Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: 9LDGVUr4mgxIOhLYjsSRqNVnJE3+b2z0B+2W4pLlm6Q=
Subject key identifier: 07:2E:70:49:E2:60:C3:29:73:57:05:4B:E7:DF:94:37:48:4C:BA:75
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 028D083A4409D66A9F1A23C0E3E0E7A57E27D47B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210576.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 210576
IP address blocks: 2a06:a005:5fc::/46 maxlen: 48
2a06:a005:1100::/44 maxlen: 48
2a06:a005:1110::/44 maxlen: 48
2a06:a005:1120::/44 maxlen: 48
2a06:a005:1130::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8d:08:3a:44:09:d6:6a:9f:1a:23:c0:e3:e0:e7:a5:7e:27:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=072E7049E260C3297357054BE7DF9437484CBA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:51:b4:52:70:eb:7d:0a:66:64:4a:67:3c:94:
a3:3a:20:39:56:56:46:d3:8d:d6:c6:73:cd:ea:3f:
66:b9:8c:09:b7:b8:c4:fc:e6:6d:ca:9b:98:07:ad:
01:ae:25:ac:4b:e6:ad:93:2e:af:5d:83:35:53:05:
c3:97:64:2a:46:b8:57:6c:42:29:8d:09:28:ee:af:
83:12:5f:bd:a6:17:0b:92:10:19:23:dd:00:f2:eb:
95:81:59:71:49:7d:56:f7:c3:dd:0d:64:9e:6e:03:
00:65:a4:91:d3:2b:f0:6c:61:64:57:f9:1e:a1:e4:
65:cb:ba:5b:67:4c:e3:06:1e:a4:8a:07:b9:dd:2a:
ca:05:72:b1:9d:de:f0:c0:80:4a:f5:20:e5:9e:8c:
81:d8:b9:6d:72:6c:93:1d:41:9b:f3:7f:97:91:f2:
8f:15:f8:9f:5c:3e:ac:b9:c2:50:4f:93:e3:4d:2f:
bd:bf:d5:bb:3c:61:c6:e9:af:78:b5:e3:fa:eb:12:
b5:34:e9:c8:2c:fb:00:fb:a4:95:25:05:53:37:37:
c1:9a:40:c9:79:ca:52:75:57:a6:9b:71:0d:54:61:
8b:58:e3:50:0a:34:c4:93:eb:8f:b5:af:0b:d4:18:
be:b5:2a:a4:d5:d7:be:2b:38:b6:75:26:2a:25:8b:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:70:49:E2:60:C3:29:73:57:05:4B:E7:DF:94:37:48:4C:BA:75
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5fc::/46
2a06:a005:1100::/42
Signature Algorithm: sha256WithRSAEncryption
0b:ec:8f:8d:bc:83:e4:1f:6d:2d:9b:ba:ea:e9:05:7f:ac:d5:
bb:95:0c:92:96:21:fe:69:10:92:ce:51:71:78:d0:cc:01:b0:
16:d6:60:d8:90:10:a6:98:db:2b:0a:62:9d:90:14:2c:fd:1f:
d4:16:0a:72:c4:a4:aa:39:e3:16:f4:b1:06:4f:67:7e:77:3a:
c0:21:83:d8:9a:c7:dd:65:75:b6:e2:a2:a0:f8:cf:2f:dd:31:
ef:15:34:bb:0d:9d:73:95:4b:b9:a1:55:a3:a7:a2:a5:47:c0:
f7:2b:09:11:9e:14:dc:52:ba:46:ff:41:a2:90:ae:e7:df:56:
0f:24:51:1e:e4:e8:d6:f9:e7:ee:19:0f:44:87:9c:26:63:90:
e7:c3:e0:c7:bb:a5:9f:6a:b1:ba:24:7f:6c:8a:bd:bf:59:67:
c2:54:e9:e9:2b:b8:3e:fe:f2:20:18:f8:10:de:5f:90:99:e0:
b1:7f:3b:af:09:1b:c6:95:66:c7:db:25:6d:49:d9:66:5b:5d:
f1:63:21:05:19:2a:36:53:d1:ed:92:8f:12:05:ba:ef:5c:3e:
52:8a:1d:ce:3b:43:5c:f9:13:48:23:4f:82:ac:b2:a3:7b:1c:
cc:35:96:c7:79:c0:08:cd:ff:ba:bc:54:cb:8e:00:ea:30:91:
d3:be:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org