Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211144.roa
File: AS211144.roa (raw, json)
Hash identifier: 4rTYXy0iJz9Lp8nqABPUjpnl7tAYvogEsX3nDWbx3MY=
Subject key identifier: DA:CD:36:AC:73:A1:E5:D2:E3:09:22:B4:BD:E1:AC:24:AB:21:9B:B4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 52A9B39FFD0920CAF1BBD1282A6E123F80EAF84A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211144.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 211144
IP address blocks: 2a06:a005:18::/48 maxlen: 48
2a06:a005:2d0::/48 maxlen: 48
2a06:a005:431::/48 maxlen: 48
2a06:a005:440::/44 maxlen: 48
2a06:a005:5b4::/48 maxlen: 48
2a06:a005:9f0::/44 maxlen: 48
2a06:a005:a07::/48 maxlen: 48
2a06:a005:127a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a9:b3:9f:fd:09:20:ca:f1:bb:d1:28:2a:6e:12:3f:80:ea:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=DACD36AC73A1E5D2E30922B4BDE1AC24AB219BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:41:7a:5f:8e:ed:bc:ff:3b:ef:d0:f0:8f:
91:a4:e6:34:f5:e0:0d:3f:55:9d:50:52:c3:02:bd:
58:7d:ce:78:c6:a6:0c:7a:84:ce:57:c5:02:aa:3f:
b4:ec:4c:1f:d6:f2:cd:5b:24:b7:90:49:6b:2b:96:
4f:85:cc:29:bd:71:38:25:e7:31:a1:8b:a8:ed:8a:
4f:26:11:93:46:8a:a3:1e:c8:4d:07:ce:1e:8f:37:
80:b8:82:db:f5:5c:45:d0:49:37:c0:23:a8:10:dc:
05:89:e9:69:75:d6:d2:82:61:55:ea:d3:53:91:21:
e9:8d:cc:c9:c7:ac:b4:33:8e:7a:ed:41:22:9b:df:
b0:54:bf:31:3f:86:c4:cd:fe:c3:2d:0f:ed:16:25:
f3:ce:d1:da:2c:8d:5e:6e:5d:8e:9d:d7:86:f8:d2:
b2:11:cb:fa:89:4e:8a:95:de:1a:c6:c6:76:c7:6c:
55:30:6c:ad:be:36:b4:b7:04:b5:23:41:8d:82:50:
17:32:86:6b:2e:b3:ce:b5:a3:39:96:8a:5b:62:35:
3e:f0:98:aa:6b:10:49:27:87:74:48:82:f4:db:44:
76:c6:98:57:95:d4:1e:18:3d:96:44:aa:c3:06:fa:
e2:3c:30:8e:92:4c:76:3f:f0:d5:44:4b:f6:b2:4c:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:36:AC:73:A1:E5:D2:E3:09:22:B4:BD:E1:AC:24:AB:21:9B:B4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211144.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:2d0::/48
2a06:a005:431::/48
2a06:a005:440::/44
2a06:a005:5b4::/48
2a06:a005:9f0::/44
2a06:a005:a07::/48
2a06:a005:127a::/48
Signature Algorithm: sha256WithRSAEncryption
25:9b:80:fe:fc:84:29:f9:af:bb:b7:8f:3a:5e:99:dd:ba:14:
28:02:cb:66:8c:cf:98:c1:a8:b9:63:f4:ff:79:7d:59:58:e6:
c4:af:be:a1:cb:fd:b7:37:97:c4:b8:29:8e:25:b5:62:33:d0:
37:96:3b:b4:ba:78:c2:ea:5b:68:10:4f:55:75:b6:02:35:5b:
54:99:79:6a:12:39:8a:b3:28:df:d3:0a:d5:7d:ea:c4:8d:a1:
b7:49:bd:b9:46:32:ff:a9:33:39:c7:f4:95:39:33:03:b9:70:
27:a1:d5:0d:07:68:7d:b2:d8:f1:65:31:bd:a0:0c:c1:d9:8e:
82:37:7f:a6:d4:d9:c4:b4:c8:ef:32:c1:2b:db:ae:d3:ef:4f:
06:5c:fa:7d:f5:f9:e7:33:78:2b:f1:49:3b:ef:9d:62:25:bd:
df:89:8d:61:fe:1d:fc:65:4a:e7:3a:76:4c:fa:76:e7:1c:73:
06:9d:d5:d2:69:48:62:06:93:11:0c:0d:2b:0f:ba:63:e3:58:
60:d7:08:37:e5:32:57:24:bc:d3:7e:f4:44:77:f8:f1:34:8c:
b4:79:b4:09:14:45:78:e8:d2:0c:1f:b7:7f:f2:24:90:c4:5a:
7e:bc:3d:ca:a6:b0:83:e6:13:8d:92:da:85:44:7d:60:b6:19:
86:98:5c:1e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUqmzn/0JIMrxu9EoKm4SP4Dq+EowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTZaFw0yMzEyMzEyMzU5MTZaMDMxMTAvBgNV
BAMTKERBQ0QzNkFDNzNBMUU1RDJFMzA5MjJCNEJERTFBQzI0QUIyMTlCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ60F6X47tvP8779Dwj5Gk5jT1
4A0/VZ1QUsMCvVh9znjGpgx6hM5XxQKqP7TsTB/W8s1bJLeQSWsrlk+FzCm9cTgl
5zGhi6jtik8mEZNGiqMeyE0Hzh6PN4C4gtv1XEXQSTfAI6gQ3AWJ6Wl11tKCYVXq
01ORIemNzMnHrLQzjnrtQSKb37BUvzE/hsTN/sMtD+0WJfPO0dosjV5uXY6d14b4
0rIRy/qJToqV3hrGxnbHbFUwbK2+NrS3BLUjQY2CUBcyhmsus861ozmWiltiNT7w
mKprEEknh3RIgvTbRHbGmFeV1B4YPZZEqsMG+uI8MI6STHY/8NVES/ayTJ/lAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU2s02rHOh5dLjCSK0veGsJKshm7QwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjExMTQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAAjBIAwcAKgag
BQAYAwcAKgagBQLQAwcAKgagBQQxAwcEKgagBQRAAwcAKgagBQW0AwcEKgagBQnw
AwcAKgagBQoHAwcAKgagBRJ6MA0GCSqGSIb3DQEBCwUAA4IBAQAlm4D+/IQp+a+7
t486XpnduhQoAstmjM+Ywai5Y/T/eX1ZWObEr76hy/23N5fEuCmOJbViM9A3lju0
unjC6ltoEE9VdbYCNVtUmXlqEjmKsyjf0wrVferEjaG3Sb25RjL/qTM5x/SVOTMD
uXAnodUNB2h9stjxZTG9oAzB2Y6CN3+m1NnEtMjvMsEr267T708GXPp99fnnM3gr
8Uk7751iJb3fiY1h/h38ZUrnOnZM+nbnHHMGndXSaUhiBpMRDA0rD7pj41hg1wg3
5TJXJLzTfvREd/jxNIy0ebQJFEV46NIMH7d/8iSQxFp+vD3KprCD5hONktqFRH1g
thmGmFwe
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org