Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209310.roa
File: AS209310.roa (raw, json)
Hash identifier: 03ErHZxKRo7shvtFjp3eLaCRoBiKQf1rnMqjedxP1IM=
Subject key identifier: 9C:89:FA:44:D4:97:E8:D7:2A:A3:05:70:DE:82:D6:4D:64:61:21:59
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 36B3242D250DF687157922531F5CC923F7EA9F4E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209310.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 209310
IP address blocks: 2a06:a005:438::/48 maxlen: 48
2a06:a005:439::/48 maxlen: 48
2a06:a005:43a::/48 maxlen: 48
2a06:a005:43b::/48 maxlen: 48
2a06:a005:451::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b3:24:2d:25:0d:f6:87:15:79:22:53:1f:5c:c9:23:f7:ea:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=9C89FA44D497E8D72AA30570DE82D64D64612159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:ab:25:95:7c:33:79:ed:70:d7:b6:ff:a0:
78:ea:17:65:52:a7:90:e5:a2:0d:ba:cd:b7:99:c1:
62:4e:bc:f2:e8:15:33:42:fc:30:1c:69:2b:69:ef:
d1:c0:da:14:61:1f:1f:bf:f1:f8:9a:f5:19:46:ab:
76:0b:b4:8f:a5:6d:f9:8e:c9:2e:11:7e:2c:b7:8e:
86:46:00:3d:9b:c7:08:b5:74:05:0d:ac:77:9d:5e:
04:25:75:b4:f0:61:a3:f3:68:59:94:8e:2e:85:dd:
45:e5:49:68:08:a5:56:0a:48:08:b8:e7:b9:bd:ba:
71:35:73:d5:94:fa:c9:b6:f6:17:30:41:cf:f9:2d:
08:87:ef:12:be:bb:54:f1:15:b3:bf:a4:db:34:ae:
1d:d4:94:86:3e:22:2a:4f:1a:ec:6f:f7:fa:c7:d6:
7d:f3:d5:06:16:05:1f:8a:08:f8:04:dd:a0:3d:c0:
eb:c9:9b:a5:d9:2e:85:d3:95:dc:c7:89:92:60:68:
e0:3c:30:71:66:8e:09:d0:ac:c5:d9:4e:09:c0:93:
8b:47:ee:35:48:17:1e:a4:e5:19:ce:67:a0:39:c9:
1a:ad:66:31:17:75:07:9f:31:9d:19:2a:d6:ce:0d:
30:61:03:79:db:e8:04:99:a4:4b:f6:c4:96:e4:e8:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:FA:44:D4:97:E8:D7:2A:A3:05:70:DE:82:D6:4D:64:61:21:59
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:438::/46
2a06:a005:451::/48
Signature Algorithm: sha256WithRSAEncryption
6b:e7:11:1f:b0:8f:42:dc:9d:43:7d:77:a8:48:91:84:d9:a2:
43:5c:8d:37:06:ae:80:68:34:75:e3:aa:d7:9b:d2:99:b5:65:
a8:1e:63:42:77:84:fa:c0:44:6f:3b:91:3c:37:bb:1e:f6:3d:
70:ee:ad:b4:66:91:97:40:7b:71:b4:9f:fb:1a:2c:b1:98:0b:
56:54:d9:9b:8e:0e:68:37:51:29:59:49:9d:14:ff:11:d3:6c:
af:8b:37:10:0b:ad:14:6c:88:59:36:f1:f5:d0:d0:5e:ba:64:
63:20:55:2f:4e:bf:32:97:3d:fa:43:e8:f8:bb:ae:38:b6:71:
0e:ba:16:9a:6b:e8:5b:00:a0:b8:e0:ea:da:10:31:2c:03:ff:
9e:48:4a:19:5b:9b:db:c4:5d:36:9f:61:e1:06:d9:fb:f7:f0:
1a:81:b8:7c:03:e6:c7:0b:12:1c:1a:a0:be:60:ae:2b:5f:cd:
cb:2e:96:9b:e9:d8:ce:e9:b6:df:81:63:c2:17:79:5d:8b:7b:
21:45:2b:79:cc:78:ac:46:ad:c5:ca:75:f5:b1:82:fe:2e:22:
1c:ac:dc:db:dc:3c:e5:1f:29:50:61:a5:61:e2:32:85:1e:cf:
25:ba:9f:26:cf:c4:0d:e6:e3:98:83:cf:40:fa:69:bf:90:2a:
2f:59:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org