Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210461.roa
File: AS210461.roa (raw, json)
Hash identifier: f/FtEM4KmUTzD+uwxn+yCA6S175dNgpi2i0NEuATuBY=
Subject key identifier: EE:B3:40:13:28:1A:57:06:D5:9D:E6:60:E7:BB:6E:29:F0:1C:46:0F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7273F6412BC4265087002FBF2D8D62349BE74040
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210461.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 210461
IP address blocks: 2a06:a005:16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:73:f6:41:2b:c4:26:50:87:00:2f:bf:2d:8d:62:34:9b:e7:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=EEB34013281A5706D59DE660E7BB6E29F01C460F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:77:52:b4:ca:3d:4c:9f:50:f2:8c:8b:51:
5f:66:bd:e0:26:e2:28:96:11:33:6c:ec:27:8a:9b:
91:0d:74:7f:34:1e:90:ba:4b:ee:c0:a9:84:29:24:
c8:6d:a4:09:12:aa:29:d4:af:8d:c4:66:dc:f2:e4:
a0:62:b0:5c:fe:ee:5a:1a:a8:9e:dc:14:be:44:75:
d5:fa:6d:92:b1:18:8c:52:6b:08:c5:73:09:d3:e2:
dd:1a:98:3d:5a:ee:d0:78:69:e1:54:7f:69:62:d5:
fd:5b:4b:59:e8:5d:97:4b:6a:b5:b4:b3:13:db:1a:
bd:b3:b0:3a:ea:43:4a:d0:d2:1a:be:d9:20:26:c1:
45:99:53:46:5a:f1:52:73:74:db:94:cb:32:7c:74:
5c:c1:cb:2d:cd:85:9d:24:fc:c0:f6:70:6f:14:03:
cf:ce:a2:ee:2c:e8:5c:21:ef:52:f5:05:1a:34:26:
50:f1:b9:24:bb:5a:df:11:45:d8:94:7e:53:ff:ac:
68:2a:cc:05:52:a2:c8:46:15:d6:43:83:9d:77:d0:
98:20:bd:af:0d:92:9d:9a:a5:b6:5b:9a:c7:00:c4:
4e:c8:96:af:60:57:1f:cb:5f:1c:37:08:c8:ad:6c:
72:d7:9c:3e:b8:db:fc:d8:d9:29:9e:43:6f:ad:5d:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B3:40:13:28:1A:57:06:D5:9D:E6:60:E7:BB:6E:29:F0:1C:46:0F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:16::/48
Signature Algorithm: sha256WithRSAEncryption
21:11:30:59:05:3b:f8:f3:85:e2:7f:ed:90:04:a8:b2:90:c9:
9d:67:32:32:a4:ab:2d:42:51:13:4a:9f:6e:2c:d5:9a:8f:67:
8b:a2:99:ec:ad:77:7e:34:e9:7b:87:28:5b:b9:0e:90:fb:ba:
4e:f7:b8:b4:56:75:18:70:c5:9f:45:2a:5d:fb:5b:f6:24:11:
67:8f:42:f3:1a:d0:bd:44:5b:f0:ee:3b:13:31:e5:0b:2e:2f:
3b:0e:e4:ed:79:51:6b:3d:9f:0d:21:aa:c7:5a:75:41:1d:7b:
47:d4:f9:d3:92:3e:b3:62:b8:c6:d3:bc:e5:90:7e:46:3a:b4:
e6:ed:3f:b4:64:da:ac:61:e9:ba:75:ef:f7:70:e1:9e:6d:c5:
0b:b1:14:42:2a:45:a0:82:bf:ab:dd:51:b9:77:87:2d:56:59:
af:1a:6d:81:26:52:d3:57:f1:2a:fd:6f:7a:a8:17:a4:de:07:
cf:81:06:5c:d0:75:6d:fa:68:ed:b1:60:4e:41:67:b5:c0:ab:
e6:d6:cd:29:35:dc:f6:6d:b3:7f:f3:93:05:67:12:ae:5c:46:
82:9b:78:2b:8d:fc:07:21:ff:84:f3:e7:51:b8:4c:58:38:94:
c2:dc:2f:ac:8b:c7:56:cf:8e:4b:c6:ad:8b:53:4b:a7:1e:d8:
57:e9:e4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:42 2025 by rpki-client