Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210013.roa
File: AS210013.roa (raw, json)
Hash identifier: mmaoz1IaBu7WLQpX14hGNx1SzD1OEQF0vzFj5d/z2eY=
Subject key identifier: 7A:3E:00:4A:F6:93:75:24:2C:15:98:25:6F:D8:6F:12:26:C4:0A:C6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5ED08BEBFC0D33F13D52D2B796366B051976C15D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210013.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 210013
IP address blocks: 2a06:a005:490::/44 maxlen: 48
2a06:a005:1460::/44 maxlen: 48
2a06:a005:1510::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d0:8b:eb:fc:0d:33:f1:3d:52:d2:b7:96:36:6b:05:19:76:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=7A3E004AF69375242C1598256FD86F1226C40AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:fc:01:30:14:1a:d3:eb:fb:6e:14:96:3d:
b9:30:35:90:6e:59:a1:5e:5a:b6:e0:6f:f2:44:62:
0d:2c:87:b3:d6:2d:a1:30:49:17:64:7e:cb:3b:1b:
53:2b:cc:b5:da:63:67:99:c5:da:fc:f8:cd:3a:00:
37:bc:29:67:94:37:80:16:8a:3f:47:b9:60:f7:2e:
1f:f4:47:a9:52:91:5f:ad:5c:4e:03:92:a4:99:ef:
10:3c:fc:2c:e3:a4:cf:56:44:0a:ed:a4:51:1c:4a:
b2:b5:4c:5a:60:f1:25:c5:a1:a2:e2:3b:40:0d:f9:
bf:b8:82:28:8d:ea:98:00:1b:5c:66:cf:bf:db:c8:
f7:8a:f5:b8:9d:8a:c6:2b:cb:05:b0:06:74:7b:70:
2a:e3:eb:4b:c8:23:09:08:47:4d:b3:2c:ae:39:39:
03:d2:c3:b2:29:7d:c8:3a:a4:79:67:27:4d:8c:72:
21:86:5c:5c:e7:52:22:af:5d:be:cd:02:58:7b:35:
4c:d9:f2:f8:7a:de:a4:15:f0:a2:a8:15:cd:c1:5a:
e6:a5:df:6d:f6:5e:6a:85:8a:9b:b9:4f:51:90:e9:
33:5f:a3:e1:ef:13:67:4b:83:48:d6:7f:8c:47:7d:
12:9f:4c:0c:a5:cf:fc:b9:f4:64:85:d1:07:89:a8:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:00:4A:F6:93:75:24:2C:15:98:25:6F:D8:6F:12:26:C4:0A:C6
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210013.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:490::/44
2a06:a005:1460::/44
2a06:a005:1510::/44
Signature Algorithm: sha256WithRSAEncryption
09:d6:b3:91:95:1e:d5:5a:c0:39:08:63:74:cc:9f:e2:6f:02:
78:ee:a2:6f:09:05:6e:f0:46:00:a5:b9:65:75:06:a4:4c:bf:
78:30:a0:de:38:ca:79:f5:45:62:e7:5d:a7:a1:2f:90:8b:39:
31:65:5d:c4:e1:e8:ee:88:9b:50:1b:c5:fb:af:18:3a:52:1b:
b1:07:9f:74:ca:9c:a9:95:c8:cc:c8:86:44:eb:80:72:2c:31:
00:bd:49:8c:09:c7:70:16:2b:1a:58:7f:80:50:9b:98:a4:de:
9e:e9:73:27:06:3a:92:8c:e4:e2:2f:82:40:b5:09:33:f8:1d:
b3:9f:a7:94:89:a5:ef:7b:40:23:28:7b:d5:03:5c:dc:be:12:
18:08:f6:05:b7:7b:54:fd:b0:06:3a:54:90:3e:da:a3:b5:bd:
34:22:5e:df:08:e7:f2:14:3f:90:cc:04:e3:3a:fa:4b:95:7b:
40:47:3a:32:08:60:ea:66:ee:3e:d2:18:86:30:d9:36:65:ca:
c9:d4:8e:de:8a:b2:be:a2:38:5e:de:fc:70:ad:03:5a:60:d5:
6f:62:62:fc:b4:ae:09:f6:22:ab:8c:b7:be:8f:76:6d:59:c4:
57:b4:26:a1:6a:f2:9e:56:20:82:d9:df:7b:84:c1:64:3c:26:
23:98:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org