Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210761.roa
File: AS210761.roa (raw, json)
Hash identifier: qrEIN+BetvU4gCTFDmvQSMGoa+ULh5EL0ucruWI2A00=
Subject key identifier: D3:DF:FA:37:B7:40:71:AF:99:9C:BC:AF:58:43:12:41:48:2D:D2:49
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3E01B08D06877B326D062906E07BFB12F1334E4A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210761.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 210761
IP address blocks: 2a06:a005:2d1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:01:b0:8d:06:87:7b:32:6d:06:29:06:e0:7b:fb:12:f1:33:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=D3DFFA37B74071AF999CBCAF58431241482DD249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:10:21:50:9a:79:c8:f0:0b:e0:b8:f9:7b:
cc:9d:1b:ee:1e:11:75:51:df:f6:79:67:ea:e5:27:
6d:86:98:6a:6a:87:54:37:c4:91:6e:0e:6d:6c:2c:
dc:1b:31:bf:18:1e:2e:0d:80:ef:c0:ac:1a:a5:c6:
48:0f:52:ea:2a:28:5b:e0:60:a4:a5:9c:4c:e9:3b:
60:3d:1d:dc:49:a8:b4:88:4c:04:ce:99:85:de:b5:
6f:7b:04:7d:71:00:da:d3:57:1e:41:e9:83:7f:31:
96:7b:ac:ba:4c:da:4d:86:5d:95:75:3f:51:80:fc:
01:04:98:51:c7:9e:5f:77:04:ea:8b:cc:30:8e:6b:
ca:9c:37:04:74:f7:6f:3a:78:1c:a6:5a:24:f7:79:
2d:70:4f:f3:25:1f:25:82:0e:01:60:9b:5c:32:b2:
2d:9f:ff:c6:4e:23:fa:6e:12:98:e0:40:29:16:b7:
a5:32:68:66:de:2a:0a:6d:19:50:0e:88:9e:a2:a1:
07:5c:1b:40:d5:9b:7b:b2:af:94:de:21:2a:5a:92:
c0:4d:3f:45:01:4c:ec:06:2a:92:fe:25:12:39:f4:
8f:cb:ef:21:17:2a:51:9a:24:de:3b:6b:3f:d4:b8:
e7:7d:f8:5c:70:a5:de:4b:bf:b3:1a:3a:fe:96:1a:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:FA:37:B7:40:71:AF:99:9C:BC:AF:58:43:12:41:48:2D:D2:49
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210761.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d1::/48
Signature Algorithm: sha256WithRSAEncryption
36:22:b8:25:88:1d:6a:2e:c7:64:22:a7:e3:96:1b:9a:bb:73:
e6:b5:f3:4a:ad:59:5b:f0:fe:05:88:b1:13:56:75:da:b0:62:
99:e1:10:82:41:6f:6c:6f:30:0b:1f:46:71:6f:d9:35:39:f5:
95:31:3b:82:7d:07:f5:5e:fc:c7:fa:3f:a4:2a:93:a8:9c:06:
ed:54:29:ca:15:17:3b:92:12:9f:ce:f5:03:8f:f0:1e:67:9a:
38:b0:5c:27:51:43:4d:3f:63:a5:d0:dc:81:15:d0:c2:98:ad:
c4:c4:3b:74:cd:f7:2f:b2:e1:e1:93:67:31:2c:2e:c4:04:f8:
61:f4:16:b1:89:e9:59:1a:62:35:c8:40:78:40:f5:e0:9c:40:
0c:34:c7:e6:49:90:d6:ee:13:b1:43:7f:30:f2:8d:7e:1f:2f:
da:e6:6e:e2:23:b4:1a:99:ce:41:77:1a:ce:80:10:c6:4f:3c:
1d:cc:78:37:98:3b:7f:e6:7b:41:9a:f0:ac:8b:d3:b7:57:a8:
5b:c6:0d:76:bc:31:c0:33:84:6f:c6:9c:d3:b7:b3:30:3d:aa:
f3:a8:51:2c:49:c2:a3:a5:85:a2:50:cf:4c:ce:0d:f2:76:b3:
74:f3:99:65:65:7f:34:dd:44:18:9a:95:0b:bb:88:38:cb:01:
cb:a7:a3:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUPgGwjQaHezJtBikG4Hv7EvEzTkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTZaFw0yMzEyMzEyMzU5MTZaMDMxMTAvBgNV
BAMTKEQzREZGQTM3Qjc0MDcxQUY5OTlDQkNBRjU4NDMxMjQxNDgyREQyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknBAhUJp5yPAL4Lj5e8ydG+4e
EXVR3/Z5Z+rlJ22GmGpqh1Q3xJFuDm1sLNwbMb8YHi4NgO/ArBqlxkgPUuoqKFvg
YKSlnEzpO2A9HdxJqLSITATOmYXetW97BH1xANrTVx5B6YN/MZZ7rLpM2k2GXZV1
P1GA/AEEmFHHnl93BOqLzDCOa8qcNwR09286eBymWiT3eS1wT/MlHyWCDgFgm1wy
si2f/8ZOI/puEpjgQCkWt6UyaGbeKgptGVAOiJ6ioQdcG0DVm3uyr5TeISpaksBN
P0UBTOwGKpL+JRI59I/L7yEXKlGaJN47az/UuOd9+Fxwpd5Lv7MaOv6WGgfvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU09/6N7dAca+ZnLyvWEMSQUgt0kkwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwNzYxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQLRMA0GCSqGSIb3DQEBCwUAA4IBAQA2IrgliB1qLsdkIqfjlhuau3PmtfNKrVlb
8P4FiLETVnXasGKZ4RCCQW9sbzALH0Zxb9k1OfWVMTuCfQf1XvzH+j+kKpOonAbt
VCnKFRc7khKfzvUDj/AeZ5o4sFwnUUNNP2Ol0NyBFdDCmK3ExDt0zfcvsuHhk2cx
LC7EBPhh9BaxielZGmI1yEB4QPXgnEAMNMfmSZDW7hOxQ38w8o1+Hy/a5m7iI7Qa
mc5BdxrOgBDGTzwdzHg3mDt/5ntBmvCsi9O3V6hbxg12vDHAM4RvxpzTt7MwParz
qFEsScKjpYWiUM9Mzg3ydrN085llZX803UQYmpULu4g4ywHLp6MS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org