Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210562.roa
File: AS210562.roa (raw, json)
Hash identifier: iJVRjH0Rx3dSX+LcJ+NI88IsVvRxkD5DPJW0cwt+Spo=
Subject key identifier: 2E:2D:3B:2D:87:45:08:28:DB:A1:5B:E5:27:2C:5B:96:BD:B3:FC:4D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5CA61562D7A1AB12B6EEBB14286392E125DF4E2E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210562.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 210562
IP address blocks: 2a06:a005:1c7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a6:15:62:d7:a1:ab:12:b6:ee:bb:14:28:63:92:e1:25:df:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=2E2D3B2D87450828DBA15BE5272C5B96BDB3FC4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:4a:14:ea:da:70:9a:39:37:85:0d:00:72:
f5:f9:83:8e:55:71:bb:60:20:90:6b:7b:fe:6d:43:
ae:c9:75:80:b5:d4:83:c0:47:70:68:8a:bd:b8:28:
30:d2:49:85:33:39:15:6b:7d:af:00:30:ce:00:52:
5f:01:fa:6f:77:88:af:7b:1a:7b:bb:63:45:8b:18:
29:7a:95:09:f2:dc:10:73:2f:e7:a2:88:ab:87:b7:
b1:b0:51:81:a6:ff:c9:86:42:52:13:04:c2:51:fb:
4e:f2:cd:0d:c5:8b:1d:4f:18:29:59:01:a9:fb:5c:
9c:79:68:1c:82:66:e9:10:b1:26:95:df:f0:2f:30:
e9:17:fe:f2:f8:8b:42:66:42:aa:af:51:f5:e3:7f:
d6:a7:03:7c:88:9c:d6:b6:97:35:c2:3c:29:9d:23:
2c:4a:e8:bf:52:3e:64:75:59:a6:19:b0:6b:88:a7:
0b:bd:ed:63:63:e8:82:5e:19:76:47:79:32:53:34:
0c:df:86:1c:6b:eb:51:17:6c:56:8b:79:38:80:0b:
16:6b:80:4d:26:46:0a:d9:b4:74:c2:0d:ea:2b:43:
3a:cf:24:1e:04:09:8d:c1:ea:80:33:6b:b4:a1:c4:
d2:9e:f7:68:09:ea:f6:62:99:97:9d:4f:88:d1:9f:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2D:3B:2D:87:45:08:28:DB:A1:5B:E5:27:2C:5B:96:BD:B3:FC:4D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210562.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7d::/48
Signature Algorithm: sha256WithRSAEncryption
57:98:71:79:d1:03:15:ec:5e:1f:ea:0b:2a:a8:5f:72:0e:6d:
f5:9f:82:c4:51:42:0d:73:80:6a:cf:dc:3c:84:e0:d7:66:16:
d1:59:eb:72:6b:4a:dd:16:25:87:2d:cd:39:29:49:34:68:6c:
ae:a1:2f:d4:e7:30:65:6b:bd:7e:ea:8f:fc:ab:d8:56:68:7b:
1b:80:dc:c0:81:db:18:83:4c:c3:1a:43:f8:cd:78:bf:a8:fc:
6a:a5:e4:28:ce:93:e2:07:23:9c:de:b9:a3:9c:cb:5c:24:1c:
aa:7c:14:81:12:72:1d:7b:57:ef:5c:1d:53:a5:db:2c:9f:b5:
98:9c:b7:f3:6c:ad:1d:5b:86:b4:c6:11:21:74:73:98:c5:3b:
09:c8:ec:fe:55:95:a5:85:31:c2:eb:b7:4d:09:1f:fe:26:5d:
e9:a1:86:62:30:49:88:11:36:5d:b1:82:0b:64:10:45:4d:99:
f6:1e:21:9b:c3:26:06:9a:9d:f0:62:fe:d1:3b:49:e8:e1:1d:
7c:af:e5:3d:8e:a8:f2:95:4b:48:28:82:04:55:69:fe:77:e3:
8b:ca:b2:9d:6b:90:85:9d:2c:20:64:ce:fe:9b:f9:03:61:e1:
68:50:41:86:0b:5c:52:96:5d:f0:7f:2e:47:28:40:e5:50:1b:
d0:99:54:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUXKYVYtehqxK27rsUKGOS4SXfTi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTlaFw0yMzEyMzEyMzU5MTlaMDMxMTAvBgNV
BAMTKDJFMkQzQjJEODc0NTA4MjhEQkExNUJFNTI3MkM1Qjk2QkRCM0ZDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxEoU6tpwmjk3hQ0AcvX5g45V
cbtgIJBre/5tQ67JdYC11IPAR3Boir24KDDSSYUzORVrfa8AMM4AUl8B+m93iK97
Gnu7Y0WLGCl6lQny3BBzL+eiiKuHt7GwUYGm/8mGQlITBMJR+07yzQ3Fix1PGClZ
Aan7XJx5aByCZukQsSaV3/AvMOkX/vL4i0JmQqqvUfXjf9anA3yInNa2lzXCPCmd
IyxK6L9SPmR1WaYZsGuIpwu97WNj6IJeGXZHeTJTNAzfhhxr61EXbFaLeTiACxZr
gE0mRgrZtHTCDeorQzrPJB4ECY3B6oAza7ShxNKe92gJ6vZimZedT4jRn/GdAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQULi07LYdFCCjboVvlJyxblr2z/E0wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwNTYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BRx9MA0GCSqGSIb3DQEBCwUAA4IBAQBXmHF50QMV7F4f6gsqqF9yDm31n4LEUUIN
c4Bqz9w8hODXZhbRWetya0rdFiWHLc05KUk0aGyuoS/U5zBla71+6o/8q9hWaHsb
gNzAgdsYg0zDGkP4zXi/qPxqpeQozpPiByOc3rmjnMtcJByqfBSBEnIde1fvXB1T
pdssn7WYnLfzbK0dW4a0xhEhdHOYxTsJyOz+VZWlhTHC67dNCR/+Jl3poYZiMEmI
ETZdsYILZBBFTZn2HiGbwyYGmp3wYv7RO0no4R18r+U9jqjylUtIKIIEVWn+d+OL
yrKda5CFnSwgZM7+m/kDYeFoUEGGC1xSll3wfy5HKEDlUBvQmVTA
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org