Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210305.roa
File: AS210305.roa (raw, json)
Hash identifier: mk+GOIKrqFlYZh8CttFu/HerzP6R3uRigN4T8ZwIbTU=
Subject key identifier: 3A:3A:99:F9:27:ED:49:A8:6C:22:A6:D4:DE:B0:31:FB:BE:6E:92:D9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 34D431A0C8C0F8B046FF591ABDB09D44B44BDD6B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210305.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 210305
IP address blocks: 2a06:a005:5b5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d4:31:a0:c8:c0:f8:b0:46:ff:59:1a:bd:b0:9d:44:b4:4b:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=3A3A99F927ED49A86C22A6D4DEB031FBBE6E92D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:90:f8:f3:8e:e1:0a:44:4f:3e:ec:73:13:
54:e0:92:23:9a:9d:5d:97:c1:f7:12:8e:20:93:c3:
49:fe:1c:22:a2:ff:b3:2e:28:ab:d5:b0:78:60:1e:
74:21:0f:be:5a:8c:35:7e:74:8c:1f:14:f5:04:33:
ff:d5:9d:c6:2f:fd:13:e9:be:49:d7:c0:90:c0:99:
84:d2:76:b2:c1:cd:fa:33:cb:18:f7:5d:82:8a:49:
95:e1:ef:44:dd:df:1c:04:9e:61:de:6b:ff:4e:7b:
2e:3b:6c:00:04:de:c1:c0:d4:c7:a3:9a:17:f1:98:
05:1f:a8:57:ef:cf:07:35:2a:c4:bc:07:67:ad:ac:
64:d4:1b:51:6e:6b:8c:f8:27:f9:74:9e:c5:1f:5c:
9c:07:58:35:cd:6d:3f:2b:f9:5f:ea:87:e9:91:82:
af:09:99:f6:dc:61:95:dc:ed:84:ad:50:73:08:7e:
7e:a4:34:79:f9:49:9d:74:a9:9d:e5:bf:03:74:be:
5f:3f:97:9d:69:5b:60:e4:6d:47:b1:1f:ed:53:90:
16:74:ea:18:fd:1a:49:a0:04:8a:97:93:13:81:a5:
36:e5:20:67:f4:32:42:65:ae:9d:e9:ff:b4:31:59:
1b:9a:86:63:0c:1a:f3:ec:df:d1:1e:7a:e2:42:be:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:99:F9:27:ED:49:A8:6C:22:A6:D4:DE:B0:31:FB:BE:6E:92:D9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b5::/48
Signature Algorithm: sha256WithRSAEncryption
25:c5:fa:84:e9:7e:1a:c0:d7:3c:82:ad:2a:3c:ce:b5:d8:28:
51:9b:10:71:7c:8d:96:dd:47:42:66:41:74:19:cb:d7:a8:5b:
34:ee:7b:fc:3f:ea:d6:70:dd:2d:8d:99:b0:68:d9:65:10:e8:
70:5f:03:b6:bb:7b:c1:08:49:ae:89:ab:d1:20:51:d4:f5:fd:
6a:e9:7a:80:78:11:64:f5:bd:1f:18:b4:e1:b8:51:38:b8:24:
7b:c1:bf:d1:d2:d8:c6:5e:c3:4d:d3:26:f9:e0:01:e4:fe:15:
f6:f3:64:e9:f2:de:56:fa:b3:f1:c7:44:c2:e1:30:a3:76:47:
f9:7e:bf:93:63:bc:dd:8e:0a:9a:ba:46:5e:83:2f:08:b4:22:
51:84:33:6d:ad:cd:d3:6b:ec:d9:2b:15:c8:81:39:0c:6c:bc:
48:fb:75:66:79:99:50:f9:b6:02:c4:0a:6a:ed:47:42:b5:07:
ad:e8:98:c2:6d:fc:be:2c:a7:2e:fe:da:9e:e8:05:0c:05:df:
6e:77:b1:f9:be:3f:20:5a:7f:20:8e:62:51:ff:c5:be:75:7c:
d9:00:a1:91:57:87:da:d1:cf:a0:cd:31:cd:a4:29:ca:2a:20:
c4:76:3f:9c:cc:fc:53:4d:f1:33:fc:97:c4:9b:30:30:8b:ec:
f7:1d:2f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:27 2025 by rpki-client