Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210667.roa
File: AS210667.roa (raw, json)
Hash identifier: Mimxv32UhT5jueAnhtR0Eo3Ed6mwtwytvXpaGlbzm2w=
Subject key identifier: D6:C1:2C:FD:D6:74:78:80:4E:99:1F:1C:2D:B1:3A:96:F3:5B:A5:57
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2BA50B342EAFACD446B3E1BA4FB194BDE3C5E9F1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210667.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 210667
IP address blocks: 2a06:a005:2de::/48 maxlen: 48
2a06:a005:1250::/44 maxlen: 48
2a06:a005:1bb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a5:0b:34:2e:af:ac:d4:46:b3:e1:ba:4f:b1:94:bd:e3:c5:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=D6C12CFDD67478804E991F1C2DB13A96F35BA557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:13:64:10:db:8c:f0:d8:b2:9f:b4:68:c7:
6c:8f:b5:1e:a8:67:87:6f:59:96:98:63:bd:6f:03:
ca:90:5b:1a:2b:33:30:96:ba:60:a8:cc:67:8c:3a:
bc:9e:8a:b7:0f:48:eb:1e:2b:cc:a0:7f:45:a1:66:
e3:5f:cc:8d:6b:07:2f:83:e2:72:22:64:10:b7:ec:
8c:32:5a:f4:1b:93:43:74:fc:90:7c:c7:ee:37:52:
1c:8e:03:84:15:4a:1d:e7:14:09:ea:d2:89:5b:49:
9e:ed:bb:69:cb:3f:90:bf:d7:17:26:ac:a3:17:4b:
41:9e:8e:ab:ed:0e:8b:25:f1:87:41:96:e5:c5:6d:
08:68:a1:bf:0e:fd:ff:5c:23:a9:d5:87:82:74:52:
e4:97:86:1f:f3:81:cf:b0:2a:dd:0d:98:be:08:14:
f3:86:4e:62:60:2a:83:d3:38:23:dc:10:f9:e6:ee:
76:bc:85:03:dc:2a:87:ee:f6:9f:13:23:64:80:69:
b8:65:a0:9d:5e:90:2d:6d:a9:53:1d:33:f9:9d:4a:
67:c1:f2:45:ec:c5:e4:1a:77:8d:8f:1f:0a:20:98:
74:aa:99:f2:ec:53:21:85:bb:9b:79:4d:be:c2:d3:
b8:74:56:88:a3:f4:fa:a3:e9:c2:61:0a:31:e8:d6:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:2C:FD:D6:74:78:80:4E:99:1F:1C:2D:B1:3A:96:F3:5B:A5:57
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2de::/48
2a06:a005:1250::/44
2a06:a005:1bb0::/44
Signature Algorithm: sha256WithRSAEncryption
29:a2:a0:46:32:07:fa:db:c3:1c:9b:23:b3:6e:22:a8:e9:9f:
e0:9f:72:28:3a:7d:fe:7f:80:1c:cc:59:08:68:5a:e2:c1:79:
d0:44:4d:fa:9b:59:55:8d:d9:6e:e5:cc:e6:f0:b8:35:7b:76:
1f:9d:23:a6:ff:e2:ed:ee:b9:cb:70:ff:30:6f:e6:9c:46:6b:
45:01:b9:26:36:f0:e9:14:57:12:a7:c9:1f:d6:7d:26:87:14:
67:cb:fa:de:40:ea:71:cf:6c:bc:20:a9:4a:44:46:31:47:6b:
f6:84:d8:a7:b7:4d:8f:0b:b9:2f:e4:fe:64:8c:61:4b:bc:8d:
da:6e:86:ef:4d:b2:b8:ef:88:89:7a:04:47:d2:18:88:af:1e:
71:27:01:2e:d0:a6:a1:c9:b1:1c:16:03:93:11:9a:7f:fe:56:
97:e7:9c:9c:d4:72:0a:3b:8f:73:3d:7d:34:d9:7f:2c:6c:e0:
9b:36:b4:2e:29:5b:02:75:14:38:71:9c:33:51:21:6d:8f:1a:
07:e4:57:37:1c:85:e0:52:3d:dc:e5:0a:62:47:4b:d0:95:f6:
d2:18:dc:f2:cf:aa:d1:9b:8a:e0:40:5b:21:d6:0c:8f:71:e3:
54:e2:1a:6a:a9:1c:e7:9e:fd:58:cf:cd:6e:2c:34:a0:5e:97:
dc:69:ba:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org