Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209710.roa
File: AS209710.roa (raw, json)
Hash identifier: SgAkiMtmODd8xjCSEHgKGkPE0/B5Zs0aLQ8lBpbanNc=
Subject key identifier: E5:F8:E1:F4:B9:87:70:F5:B9:60:B9:F0:2E:0D:D5:AE:4E:3A:9E:2E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2FE87C271D4856649A6384238E3CAD32BE75BFE9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209710.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 209710
IP address blocks: 2a06:a005:610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e8:7c:27:1d:48:56:64:9a:63:84:23:8e:3c:ad:32:be:75:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=E5F8E1F4B98770F5B960B9F02E0DD5AE4E3A9E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:db:2d:64:e5:34:35:49:de:89:ba:fa:9f:
ad:af:7a:94:b8:69:2c:7c:dc:5b:33:d3:1a:08:d3:
b9:af:ba:7e:19:fa:70:af:d2:d2:40:92:b0:e6:29:
aa:95:2f:07:0d:0c:53:f4:cf:50:73:e7:34:e4:9c:
98:aa:03:5b:13:29:ae:68:e7:bb:80:a0:06:87:ed:
96:3b:74:4e:c5:65:19:68:77:f8:eb:05:66:bd:19:
bd:b4:cc:9c:71:f8:b8:dc:f0:2a:16:29:23:02:f1:
5b:70:ae:da:97:47:90:51:00:97:b0:31:3c:fd:af:
50:1f:48:c9:2e:fd:0a:3c:7f:2a:09:5a:3d:cf:09:
14:0c:dd:2c:35:8d:45:48:e1:92:be:af:05:6b:4e:
cf:19:c7:94:c3:a9:25:8e:47:87:e6:3b:90:4e:99:
35:18:75:ab:c7:44:9d:a5:0d:84:c0:5f:14:7b:ee:
e9:2b:ef:52:13:3c:6a:d0:11:26:f5:84:ed:6b:11:
ea:b6:5a:7a:ad:73:7f:9c:60:48:68:f0:dd:d8:f8:
22:bc:e7:e3:bd:33:bc:aa:cb:08:e0:09:27:b4:50:
1a:09:8e:84:46:fc:06:a3:d6:6f:d3:47:f6:49:4b:
3c:dc:e0:88:2c:c6:d2:ce:a2:50:9d:2a:ca:1b:db:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F8:E1:F4:B9:87:70:F5:B9:60:B9:F0:2E:0D:D5:AE:4E:3A:9E:2E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:610::/44
Signature Algorithm: sha256WithRSAEncryption
6e:fb:93:e8:40:a9:35:33:72:90:de:6c:a3:4f:d2:e8:24:0e:
53:2f:ae:15:ee:d8:ab:28:33:93:5e:43:e3:b6:e7:be:08:22:
3b:5c:1e:a2:11:99:36:06:bf:39:98:4a:e1:53:25:bd:42:32:
39:fa:45:d0:18:94:e3:38:c5:32:a7:83:e0:4c:12:f8:1a:40:
95:1b:3f:ba:18:0b:a0:4a:05:98:4f:da:91:11:f2:3c:e0:e3:
63:98:cd:0d:bd:1b:05:b6:6b:5e:73:1a:2c:3c:f2:eb:37:aa:
c4:31:b0:b7:fa:b4:bd:bb:90:99:80:29:8e:a2:a0:5f:ca:53:
6e:d1:f7:bb:65:49:fb:b5:6d:b7:f4:a1:09:3a:45:b9:80:4b:
07:99:6b:1b:3c:0a:6f:e4:ca:ef:ea:9d:27:fd:14:8f:13:d1:
74:0b:df:b7:43:e8:3f:36:0e:31:c3:1f:1c:80:1f:6c:b3:51:
74:87:af:91:40:be:cb:03:eb:62:7a:2b:7f:9c:f0:f6:fc:17:
31:64:d9:a3:cd:d4:f1:77:18:43:75:eb:78:d6:43:76:79:25:
50:2f:9a:54:36:88:73:ab:2f:b5:ee:f7:97:c2:1a:7b:f6:58:
ff:b1:c8:21:91:70:93:21:cd:1a:5a:1a:05:a0:41:9e:5a:0d:
99:8a:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org