Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210633.roa
File: AS210633.roa (raw, json)
Hash identifier: h2JPnDrTQkwjjk3AE5bSCsCyHX3mt4eeE4Ztei3UooI=
Subject key identifier: FB:FE:50:BA:D1:BB:EB:37:42:7F:E6:BB:7B:B6:F0:7F:FA:79:02:7D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7122BFC0D4A329CCFA7B7FC1BA5BD5EC6C3A69B6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210633.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 210633
IP address blocks: 2a06:a005:7d0::/44 maxlen: 48
2a06:a005:7e0::/44 maxlen: 48
2a06:a005:7f0::/44 maxlen: 48
2a06:a005:800::/44 maxlen: 48
2a06:a005:810::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:22:bf:c0:d4:a3:29:cc:fa:7b:7f:c1:ba:5b:d5:ec:6c:3a:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=FBFE50BAD1BBEB37427FE6BB7BB6F07FFA79027D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:69:6b:10:ed:85:11:14:d3:cd:0a:1f:9c:
c7:73:cc:fe:95:3c:e1:fc:f1:1d:43:22:c5:f8:a2:
aa:3c:47:8f:2f:40:7c:f9:f3:c5:8c:5f:e2:20:c2:
4c:35:4b:63:d8:6e:11:18:41:38:66:db:50:6c:e5:
52:ce:cb:f8:dc:e3:9d:36:91:fb:af:1e:79:24:66:
6c:a6:6d:68:5c:f7:e2:df:17:90:33:45:cf:3b:c3:
0f:2d:68:bf:bc:33:df:1a:00:70:f7:28:fe:54:99:
20:3b:88:5d:ba:9e:03:93:01:e8:e7:4d:39:92:8a:
ed:5a:38:b3:b8:d7:56:00:d0:8f:9b:5a:df:99:2e:
55:ce:69:1e:fd:8b:9f:8e:0a:4a:a2:ac:fb:21:df:
79:2d:e2:28:96:52:bb:28:95:47:e0:97:d6:6d:ad:
9a:e4:30:9e:18:29:69:c0:37:15:90:ec:ce:64:0b:
b7:2e:2f:4c:46:82:92:7d:50:02:e2:97:d4:6b:cf:
25:0d:0e:46:3d:32:5f:8c:41:a2:00:3d:b4:93:e7:
db:c1:d1:4e:d0:8f:e8:ac:5b:31:d9:33:02:0d:d3:
b7:69:24:1d:89:29:b8:4b:37:a6:ba:b8:b9:4a:a1:
ca:54:e2:ae:3f:6d:5e:31:0e:23:79:77:0e:7f:51:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:50:BA:D1:BB:EB:37:42:7F:E6:BB:7B:B6:F0:7F:FA:79:02:7D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7d0::-2a06:a005:81f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:61:9c:44:17:57:88:51:85:a5:4b:59:e2:52:ab:10:4d:b3:
53:0d:5a:b0:39:bb:fa:2f:f2:20:c0:07:89:0d:46:e6:ae:42:
7d:53:f4:5b:14:fb:67:17:8f:e8:b6:72:09:d3:2f:32:c2:94:
42:c6:bb:9d:82:ea:cd:1f:a4:fa:30:cb:7e:55:43:03:ec:26:
f7:45:d1:02:c3:72:f5:c7:38:e9:b2:f2:23:4f:ba:b9:e4:e2:
e6:f9:65:f0:60:9f:f4:04:2d:0b:84:31:3a:d6:09:6f:8a:09:
4a:b7:41:c3:e0:e9:01:d2:80:c3:02:57:41:95:06:5c:1d:fa:
d5:fe:38:1b:f6:21:bf:f9:69:43:cd:ec:f9:9c:74:dd:b1:7f:
e1:92:c4:0a:e7:a8:1a:d8:82:a6:5b:16:04:3e:a1:ec:2d:9b:
cb:2d:83:46:f4:e6:91:fb:04:fa:c7:4d:b7:f9:2c:fd:65:06:
7c:37:60:0f:c2:fe:ab:10:47:82:a5:1d:14:22:c5:ea:3e:b4:
ad:f0:bb:77:c9:a1:67:0f:45:17:c9:b3:ba:50:be:46:d3:2b:
ca:82:79:08:61:4d:b4:1d:5b:7b:f6:d5:f4:b6:cd:f0:6d:1c:
55:e6:fc:66:81:6c:c3:e1:63:ee:bb:66:35:eb:e0:e5:f6:96:
b9:25:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org