Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210152.roa
File: AS210152.roa (raw, json)
Hash identifier: 8TyYCSJ/uu5aH6wbQ9rsHxr+640RmGvso0WlDvbmnCg=
Subject key identifier: 67:62:DA:E1:8C:BF:99:46:62:E3:41:B9:98:8B:DA:6D:81:95:EB:71
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 53B8BBBC96A6CA8FE2E9C14A8D4C1D71673D94BC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210152.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 210152
IP address blocks: 2a06:a005:1290::/44 maxlen: 48
2a06:a005:17f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b8:bb:bc:96:a6:ca:8f:e2:e9:c1:4a:8d:4c:1d:71:67:3d:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=6762DAE18CBF994662E341B9988BDA6D8195EB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:31:88:f6:03:fb:ee:a0:6a:c3:ba:6d:ce:
46:73:b4:ce:ad:57:2c:4b:c2:46:4b:2a:ea:1b:e8:
7f:9d:29:31:7f:8a:1e:ec:60:c6:88:ed:6f:bb:69:
96:53:f5:88:13:18:d5:23:d7:c1:50:75:e2:d8:ea:
87:e3:a2:dc:45:86:9f:c1:09:22:69:90:2b:fc:a4:
b5:c1:18:84:5a:d1:d9:f4:68:aa:90:2c:c7:43:6a:
88:85:f6:c3:2a:14:41:43:93:63:04:c7:12:b2:79:
22:6f:97:13:ad:ca:48:20:92:30:3a:ee:38:8f:72:
d4:55:4e:23:42:10:ec:af:39:d6:48:92:b7:77:d9:
fc:ed:b2:01:87:e4:31:19:86:2b:23:29:be:fe:5e:
cd:7e:e8:19:cc:79:5d:d6:24:a8:af:58:62:98:34:
08:ec:e0:e7:d1:ab:2f:fc:68:17:c5:1f:02:8e:36:
46:ec:45:e7:1e:fa:fe:e4:f1:18:fb:5e:39:71:cb:
a8:74:02:12:6a:45:86:08:d7:c5:39:1d:92:3c:02:
8d:e2:8e:00:95:eb:d3:04:4b:38:58:18:6d:4a:5b:
c4:fa:6a:f0:1b:04:e7:b9:4f:e9:fd:91:a3:69:7b:
ed:24:15:4e:14:02:fb:68:d9:17:76:bb:85:f1:41:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:DA:E1:8C:BF:99:46:62:E3:41:B9:98:8B:DA:6D:81:95:EB:71
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1290::/44
2a06:a005:17f0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:09:2f:26:f5:4b:aa:81:f1:8a:39:2c:43:01:fa:fa:fb:56:
39:6d:a8:59:7e:2e:65:03:be:66:c7:11:f7:b5:25:36:ff:80:
c6:ca:43:80:f1:d8:3e:a3:44:d3:a5:aa:b0:68:37:e6:c3:c6:
a2:d3:64:c5:4a:4e:8d:7f:d3:75:c3:d6:13:3f:bd:c9:cd:48:
bc:b7:f4:ad:1c:c6:41:00:88:1c:22:bb:01:43:83:3d:c7:f9:
0d:29:5f:0a:a7:78:e0:ed:dd:e5:87:3f:85:f9:56:3e:28:a6:
ab:56:04:b3:6d:81:d4:bf:d6:27:75:e6:93:1b:cb:e5:cb:27:
f6:d6:29:f5:26:82:c4:3a:df:d1:ea:d1:21:84:33:59:01:0a:
2d:11:23:cc:3c:bb:93:c5:88:2d:d5:59:35:34:56:f0:3b:b0:
bf:ce:4a:5f:71:4f:b3:b7:71:0b:11:7c:94:6d:5f:a1:54:89:
ef:40:ba:f2:7c:20:6e:66:31:43:5d:6d:44:9b:e1:73:04:29:
b7:2b:d1:62:a6:46:24:6c:1b:f0:7b:0c:4e:8e:e3:b8:a2:ec:
1d:14:f6:c1:43:5c:84:50:0c:d5:36:b1:fc:47:cf:29:a0:23:
57:ef:9e:24:b6:32:e4:c3:88:ed:02:82:57:ad:1f:a9:ae:c6:
a3:83:83:50
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUU7i7vJamyo/i6cFKjUwdcWc9lLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDY3NjJEQUUxOENCRjk5NDY2MkUzNDFCOTk4OEJEQTZEODE5NUVCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChujGI9gP77qBqw7ptzkZztM6t
VyxLwkZLKuob6H+dKTF/ih7sYMaI7W+7aZZT9YgTGNUj18FQdeLY6ofjotxFhp/B
CSJpkCv8pLXBGIRa0dn0aKqQLMdDaoiF9sMqFEFDk2MExxKyeSJvlxOtykggkjA6
7jiPctRVTiNCEOyvOdZIkrd32fztsgGH5DEZhisjKb7+Xs1+6BnMeV3WJKivWGKY
NAjs4OfRqy/8aBfFHwKONkbsRece+v7k8Rj7Xjlxy6h0AhJqRYYI18U5HZI8Ao3i
jgCV69MESzhYGG1KW8T6avAbBOe5T+n9kaNpe+0kFU4UAvto2Rd2u4XxQdI/AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUZ2La4Yy/mUZi40G5mIvabYGV63EwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwMTUyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgag
BRKQAwcEKgagBRfwMA0GCSqGSIb3DQEBCwUAA4IBAQB7CS8m9UuqgfGKOSxDAfr6
+1Y5bahZfi5lA75mxxH3tSU2/4DGykOA8dg+o0TTpaqwaDfmw8ai02TFSk6Nf9N1
w9YTP73JzUi8t/StHMZBAIgcIrsBQ4M9x/kNKV8Kp3jg7d3lhz+F+VY+KKarVgSz
bYHUv9YndeaTG8vlyyf21in1JoLEOt/R6tEhhDNZAQotESPMPLuTxYgt1Vk1NFbw
O7C/zkpfcU+zt3ELEXyUbV+hVInvQLryfCBuZjFDXW1Em+FzBCm3K9FipkYkbBvw
ewxOjuO4ouwdFPbBQ1yEUAzVNrH8R88poCNX754ktjLkw4jtAoJXrR+prsajg4NQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org