Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210260.roa
File: AS210260.roa (raw, json)
Hash identifier: Ol+kQrlbORemE61QWVdbjpMobsBMe/Z8dZpFj9x4wkQ=
Subject key identifier: 9E:C1:6A:B7:34:27:D8:9E:08:70:A1:44:82:5F:05:E4:C1:06:27:D7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 21F4818F4328C0321441BFEEA6D6FFEF799FFB1A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210260.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 210260
IP address blocks: 2a06:1286::/32 maxlen: 48
2a06:a005:20::/44 maxlen: 48
2a06:a005:30::/44 maxlen: 48
2a06:a005:40::/44 maxlen: 48
2a06:a005:50::/44 maxlen: 48
2a06:a005:1650::/44 maxlen: 48
2a06:a005:1a20::/44 maxlen: 48
2a06:a005:1a30::/44 maxlen: 48
2a06:a005:1a40::/44 maxlen: 48
2a06:a005:1a50::/44 maxlen: 48
2a06:a005:1a60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f4:81:8f:43:28:c0:32:14:41:bf:ee:a6:d6:ff:ef:79:9f:fb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=9EC16AB73427D89E0870A144825F05E4C10627D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:d9:da:32:7e:bb:08:03:9a:6f:90:f6:13:
cc:0b:51:c0:2a:95:29:95:6c:79:5c:2c:c6:dd:31:
43:0e:9f:55:57:1e:8f:99:2c:d7:6e:03:d8:3d:47:
82:96:c7:f3:04:01:40:62:c9:50:73:bb:81:85:31:
2f:25:63:04:c8:24:74:fd:c2:8a:d6:f1:52:98:a4:
55:df:c3:37:2c:cf:95:ca:af:1a:4a:34:43:a5:44:
3e:98:af:ab:b9:15:19:7d:cb:e7:90:d2:31:b8:2b:
9c:7b:98:f2:8f:66:af:a5:96:a8:25:ac:9f:b4:78:
56:72:9f:12:e5:27:e8:e4:f8:75:5d:67:21:04:f3:
59:9d:a7:a0:23:80:c7:70:38:44:24:74:a7:c2:42:
ee:b7:ed:66:73:6b:22:45:75:ad:60:7b:82:24:47:
46:ac:6b:99:eb:a6:7d:4d:52:25:22:f5:b8:1b:f0:
e4:b7:51:a1:82:2c:73:cb:fa:ac:9c:3a:03:5e:a4:
b4:62:47:c2:4f:33:13:c4:62:e7:5b:5a:28:a1:6e:
75:12:4e:e3:9c:75:b1:3a:7a:57:e3:02:0d:7f:4f:
25:b5:f6:7e:85:95:7e:1c:d5:1f:ec:2a:b6:69:71:
7f:ac:9b:fb:3f:71:6e:2a:35:e7:46:95:d1:dc:75:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:6A:B7:34:27:D8:9E:08:70:A1:44:82:5F:05:E4:C1:06:27:D7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1286::/32
2a06:a005:20::-2a06:a005:5f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1650::/44
2a06:a005:1a20::-2a06:a005:1a6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:ec:16:63:14:cf:58:37:7b:d3:1c:58:41:9d:9e:1d:1c:4f:
79:a0:5d:f4:2a:27:89:df:d2:1a:65:a3:27:51:02:8a:60:0a:
f5:d0:b1:d8:bf:9e:1d:11:7a:cb:e6:a3:4e:23:27:47:46:c8:
00:ea:57:4a:e9:ce:c5:15:42:1d:d4:5d:7d:4d:93:ce:bb:37:
e4:4e:ec:bc:ab:64:f8:e2:ab:de:35:e7:61:1b:e7:2b:dd:89:
5f:f2:be:15:b3:c8:b1:35:63:48:33:7d:4e:f5:88:cb:21:de:
89:3e:0f:db:33:8f:b9:d0:8c:0a:59:06:00:9c:04:a4:6d:81:
bf:78:ba:17:2e:94:c8:cc:34:f2:ec:6c:76:de:97:c4:36:c1:
24:82:30:46:0e:68:9f:cc:d6:56:01:0e:cd:55:35:d1:ea:64:
5c:11:c2:f3:25:0b:e9:e0:81:40:d6:9d:2b:6a:e0:0a:33:12:
e0:04:5c:25:7d:84:a3:2a:f0:2f:ef:9a:91:f8:4e:d3:c7:c2:
fe:60:bd:ca:99:8e:1d:a2:79:3e:b5:68:72:11:42:7f:ec:14:
29:a6:ec:08:16:54:07:31:2b:c7:21:47:38:57:cc:b0:44:7e:
c5:db:3e:52:2d:a9:3a:09:02:77:9c:90:b0:b9:34:82:09:6f:
f6:d9:92:ac
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIfSBj0MowDIUQb/uptb/73mf+xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDlFQzE2QUI3MzQyN0Q4OUUwODcwQTE0NDgyNUYwNUU0QzEwNjI3RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6tnaMn67CAOab5D2E8wLUcAq
lSmVbHlcLMbdMUMOn1VXHo+ZLNduA9g9R4KWx/MEAUBiyVBzu4GFMS8lYwTIJHT9
worW8VKYpFXfwzcsz5XKrxpKNEOlRD6Yr6u5FRl9y+eQ0jG4K5x7mPKPZq+llqgl
rJ+0eFZynxLlJ+jk+HVdZyEE81mdp6AjgMdwOEQkdKfCQu637WZzayJFda1ge4Ik
R0asa5nrpn1NUiUi9bgb8OS3UaGCLHPL+qycOgNepLRiR8JPMxPEYudbWiihbnUS
TuOcdbE6elfjAg1/TyW19n6FlX4c1R/sKrZpcX+sm/s/cW4qNedGldHcdTcfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnsFqtzQn2J4IcKFEgl8F5MEGJ9cwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwMjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwUAKgYS
hjASAwcFKgagBQAgAwcFKgagBQBAAwcEKgagBRZQMBIDBwUqBqAFGiADBwQqBqAF
GmAwDQYJKoZIhvcNAQELBQADggEBABvsFmMUz1g3e9McWEGdnh0cT3mgXfQqJ4nf
0hploydRAopgCvXQsdi/nh0Resvmo04jJ0dGyADqV0rpzsUVQh3UXX1Nk867N+RO
7LyrZPjiq94152Eb5yvdiV/yvhWzyLE1Y0gzfU71iMsh3ok+D9szj7nQjApZBgCc
BKRtgb94uhculMjMNPLsbHbel8Q2wSSCMEYOaJ/M1lYBDs1VNdHqZFwRwvMlC+ng
gUDWnStq4AozEuAEXCV9hKMq8C/vmpH4TtPHwv5gvcqZjh2ieT61aHIRQn/sFCmm
7AgWVAcxK8chRzhXzLBEfsXbPlItqToJAneckLC5NIIJb/bZkqw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org