Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210881.roa
File: AS210881.roa (raw, json)
Hash identifier: FlhXJXwTFD55GTq5ebetsdLEQtbzwOYsB99ZfdHvaqE=
Subject key identifier: 8A:36:B0:21:B8:E9:C2:10:7A:15:67:D9:25:91:79:36:D2:27:8B:92
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 02572A572702228CDC9B4130363DCD4E3EF2D517
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210881.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 210881
IP address blocks: 2a06:a005:920::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:57:2a:57:27:02:22:8c:dc:9b:41:30:36:3d:cd:4e:3e:f2:d5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=8A36B021B8E9C2107A1567D925917936D2278B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:2c:5b:13:fc:00:c7:7c:28:81:ee:5c:c1:
b0:1f:c9:c2:2e:fb:b5:3b:4d:4a:0f:ce:93:c2:ee:
f4:d0:4a:f7:88:21:07:80:e1:55:d2:e6:5d:b2:6f:
a8:aa:ac:55:aa:a1:4f:92:74:b7:9b:ba:f4:1b:77:
ce:1e:27:77:4e:65:3a:c5:90:30:26:94:ee:db:06:
0e:80:65:f4:8e:b9:48:0a:59:0d:e6:f1:02:97:2b:
94:54:6a:ca:bf:d1:d1:f1:00:77:2a:98:58:3f:0f:
50:af:4b:4a:b4:d9:d2:8d:b7:45:dd:57:70:c6:da:
01:c9:13:83:52:ed:d9:89:06:c5:f6:ea:b8:d7:0f:
e2:fc:54:79:b6:02:d3:92:b5:ae:b9:73:fd:61:11:
04:a6:a7:2f:2b:dc:70:51:ee:6e:d1:84:53:ef:cb:
ad:57:e5:c1:34:f0:cc:fe:9b:95:90:c5:1e:77:e3:
f8:ef:6f:b7:1b:cf:20:b2:a9:e1:fb:71:58:50:f6:
91:ab:f6:37:3b:1c:40:34:31:2d:3b:53:e8:cc:3f:
b9:a5:a0:04:f4:6a:24:2a:73:37:40:d6:43:d5:45:
b1:88:1d:57:aa:66:48:8c:8e:56:c4:c6:1f:69:05:
28:b4:4e:86:eb:c0:28:89:df:dc:02:64:79:e0:39:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:B0:21:B8:E9:C2:10:7A:15:67:D9:25:91:79:36:D2:27:8B:92
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:920::/44
Signature Algorithm: sha256WithRSAEncryption
79:08:58:69:9e:86:19:2e:80:f4:e0:3b:d3:b4:11:b0:b9:19:
ff:3f:52:72:01:09:53:85:33:c1:a9:6c:b6:57:5a:22:cf:de:
1c:b0:7f:81:c5:34:9a:dd:a0:75:6a:47:7c:3f:6d:3f:e2:3e:
ce:af:e2:99:32:5b:a7:c5:88:c0:d4:e6:1f:77:fd:9c:71:ec:
d3:53:8a:a3:87:d0:17:75:8a:f9:b7:22:f0:e9:57:1e:38:9c:
0a:ab:28:33:fd:b7:6d:68:53:17:66:16:66:d2:1f:68:b3:94:
f9:82:9b:f9:3d:bb:b6:83:1b:78:a3:35:ba:0e:11:78:52:56:
b4:6c:fa:53:b9:da:a0:59:8b:13:5b:89:5c:b1:12:e2:e0:45:
f1:7f:46:e9:e2:70:c3:8e:48:a4:be:10:25:75:41:ca:fa:53:
bf:20:6e:a1:b5:c1:f9:88:78:76:9e:ff:07:8f:5b:7d:84:a6:
66:af:fc:ad:7e:7d:da:15:81:df:46:e2:c9:95:a7:58:d0:eb:
7f:f2:9b:37:78:ba:65:07:25:29:b5:01:2a:75:9b:11:bf:a9:
ac:d1:ac:83:11:8d:96:51:d8:6b:b2:db:2d:79:4e:b8:e8:75:
fd:24:f9:32:41:d8:b6:f0:88:da:d8:b4:3c:4c:8a:fd:c7:6e:
c0:bf:7f:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAlcqVycCIozcm0EwNj3NTj7y1RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDhBMzZCMDIxQjhFOUMyMTA3QTE1NjdEOTI1OTE3OTM2RDIyNzhCOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+byxbE/wAx3woge5cwbAfycIu
+7U7TUoPzpPC7vTQSveIIQeA4VXS5l2yb6iqrFWqoU+SdLebuvQbd84eJ3dOZTrF
kDAmlO7bBg6AZfSOuUgKWQ3m8QKXK5RUasq/0dHxAHcqmFg/D1CvS0q02dKNt0Xd
V3DG2gHJE4NS7dmJBsX26rjXD+L8VHm2AtOSta65c/1hEQSmpy8r3HBR7m7RhFPv
y61X5cE08Mz+m5WQxR534/jvb7cbzyCyqeH7cVhQ9pGr9jc7HEA0MS07U+jMP7ml
oAT0aiQqczdA1kPVRbGIHVeqZkiMjlbExh9pBSi0TobrwCiJ39wCZHngOUXjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUijawIbjpwhB6FWfZJZF5NtIni5IwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwODgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BQkgMA0GCSqGSIb3DQEBCwUAA4IBAQB5CFhpnoYZLoD04DvTtBGwuRn/P1JyAQlT
hTPBqWy2V1oiz94csH+BxTSa3aB1akd8P20/4j7Or+KZMlunxYjA1OYfd/2ccezT
U4qjh9AXdYr5tyLw6VceOJwKqygz/bdtaFMXZhZm0h9os5T5gpv5Pbu2gxt4ozW6
DhF4Ula0bPpTudqgWYsTW4lcsRLi4EXxf0bp4nDDjkikvhAldUHK+lO/IG6htcH5
iHh2nv8Hj1t9hKZmr/ytfn3aFYHfRuLJladY0Ot/8ps3eLplByUptQEqdZsRv6ms
0ayDEY2WUdhrststeU646HX9JPkyQdi28Ija2LQ8TIr9x27Av3+p
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org