a:fd:a6:d8:09:b5:9a:99:
05:b8:a8:7d:88:bb:2a:83:02:41:20:5b:e2:c2:12:fa:30:56:
a4:15:f3:c4:8f:5d:64:dc:62:a6:28:d3:cd:a3:10:96:2f:e3:
6c:46:9f:68:f6:73:5d:fd:17:89:f3:0b:d5:9b:db:2c:ed:2f:
65:6d:58:29:06:f6:28:ef:a9:93:e7:09:ad:12:8f:da:e2:a0:
2e:2c:51:cf:1e:4c:11:d2:e2:30:65:4b:92:41:71:55:41:8c:
40:30:b2:54:6d:ba:98:db:dd:26:c4:24:43:31:1a:44:70:6b:
bb:b3:33:49:be:08:34:4d:69:b6:17:42:eb:cf:32:0f:1c:b8:
33:bc:16:f0:c5:2e:e1:43:b9:02:e0:52:f5:f9:29:be:ab:44:
66:15:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:51:07 2025 by rpki-client