Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210370.roa
File: AS210370.roa (raw, json)
Hash identifier: 9fD4S0rmKXNUFX+HuYIdQn3m24gYCbMjvY8rILrB7Y4=
Subject key identifier: 30:C8:E6:3D:AC:2C:D9:78:E6:2F:39:0D:09:B1:05:8C:61:63:58:74
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3BC4454DEB6B1FE3DB798A83C5950E5DA30A9B90
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210370.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 210370
IP address blocks: 2a06:a005:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c4:45:4d:eb:6b:1f:e3:db:79:8a:83:c5:95:0e:5d:a3:0a:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=30C8E63DAC2CD978E62F390D09B1058C61635874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:60:0c:85:48:3a:06:cd:b8:ac:c1:20:67:
ce:a8:e3:84:cc:bd:54:72:fe:40:4b:ea:5d:40:5b:
65:4d:75:97:02:a5:9a:3c:e2:ae:1d:03:fc:d3:d6:
75:4b:69:cd:91:b1:18:13:07:bb:af:ac:51:a7:9f:
32:1b:81:44:d9:e3:42:d7:61:d4:5c:15:3c:9c:72:
8f:ab:d8:3a:78:56:24:b5:e7:35:95:86:07:5d:1a:
33:78:c7:fe:9b:9d:d0:71:0d:d7:51:dc:da:f5:fd:
14:8c:4f:af:9c:72:3d:78:9c:53:89:2c:c3:c1:b0:
15:4c:59:33:b7:9e:3e:f6:89:3e:ae:cd:43:f4:ea:
90:e3:56:c3:66:3e:42:ed:1a:28:62:71:e0:08:da:
09:ca:34:0d:8a:34:9e:48:e0:c9:02:c3:6c:f3:b7:
11:64:8b:0a:0f:ce:e9:f3:b3:c6:05:69:13:72:86:
27:1a:e7:c7:81:c1:9e:93:5e:9a:f5:ba:2e:81:ab:
8f:23:e2:b8:8d:60:f8:7e:2b:42:a0:61:f1:0c:33:
03:13:98:34:05:a1:d8:7d:e6:f5:a3:af:30:fb:3b:
56:40:34:f5:28:28:e6:d5:d6:8f:ca:58:a9:d9:73:
6e:bf:4c:6f:05:4f:c8:a8:1d:b5:01:87:72:ad:e0:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:E6:3D:AC:2C:D9:78:E6:2F:39:0D:09:B1:05:8C:61:63:58:74
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4::/48
Signature Algorithm: sha256WithRSAEncryption
48:3a:68:6c:34:9e:cc:61:07:7a:37:91:a1:f9:b8:9b:3c:e6:
cc:3c:a9:00:86:c5:d1:d2:3d:6e:f3:06:19:dc:dd:e4:c0:62:
ee:7b:86:89:f5:83:b5:6b:c6:4f:90:eb:4a:63:65:e8:0c:4d:
36:a6:b1:82:cc:25:56:b7:3f:0d:a0:47:61:a3:9d:7d:f1:79:
96:95:38:24:5b:61:57:56:a0:36:d1:91:51:57:de:3f:a7:99:
9a:72:e3:e4:f9:72:90:b9:01:a0:b0:23:e0:1e:3c:b4:b9:a8:
3f:79:eb:40:37:ab:4d:bc:38:0c:7d:9e:5f:3a:84:d8:15:c4:
96:d9:79:a7:3b:31:f0:00:4d:92:9b:c8:49:4a:26:22:66:ea:
98:70:41:6f:cb:1f:50:ef:36:e6:bb:e5:49:ef:5a:9b:7d:f0:
e2:98:c6:f5:b0:c2:0e:d6:6e:3e:c0:a0:57:27:2d:a9:ce:dd:
e4:9d:a7:30:52:d9:89:35:ef:51:6b:6d:01:6e:f0:fc:99:87:
86:4c:ca:7e:05:c7:e6:c0:d2:b1:9d:1d:e3:f4:c3:23:ff:7e:
cf:10:63:7e:2b:dc:b4:15:71:88:b8:2f:c0:98:ae:ff:ef:e9:
37:e0:2b:98:49:81:60:05:4a:66:d4:e1:a3:ff:8d:15:e9:97:
c6:59:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org