Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210387.roa
File: AS210387.roa (raw, json)
Hash identifier: 0SObVfPN730QouJJuXFXTN8TOHqhK/Omqfju0UsfWU8=
Subject key identifier: B3:29:D0:F4:F0:BB:06:DC:87:2F:84:28:59:8C:71:A3:C4:99:1B:FF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 13F9B58B343B5A07162BB2F29F84E6DA82EFE8F6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210387.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 210387
IP address blocks: 2a06:a005:435::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:b5:8b:34:3b:5a:07:16:2b:b2:f2:9f:84:e6:da:82:ef:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=B329D0F4F0BB06DC872F8428598C71A3C4991BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:1b:c8:f0:04:b3:f8:a3:df:92:7d:af:78:
6e:43:34:16:cc:4d:5f:fb:3d:09:63:87:47:84:b5:
f8:72:d6:c7:93:0c:97:73:e2:4d:86:0e:3d:a1:b8:
33:b4:dc:96:1b:2f:16:61:47:04:fa:36:95:f6:6e:
8d:c6:b0:89:24:ef:ef:c3:57:b6:9b:ba:55:d7:99:
37:8b:f1:26:ed:7c:26:c9:45:f7:ec:46:ac:8e:20:
12:1b:d3:32:10:ba:4e:37:f8:6d:0b:a8:d5:76:70:
44:94:f5:c1:2d:f8:30:bf:46:8a:07:b4:fb:ed:d8:
f0:75:ac:d0:53:18:50:00:d1:4b:c0:b8:6e:27:f6:
b6:56:52:c8:67:67:ea:d9:bb:90:be:e4:c5:b8:61:
a1:4e:cf:51:91:0e:ba:71:28:c9:b1:41:f2:50:5d:
d3:1c:af:f8:8d:e3:67:b1:76:8d:5f:e3:1c:9a:70:
9c:a5:19:1a:34:00:5f:b6:56:13:47:7b:2e:4b:a3:
7b:fc:16:63:bf:30:67:e3:3f:4d:74:9f:e1:fd:c2:
31:05:f2:16:3b:83:da:93:42:9e:c8:c9:fd:68:5a:
af:7a:a5:8f:44:d7:d6:2e:31:da:b0:83:3f:ba:68:
ed:04:7e:d0:cc:38:25:99:d9:84:6c:b0:97:e9:52:
f8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:D0:F4:F0:BB:06:DC:87:2F:84:28:59:8C:71:A3:C4:99:1B:FF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:435::/48
Signature Algorithm: sha256WithRSAEncryption
3d:83:37:84:c7:e6:b7:b8:5b:f9:71:d2:5c:f7:b5:fe:ca:b7:
06:ec:10:e6:47:db:81:42:cb:ea:cc:fb:04:e4:84:3b:3e:f2:
8c:d9:e2:0c:65:c6:96:33:b9:64:e4:43:6d:f5:44:f4:85:63:
cb:a6:2d:a0:af:dc:3a:67:94:30:25:07:4a:73:48:74:4e:68:
53:37:f9:9f:f7:38:71:25:a0:28:d6:6d:95:5d:f2:ba:b5:0d:
1c:71:f1:92:e8:b2:62:c2:47:ba:42:91:14:2c:b1:ea:ef:e9:
61:4c:15:99:40:3b:af:71:e3:6f:47:29:0a:ac:4d:a9:72:4a:
0b:a4:6a:22:55:f8:d0:14:1e:f2:5f:87:ec:1d:a4:e2:aa:66:
6d:6e:dc:b6:46:e1:65:1e:22:33:29:c4:96:d5:10:51:b3:8f:
3c:e5:e3:a3:7e:dc:db:cf:a6:be:50:2d:55:4f:ff:ec:23:f0:
64:15:e8:8a:af:84:d2:26:08:70:35:83:4d:16:5c:8d:17:1d:
8e:4b:53:5e:5b:71:fe:26:d9:a4:b5:ed:de:69:57:f2:ee:2b:
d1:96:26:ea:07:eb:8c:df:6c:c3:8c:e9:dc:01:cf:86:7d:73:
28:08:91:37:85:ae:4e:77:a3:f1:e4:3f:ff:e4:cd:63:7a:a3:
6c:bd:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org