Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210836.roa
File: AS210836.roa (raw, json)
Hash identifier: nEHZfllKTmEFgq0iCB2YDqpadBj5YKUxt6l315rM8Ng=
Subject key identifier: 8F:BC:66:20:5A:7A:AA:61:8B:B5:87:AB:8A:93:96:62:04:E4:01:CA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5B423BDBF21D49EF8E74AB31730D25472C509F82
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210836.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 210836
IP address blocks: 2a06:a005:5bc::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:42:3b:db:f2:1d:49:ef:8e:74:ab:31:73:0d:25:47:2c:50:9f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=8FBC66205A7AAA618BB587AB8A93966204E401CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:8d:fa:ee:42:9b:2d:d8:78:d0:fe:44:9c:
30:ad:ab:df:fe:e4:fd:d6:91:9a:7a:80:96:d6:08:
ac:95:cf:a0:b1:d6:1c:53:3d:b3:1d:3c:bc:27:a8:
f0:7e:0b:c1:48:b8:af:39:b1:b4:36:3b:d0:89:e6:
76:68:38:b4:fa:4d:7f:2e:46:bb:ea:41:51:70:5d:
f6:8e:ee:d4:db:af:06:02:74:de:e0:1b:22:f5:a0:
a3:17:23:03:48:76:7c:9f:54:ba:19:fa:b3:6d:b3:
b1:81:e9:d7:8f:b4:72:31:b6:52:5b:78:f7:91:c7:
86:a2:50:d0:41:e1:57:96:80:5a:f9:ac:23:44:45:
ff:9d:c2:2c:d6:58:e7:4e:06:5c:4e:64:03:fd:2a:
28:f7:02:51:a5:8b:b8:7b:69:e1:b7:2c:05:d1:f3:
f4:2b:1a:ea:0c:a8:c5:a1:5b:8e:cd:57:92:66:9a:
c0:c0:28:78:5a:c1:2a:6b:7f:45:dc:50:61:9b:6d:
21:e9:92:cd:03:aa:bd:af:73:63:b7:b7:62:4a:27:
84:6b:8f:b0:28:3b:10:a5:9c:5e:fc:7c:2d:16:af:
4a:26:64:ae:ec:eb:53:f2:1d:48:7a:df:f5:90:b3:
f1:e3:5e:62:da:e5:62:e0:fa:d5:9f:32:7b:27:78:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:66:20:5A:7A:AA:61:8B:B5:87:AB:8A:93:96:62:04:E4:01:CA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bc::/46
Signature Algorithm: sha256WithRSAEncryption
63:0a:8f:7b:fc:a3:bd:1f:a5:c7:07:59:6c:ce:fc:20:1b:de:
5a:ed:27:a4:74:75:8b:92:5a:bf:7a:5d:b3:c9:e5:79:c6:08:
57:bd:2f:21:2a:2a:de:b1:d7:96:95:51:99:9b:6e:ee:cc:4d:
f3:5a:1f:83:39:54:ba:76:fa:25:41:6a:e2:f8:c7:16:26:98:
0e:f8:d5:91:27:23:14:9f:a7:2b:0e:af:da:b3:33:f2:8c:04:
05:17:06:b6:a9:76:c7:bb:3b:4c:ce:ee:f2:d7:0a:15:7f:c4:
d7:37:25:6e:79:ed:58:a7:59:1a:37:ce:a1:30:91:cf:85:9d:
9b:86:e0:73:b2:ba:a5:cd:ac:02:f7:09:22:a2:e8:c2:47:00:
cd:12:e9:92:4e:16:8b:1b:56:d9:44:d3:f6:63:07:18:bc:43:
aa:c6:a8:8c:a5:42:74:dd:64:7d:b0:89:e5:27:f7:09:df:4f:
74:55:93:2d:ce:7b:92:4d:6e:ae:ed:91:a4:39:60:52:26:b7:
4e:5b:24:e1:55:2b:5c:50:8a:ca:22:9b:76:35:b8:b1:40:6f:
70:8f:48:c6:ed:e6:ed:22:d2:61:9f:e7:b1:89:44:5b:66:55:
d5:76:ce:77:39:74:7a:74:b6:68:55:11:c0:54:23:53:90:70:
7f:2f:14:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org