Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210912.roa
File: AS210912.roa (raw, json)
Hash identifier: cJYP5F2nd1PXuoNXg/BlpXs+8JdT3HaRP/IhfUUNW8o=
Subject key identifier: 20:A9:A3:E8:F3:2E:2E:9D:29:EA:E0:6A:29:18:F1:01:83:08:B2:3F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1AD37F50DF5D5125E10881271F0BE75104AB1423
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210912.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 210912
IP address blocks: 2a06:a005:2600::/44 maxlen: 48
2a06:a005:2610::/44 maxlen: 48
2a06:a005:2620::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d3:7f:50:df:5d:51:25:e1:08:81:27:1f:0b:e7:51:04:ab:14:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=20A9A3E8F32E2E9D29EAE06A2918F1018308B23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:d0:54:6a:ba:fa:b7:1c:7a:32:ba:1e:0f:
55:33:76:3d:53:ce:a5:b9:5c:4a:31:a3:f7:82:48:
83:77:81:d0:f3:ee:6b:99:ce:31:1c:2e:e6:ef:f6:
65:db:bf:67:24:72:1f:20:2e:c8:78:26:0f:0f:5e:
07:8a:7d:fb:2c:c7:51:d5:4d:f2:b7:60:c8:54:24:
4f:85:de:d9:c4:c2:e0:7a:cd:cd:b1:f3:f6:b2:d6:
93:07:7c:c1:f1:e7:5e:d6:09:64:ad:d9:ea:b7:d7:
73:d5:7c:89:29:81:e9:65:13:63:41:0e:c6:62:16:
ad:bc:75:3f:c0:ea:dc:ed:e8:7d:d2:bd:9e:e6:7b:
98:f3:2c:eb:7c:08:be:c4:a0:1e:77:4e:33:3b:49:
cc:c2:5c:cd:f1:ec:9d:5e:05:bd:97:34:c2:18:0f:
59:b6:99:6b:34:dd:71:e3:2d:ac:6d:33:bb:cb:89:
07:cf:90:50:1a:b6:18:8b:0c:a1:1a:37:dc:8f:53:
a5:4d:6e:36:f5:88:89:70:42:3a:c3:12:f0:c7:2b:
53:19:94:a3:48:87:df:3d:67:37:e9:d8:3b:37:11:
c1:5a:15:87:9e:fa:b2:30:95:00:5e:d7:63:15:1a:
5c:38:b4:49:c8:20:b5:9c:b1:4e:5f:13:b1:fe:e4:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:A3:E8:F3:2E:2E:9D:29:EA:E0:6A:29:18:F1:01:83:08:B2:3F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2600::-2a06:a005:262f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:00:24:6a:fc:73:86:cb:09:36:23:e5:6e:42:f6:d3:37:41:
e4:01:bc:87:3d:37:a5:58:59:57:58:0f:b3:62:66:14:63:0a:
d4:f1:fb:4c:bd:ff:19:cb:0b:e9:8d:5b:f2:3f:79:03:23:b3:
80:41:f1:91:67:51:64:1f:f4:d9:7e:de:95:b4:20:a7:88:3d:
91:4e:c8:df:4c:68:41:23:ed:88:33:9f:ea:24:25:90:1d:85:
60:af:91:df:a2:b7:f0:eb:f8:27:b6:42:b5:96:ff:c5:2b:ad:
b8:10:c0:84:6a:b0:05:fe:c3:32:09:b6:e0:bf:20:5b:fa:7e:
71:f0:5a:6c:69:5e:f5:5a:6d:33:81:7c:03:1e:72:34:f7:42:
30:f3:df:90:e3:db:5f:1e:23:9d:da:11:21:e1:91:bd:bd:c6:
14:72:f5:b8:3e:bb:ce:57:b9:31:8d:ef:62:d9:ee:24:01:c2:
37:8c:a1:d9:69:3b:72:f5:dc:dd:76:e1:07:c7:85:dd:ea:f4:
46:65:58:f4:11:58:c9:29:6d:1a:39:3a:4b:c3:4c:b1:de:e9:
34:59:38:f2:99:43:90:f0:d2:54:0f:27:dc:b0:a7:95:fd:07:
31:ec:6c:e8:c6:8e:c7:8b:94:47:11:f0:15:c4:1e:28:74:a1:
94:a6:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org