Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210630.roa
File: AS210630.roa (raw, json)
Hash identifier: oKuYR5nrgW3CN75PHSuMR5AVULTNEWIS0vJ+O+I9RMQ=
Subject key identifier: EE:F9:76:65:3D:D0:6D:DF:8D:F2:51:B3:C5:83:2E:BA:8E:71:A5:43
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6841CF044505D5C107207FF6D72419CB9F3A3E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210630.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 210630
IP address blocks: 2a06:a005:15d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:41:cf:04:45:05:d5:c1:07:20:7f:f6:d7:24:19:cb:9f:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=EEF976653DD06DDF8DF251B3C5832EBA8E71A543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:96:80:82:b8:87:ca:73:af:33:b7:4a:f6:
5c:ff:f6:85:3e:b1:d7:de:f9:72:0d:38:e3:fb:ee:
f7:15:07:e8:1b:a3:aa:9f:de:23:a3:07:76:a8:85:
12:39:36:60:8f:bb:8a:bb:5d:08:96:90:3f:2b:e1:
bd:0a:bd:7c:9c:cb:6d:1d:8f:9b:0c:6f:45:e7:46:
74:03:c6:08:d1:79:44:34:95:3c:d7:66:4b:b4:68:
9b:f8:70:38:15:9f:d1:77:00:6a:b9:9c:b9:9d:7c:
60:63:ae:df:da:e0:c9:67:e9:db:bd:e7:d0:e6:7b:
bc:8c:6e:ea:f7:db:ed:1b:01:ee:fb:c3:37:a1:b6:
d7:b6:04:f8:33:e9:19:a0:96:a3:3e:e3:83:ac:56:
d0:ae:81:d2:64:2f:b6:65:7e:a3:d5:ab:40:80:53:
5c:57:ae:66:70:ba:60:5a:33:2c:9e:ad:77:fb:00:
62:72:97:6b:2b:20:c2:5c:97:5e:af:1e:16:f5:c9:
e7:87:4c:06:0f:f7:c0:cf:cf:c6:83:be:cb:ce:d5:
ba:97:bb:11:09:54:2e:6f:a5:8c:9e:74:56:d9:d2:
24:a0:3f:e8:b0:33:bb:64:b5:17:4d:86:37:61:42:
13:9d:84:85:00:e1:71:fb:7e:bd:25:71:42:2d:62:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:76:65:3D:D0:6D:DF:8D:F2:51:B3:C5:83:2E:BA:8E:71:A5:43
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15d1::/48
Signature Algorithm: sha256WithRSAEncryption
56:7b:47:2d:1b:85:22:1a:ea:4b:f0:78:da:a8:f4:7d:ea:84:
08:83:0b:ba:08:94:5e:56:e0:c7:33:8b:a0:8c:80:89:6e:c1:
41:c8:74:5b:e4:33:d4:df:6c:5d:d7:c2:d8:9c:c6:07:aa:25:
a0:32:0f:46:45:90:e2:2f:98:e7:d6:37:0d:d1:b9:2f:e9:98:
99:70:33:a5:cc:1d:cd:11:78:15:cd:5c:3b:3a:dc:38:d0:bc:
be:8a:a6:bd:74:5e:9f:42:b0:e9:0c:c4:80:14:6f:94:7f:29:
73:57:74:72:ab:f8:75:62:c1:c5:e2:8b:60:57:68:26:43:78:
5b:8b:92:9a:cb:eb:42:04:2f:c8:18:f7:2a:cc:4d:8b:2f:a0:
1a:42:14:ca:a0:b2:e0:2b:cb:2e:b6:ad:9c:68:9b:c4:f9:ac:
76:c1:73:44:04:78:8d:78:35:95:77:3c:14:c9:32:30:76:b7:
fd:e1:04:4e:20:bd:ad:da:6e:3d:71:0e:50:b9:4b:55:15:41:
c4:ba:85:74:d6:e2:a6:bd:56:63:05:37:a8:7c:40:b6:7b:e4:
71:1b:35:b6:aa:19:09:41:13:d8:4c:b1:bf:83:d6:5c:db:50:
c0:4d:97:1c:b6:f0:77:cf:c5:08:2b:85:22:28:45:b1:04:e4:
08:8d:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org