Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210842.roa
File: AS210842.roa (raw, json)
Hash identifier: K78VCLlNSj63MYuekf41JYopKzCp/p57bWOaZDXQAfE=
Subject key identifier: CA:5B:BE:0C:D3:4C:A3:AD:97:0C:6F:74:15:E4:FA:C8:C9:60:75:40
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1D94863C4AD17C82D86D5D36A57021F6C55E5367
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210842.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 210842
IP address blocks: 2a06:a005:880::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:94:86:3c:4a:d1:7c:82:d8:6d:5d:36:a5:70:21:f6:c5:5e:53:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=CA5BBE0CD34CA3AD970C6F7415E4FAC8C9607540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:69:8f:be:92:98:f8:c3:1f:4d:25:b1:83:
b0:ff:08:1d:b9:db:2b:b7:83:9e:8d:4b:a1:26:18:
ab:8f:6d:99:f6:5c:2e:0d:4f:ca:04:f9:0e:04:07:
6d:e6:01:5f:39:02:39:db:82:da:44:1e:f3:ca:e7:
3f:9a:91:87:f1:73:09:20:1c:dd:44:60:26:32:9c:
7c:a6:33:4c:0e:c0:28:24:f8:c7:4d:c5:0b:0a:98:
89:09:8c:76:17:fb:08:a8:6d:13:93:2f:ea:d5:9a:
d0:79:37:27:d2:6e:a7:05:5a:ce:fc:b0:39:6a:c2:
64:2c:b6:bf:a7:6c:47:fb:4c:46:e5:c8:67:10:8c:
86:fd:73:26:78:4e:4e:00:1f:1e:29:ee:80:b6:e1:
3a:5d:23:f0:26:03:bc:f5:0f:87:34:fe:23:6b:30:
20:f4:c2:66:99:a5:f7:2b:e0:4e:03:1b:80:79:6b:
95:cf:3b:57:f3:ed:0c:69:4c:8a:9a:02:ad:53:0d:
be:d6:df:2b:63:35:95:be:69:fc:3b:7c:cd:d8:f6:
57:a7:0c:0a:a3:60:43:c9:b4:3d:2a:bf:12:b4:1c:
ae:27:04:1d:6f:cb:97:f5:54:bf:be:f5:57:3b:50:
1b:9c:e9:77:ea:34:54:fe:db:91:5f:c0:1c:ab:05:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:BE:0C:D3:4C:A3:AD:97:0C:6F:74:15:E4:FA:C8:C9:60:75:40
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:880::/44
Signature Algorithm: sha256WithRSAEncryption
37:2f:c8:8a:01:fe:8c:ae:f5:a8:d8:c1:b6:56:91:84:58:1e:
4b:5f:8a:48:0d:f0:8b:6f:c2:ba:5c:29:23:5c:43:fa:dc:da:
6e:f5:86:e8:34:f4:64:aa:eb:93:b3:4e:ba:db:0c:df:fc:17:
b7:50:83:4f:a6:37:58:69:99:54:22:68:9f:f3:5c:e5:6a:1e:
5a:8b:e2:cf:19:f7:23:dc:7f:dc:83:50:ca:f2:c4:a0:a4:1c:
17:7d:48:43:ab:db:2d:99:01:68:8e:78:f5:3e:cb:09:7b:e6:
bb:08:6e:39:08:d7:4b:67:1f:b0:46:08:b3:1e:4f:4b:25:95:
e4:88:d0:ab:d4:4d:1e:e0:f3:83:88:54:34:78:56:05:4d:de:
7d:91:dd:c1:63:44:72:9d:f2:da:dd:53:7e:0c:7f:47:4f:17:
3b:b8:54:39:0a:53:59:86:af:87:9f:5b:c9:20:bc:b0:b9:f3:
70:20:f9:54:5b:ad:1f:4a:e6:0b:2e:60:67:f8:50:38:8b:5b:
bb:18:09:36:1b:b9:30:2c:48:0a:db:e9:9c:c9:03:f5:33:a0:
11:2e:7a:49:58:2b:43:13:23:fc:b6:41:55:02:b4:1e:95:f7:
eb:6c:7a:29:49:85:a2:c5:15:8a:f0:57:eb:62:70:21:d6:0a:
d4:b6:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:51 2025 by rpki-client