Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210537.roa
File: AS210537.roa (raw, json)
Hash identifier: EhPV6M5Uq2wNaq0BQrMs5m3bYJ017rRrgg/gNlrhaW8=
Subject key identifier: 40:4B:F3:4F:DB:F5:1A:63:09:0D:DB:8A:04:56:32:F8:C6:47:EC:B9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4A35FC34E52A2C43366C5E85018E9A5B07E41AF2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210537.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 210537
IP address blocks: 2a06:a005:d2d::/48 maxlen: 48
2a06:a005:1507::/48 maxlen: 48
2a06:a005:1508::/48 maxlen: 48
2a06:a005:20c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:35:fc:34:e5:2a:2c:43:36:6c:5e:85:01:8e:9a:5b:07:e4:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=404BF34FDBF51A63090DDB8A045632F8C647ECB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:f9:97:31:c4:f7:38:83:7a:0c:ce:52:68:
b4:ba:12:2e:45:0c:23:c3:b5:f7:6e:02:15:6d:a0:
d0:dc:20:4b:43:e7:1b:7d:70:d8:62:58:c7:81:74:
ec:d2:5f:14:93:7a:59:3d:dd:aa:7f:e0:d2:88:2a:
2b:1e:a9:2d:40:46:f8:bd:a5:f1:72:f9:8a:14:f7:
9a:5e:e1:20:ea:e1:c2:9c:bc:55:1e:9d:33:a8:f0:
14:8a:f1:54:f1:7f:58:48:95:b5:6b:a1:d3:1b:e1:
13:57:7a:14:7e:34:bb:9d:7a:35:4a:e3:07:ba:2e:
77:8d:dc:f6:8b:8e:29:c8:38:6d:ad:5c:a6:2e:d1:
0a:84:e4:5a:1f:4d:62:0d:06:e9:83:da:a5:c7:7c:
7b:9a:e5:c2:f4:59:27:76:60:8e:96:8f:72:db:2e:
85:78:fd:bb:d6:42:a5:ad:10:6d:a2:ab:c2:48:4a:
ca:c0:b9:02:9b:4d:55:69:cf:af:91:44:ce:59:e8:
89:88:c5:29:22:b4:9d:7a:58:aa:21:78:05:84:7b:
68:b1:a0:63:77:d6:f9:95:ac:99:07:8c:3d:03:82:
eb:a8:e8:f3:b1:b2:e2:51:49:02:4a:ee:77:ce:10:
49:9b:10:e5:4a:e9:39:7a:5c:d3:4f:7f:f1:47:85:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4B:F3:4F:DB:F5:1A:63:09:0D:DB:8A:04:56:32:F8:C6:47:EC:B9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2d::/48
2a06:a005:1507::-2a06:a005:1508:ffff:ffff:ffff:ffff:ffff
2a06:a005:20c0::/44
Signature Algorithm: sha256WithRSAEncryption
2d:fd:2e:65:31:d7:3b:87:3f:bd:04:c2:6e:66:fe:41:fd:13:
6d:ff:70:a4:ca:c2:fc:21:5c:6c:80:6a:be:62:14:65:b8:d4:
b9:5a:e4:7a:7e:f4:da:a6:94:9d:36:37:1d:e0:76:67:9a:fa:
68:8a:20:ff:7c:c5:15:18:bb:e9:49:0d:65:fd:06:65:4d:99:
1f:a2:ae:35:d2:7c:49:9b:9b:dd:00:78:ce:8f:9f:c8:78:65:
d5:92:35:a7:33:54:7d:c9:9c:92:3c:f1:dc:2a:24:ba:11:96:
cd:5b:6d:1f:0a:5c:b7:aa:46:6e:db:37:78:b9:ea:2a:c6:88:
12:62:c7:ee:e4:db:ac:2b:e9:8f:fd:fd:17:d4:e4:d5:40:f5:
98:c7:e7:77:57:34:f8:ad:da:c3:06:17:0d:1a:cc:e0:05:33:
95:e2:a9:de:7f:d7:78:c4:3e:bb:37:16:ac:40:c9:5e:f5:e3:
b9:63:d5:be:6d:0f:7c:73:ff:89:e0:29:c0:b6:8b:06:3a:34:
6c:93:03:2a:6c:60:49:2d:eb:0e:d7:85:15:76:e7:4b:13:5d:
59:29:b6:80:ad:b1:ef:cc:a7:8a:21:03:e6:9b:29:b1:65:6c:
06:29:ee:cf:c0:3e:3e:4d:21:64:8e:32:f3:0b:92:71:fa:1b:
5e:2f:16:bc
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUSjX8NOUqLEM2bF6FAY6aWwfkGvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjZaFw0yMzEyMzEyMzU5MjZaMDMxMTAvBgNV
BAMTKDQwNEJGMzRGREJGNTFBNjMwOTBEREI4QTA0NTYzMkY4QzY0N0VDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5evmXMcT3OIN6DM5SaLS6Ei5F
DCPDtfduAhVtoNDcIEtD5xt9cNhiWMeBdOzSXxSTelk93ap/4NKIKiseqS1ARvi9
pfFy+YoU95pe4SDq4cKcvFUenTOo8BSK8VTxf1hIlbVrodMb4RNXehR+NLudejVK
4we6LneN3PaLjinIOG2tXKYu0QqE5FofTWINBumD2qXHfHua5cL0WSd2YI6Wj3Lb
LoV4/bvWQqWtEG2iq8JISsrAuQKbTVVpz6+RRM5Z6ImIxSkitJ16WKoheAWEe2ix
oGN31vmVrJkHjD0Dguuo6POxsuJRSQJK7nfOEEmbEOVK6Tl6XNNPf/FHhQFtAgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQUQEvzT9v1GmMJDduKBFYy+MZH7LkwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwNTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKgag
BQ0tMBIDBwAqBqAFFQcDBwAqBqAFFQgDBwQqBqAFIMAwDQYJKoZIhvcNAQELBQAD
ggEBAC39LmUx1zuHP70Ewm5m/kH9E23/cKTKwvwhXGyAar5iFGW41Lla5Hp+9Nqm
lJ02Nx3gdmea+miKIP98xRUYu+lJDWX9BmVNmR+irjXSfEmbm90AeM6Pn8h4ZdWS
NaczVH3JnJI88dwqJLoRls1bbR8KXLeqRm7bN3i56irGiBJix+7k26wr6Y/9/RfU
5NVA9ZjH53dXNPit2sMGFw0azOAFM5Xiqd5/13jEPrs3FqxAyV7147lj1b5tD3xz
/4ngKcC2iwY6NGyTAypsYEkt6w7XhRV250sTXVkptoCtse/Mp4ohA+abKbFlbAYp
7s/APj5NIWSOMvMLknH6G14vFrw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:11 2025 by rpki-client