Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210951.roa
File: AS210951.roa (raw, json)
Hash identifier: yMnwBSEIRGMlp5QxxbcuOslEUwaCqi5HtYznHL8lncc=
Subject key identifier: 56:B8:1A:5C:9B:9F:3B:73:49:CC:9E:20:A7:80:1E:3E:77:EF:67:AA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6DB6858A64208175BA4B442B1D174FBFC260228B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210951.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 210951
IP address blocks: 2a06:a005:5c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b6:85:8a:64:20:81:75:ba:4b:44:2b:1d:17:4f:bf:c2:60:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=56B81A5C9B9F3B7349CC9E20A7801E3E77EF67AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:3c:31:f6:a5:d6:a3:b0:12:71:a9:2a:e0:
6f:9e:64:63:b0:6a:08:96:d5:6f:f1:be:8f:34:fc:
b0:f5:81:a6:f5:88:22:8e:ef:1d:aa:dd:9f:ff:c2:
02:19:f6:36:18:96:c9:7c:7f:11:53:c3:b4:55:06:
0f:64:0c:2a:3d:05:57:22:48:0c:6c:8b:89:d7:8a:
a4:c9:a4:b8:3c:6d:3f:09:7a:c0:29:39:10:0a:cb:
2a:b8:09:8e:82:d2:4b:79:01:c2:62:11:75:91:8d:
ed:96:c3:88:8b:d3:04:b7:b1:69:4f:eb:3e:da:39:
df:fb:33:59:60:cd:90:ce:c3:7b:a0:5e:da:f9:89:
a7:0f:b8:d9:86:5e:f6:a8:d3:d6:77:2e:ed:8c:f5:
87:1f:7a:d1:b1:74:f4:d0:47:d3:f6:7b:58:d4:25:
a7:ad:20:99:63:d2:14:0e:82:c1:5f:bc:54:25:7d:
05:6f:a9:2d:ca:e2:84:c9:ce:39:0d:fd:b4:10:f0:
7a:24:54:5a:f4:9e:7a:2d:a8:77:d5:e9:ba:ed:f4:
6c:26:41:61:06:4e:f9:6a:eb:1e:58:85:a3:b2:06:
8b:66:cd:73:56:95:7f:f0:83:49:86:91:28:95:72:
96:96:f3:97:b4:7a:e0:65:ab:2d:f6:bb:be:91:0f:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:1A:5C:9B:9F:3B:73:49:CC:9E:20:A7:80:1E:3E:77:EF:67:AA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS210951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:85:09:b1:77:cb:33:04:df:0b:67:14:bb:3f:fe:13:61:8b:
4f:da:1c:f9:30:42:de:39:14:f2:f5:a4:bd:46:0e:bf:52:75:
dd:65:3a:9e:a8:c9:ee:20:53:f0:e8:b8:ad:ec:34:01:06:88:
a8:8d:83:ff:47:1d:71:2f:d8:2b:47:41:fd:d6:17:e2:64:84:
a3:2f:49:98:9d:b1:25:45:24:89:67:5d:ad:f8:64:85:53:1a:
eb:78:a4:e3:14:82:30:23:c3:c9:cb:f5:2b:1f:ff:0e:20:ff:
a1:1d:8e:a3:85:65:a1:26:e4:fc:d9:f1:80:bb:d9:45:56:e9:
3c:7d:7a:10:ef:96:75:c7:83:57:d9:11:f1:54:0a:fe:37:16:
0c:6d:61:c5:38:0c:ac:8e:0b:90:4a:b9:75:6b:72:c9:f8:d3:
87:45:7c:de:78:98:8a:79:08:14:d4:ee:aa:81:32:c7:cc:47:
c9:76:87:66:b6:13:52:fb:65:7e:68:33:c2:a8:11:16:eb:1e:
58:42:6b:4e:6a:7d:6d:be:fc:8a:22:3d:2b:6b:3d:5a:9b:f7:
09:82:d0:82:2e:73:26:2a:d6:ea:8b:49:58:98:fd:0e:8b:8f:
c0:59:5b:b3:1f:f9:5d:5a:7e:26:7a:cb:63:ee:91:4b:35:9e:
54:cb:b0:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUbbaFimQggXW6S0QrHRdPv8JgIoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjBaFw0yMzEyMzEyMzU5MjBaMDMxMTAvBgNV
BAMTKDU2QjgxQTVDOUI5RjNCNzM0OUNDOUUyMEE3ODAxRTNFNzdFRjY3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZDwx9qXWo7AScakq4G+eZGOw
agiW1W/xvo80/LD1gab1iCKO7x2q3Z//wgIZ9jYYlsl8fxFTw7RVBg9kDCo9BVci
SAxsi4nXiqTJpLg8bT8JesApORAKyyq4CY6C0kt5AcJiEXWRje2Ww4iL0wS3sWlP
6z7aOd/7M1lgzZDOw3ugXtr5iacPuNmGXvao09Z3Lu2M9YcfetGxdPTQR9P2e1jU
JaetIJlj0hQOgsFfvFQlfQVvqS3K4oTJzjkN/bQQ8HokVFr0nnotqHfV6brt9Gwm
QWEGTvlq6x5YhaOyBotmzXNWlX/wg0mGkSiVcpaW85e0euBlqy32u76RD+lnAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUVrgaXJufO3NJzJ4gp4AePnfvZ6owHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEwOTUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BQXAMA0GCSqGSIb3DQEBCwUAA4IBAQBrhQmxd8szBN8LZxS7P/4TYYtP2hz5MELe
ORTy9aS9Rg6/UnXdZTqeqMnuIFPw6Lit7DQBBoiojYP/Rx1xL9grR0H91hfiZISj
L0mYnbElRSSJZ12t+GSFUxrreKTjFIIwI8PJy/UrH/8OIP+hHY6jhWWhJuT82fGA
u9lFVuk8fXoQ75Z1x4NX2RHxVAr+NxYMbWHFOAysjguQSrl1a3LJ+NOHRXzeeJiK
eQgU1O6qgTLHzEfJdodmthNS+2V+aDPCqBEW6x5YQmtOan1tvvyKIj0raz1am/cJ
gtCCLnMmKtbqi0lYmP0Oi4/AWVuzH/ldWn4mestj7pFLNZ5Uy7Cs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org