Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210490.roa
File: AS210490.roa (raw, json)
Hash identifier: chXlwPagnCKMJqP4haWmv/oWn8nt0wDNvus4pBwImM0=
Subject key identifier: 68:BE:01:1C:7B:63:50:55:28:35:34:DE:73:85:90:02:19:A5:EC:87
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 307B1AA12EC4682756606CB09089EB6E4E594A07
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210490.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 210490
IP address blocks: 2a06:a005:2190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7b:1a:a1:2e:c4:68:27:56:60:6c:b0:90:89:eb:6e:4e:59:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=68BE011C7B635055283534DE7385900219A5EC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cf:de:58:4c:10:48:fe:7c:11:68:65:32:8a:
4a:f5:e4:93:20:c4:67:3d:d0:ac:29:46:87:08:1b:
3b:69:8e:d9:1f:d0:cd:a6:78:4d:e8:a4:64:8f:d4:
3e:f0:6d:95:2c:33:a3:60:5e:e1:09:94:f9:95:53:
13:c3:0c:f7:5b:32:4a:e6:4f:d1:0d:40:1e:3b:21:
b8:1e:5c:7a:a6:0f:4b:32:8a:b3:e4:f2:d3:02:dd:
2d:ba:1e:e5:2d:1d:ee:d2:bd:ca:76:e0:c6:21:8f:
17:45:67:c8:b4:d5:17:2f:54:67:01:44:66:51:b7:
2b:f8:21:f4:49:53:9b:3b:24:d4:99:c8:56:f1:9e:
8c:63:84:89:0c:2b:e0:93:c8:2c:69:57:5c:6e:ef:
a3:17:25:b8:3b:0f:3a:ec:d3:f8:ff:3c:84:64:36:
c8:89:0a:57:e4:a3:2d:68:56:fb:3f:3f:12:5d:d1:
0f:19:ed:f2:56:34:5c:79:59:93:59:3e:b2:b6:3d:
fa:70:09:fc:7b:3d:d5:c4:1e:7b:17:a1:4e:31:a0:
ff:61:df:47:14:2f:b6:81:85:f7:98:d2:6b:e3:2e:
b9:39:f7:44:fb:83:a4:d9:64:d7:c5:a8:12:5a:d3:
88:41:18:a5:15:b8:3b:0d:44:76:51:09:51:60:a8:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BE:01:1C:7B:63:50:55:28:35:34:DE:73:85:90:02:19:A5:EC:87
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2190::/44
Signature Algorithm: sha256WithRSAEncryption
2f:6b:78:7f:de:10:71:d9:2c:fd:74:45:15:6b:7d:2f:8d:cf:
e1:c8:77:5b:49:c4:29:fa:a8:cf:fb:77:c4:62:a1:ed:e3:a7:
2e:51:a6:72:c1:b1:07:e2:65:24:58:ee:c0:cd:55:26:53:c8:
5f:5d:33:1f:23:0c:f0:60:5e:05:57:4f:28:39:61:22:10:08:
dd:19:79:94:a1:2c:e1:38:14:35:e8:44:c8:b3:6c:72:36:ea:
bd:06:06:2d:5b:6b:e9:33:2f:de:df:c6:11:a2:a8:5a:8a:ad:
74:7a:b3:01:56:a4:62:b9:c6:34:30:6e:23:b9:02:bd:61:73:
5c:94:d6:0d:d7:e1:35:14:1a:6c:20:1b:45:de:43:01:e1:90:
46:9e:2d:7c:0d:f6:41:c8:b9:50:ab:ab:f9:5b:b4:92:94:76:
c7:f9:9c:fb:db:58:29:39:a4:34:87:94:62:e7:95:18:bb:16:
be:ff:7a:0b:d2:d8:43:95:1e:87:9b:8f:c8:bc:0c:ca:3c:8d:
a0:e6:86:1e:2a:3e:60:82:21:7f:32:8c:60:21:7c:e4:5d:60:
61:66:ee:8b:28:32:80:be:ea:8b:d5:0e:7c:03:ec:d5:5c:6d:
9d:86:87:c6:65:fa:52:b6:08:5c:65:31:5c:ad:bd:9b:0c:b1:
fe:a1:04:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMHsaoS7EaCdWYGywkInrbk5ZSgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTRaFw0yMzEyMzEyMzU5MTRaMDMxMTAvBgNV
BAMTKDY4QkUwMTFDN0I2MzUwNTUyODM1MzRERTczODU5MDAyMTlBNUVDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyz95YTBBI/nwRaGUyikr15JMg
xGc90KwpRocIGztpjtkf0M2meE3opGSP1D7wbZUsM6NgXuEJlPmVUxPDDPdbMkrm
T9ENQB47IbgeXHqmD0syirPk8tMC3S26HuUtHe7Svcp24MYhjxdFZ8i01RcvVGcB
RGZRtyv4IfRJU5s7JNSZyFbxnoxjhIkMK+CTyCxpV1xu76MXJbg7Dzrs0/j/PIRk
NsiJClfkoy1oVvs/PxJd0Q8Z7fJWNFx5WZNZPrK2PfpwCfx7PdXEHnsXoU4xoP9h
30cUL7aBhfeY0mvjLrk590T7g6TZZNfFqBJa04hBGKUVuDsNRHZRCVFgqPXDAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUaL4BHHtjUFUoNTTec4WQAhml7IcwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwNDkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BSGQMA0GCSqGSIb3DQEBCwUAA4IBAQAva3h/3hBx2Sz9dEUVa30vjc/hyHdbScQp
+qjP+3fEYqHt46cuUaZywbEH4mUkWO7AzVUmU8hfXTMfIwzwYF4FV08oOWEiEAjd
GXmUoSzhOBQ16ETIs2xyNuq9BgYtW2vpMy/e38YRoqhaiq10erMBVqRiucY0MG4j
uQK9YXNclNYN1+E1FBpsIBtF3kMB4ZBGni18DfZByLlQq6v5W7SSlHbH+Zz721gp
OaQ0h5Ri55UYuxa+/3oL0thDlR6Hm4/IvAzKPI2g5oYeKj5ggiF/MoxgIXzkXWBh
Zu6LKDKAvuqL1Q58A+zVXG2dhofGZfpStghcZTFcrb2bDLH+oQQL
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:40 2025 by rpki-client