Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211390.roa
File: AS211390.roa (raw, json)
Hash identifier: 1UtTdHLpnuAzAQdT5cOt0son9mcOeq0zkraGckl8YxM=
Subject key identifier: 51:B3:2C:F7:4A:32:87:96:53:42:67:C7:7A:37:87:0F:ED:5D:9A:87
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0972E1C3C943D28779934C8EA626CD907A81A823
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211390.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 211390
IP address blocks: 2a06:a005:45e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:72:e1:c3:c9:43:d2:87:79:93:4c:8e:a6:26:cd:90:7a:81:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=51B32CF74A328796534267C77A37870FED5D9A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:9a:0d:79:f6:f1:57:b8:59:bd:e8:b0:88:
2b:0b:14:0b:2f:04:c2:f0:c7:48:14:7e:1b:e6:34:
8b:4d:59:5f:12:c2:8f:96:2b:a2:36:0d:3b:60:5a:
f7:ff:88:3e:5d:5c:f8:cc:ee:2b:77:a5:2b:5d:41:
39:84:0a:be:bb:1d:9a:ae:c5:0d:f5:d1:64:e4:88:
a6:c9:3f:a8:a8:05:9c:33:91:0b:98:ea:e6:37:46:
74:d3:27:f3:0b:1c:43:dd:64:e6:ea:9e:44:c3:a8:
34:f7:fa:ac:e9:6c:3c:12:d2:39:00:32:9e:dd:37:
bf:10:bf:b4:96:32:41:7a:a3:7a:84:44:8b:df:0f:
63:a0:03:a3:97:f1:90:c4:7a:b0:3e:05:65:90:96:
97:3f:db:1a:8b:b3:45:18:c5:20:d3:ee:5c:6a:2b:
8a:6d:03:ae:52:c5:26:cd:e8:18:4a:5a:de:6c:e6:
e9:25:16:cc:46:5c:19:e1:2b:26:ad:08:87:e9:7d:
aa:b4:76:57:15:d1:af:e1:17:7b:86:98:f9:97:43:
25:38:f6:41:24:a5:75:fd:c5:f4:38:98:0e:54:75:
2b:02:af:46:6e:2a:7a:dc:45:09:0e:9e:a4:33:a2:
d6:1c:f5:b7:c8:a5:e9:89:92:bc:ff:44:25:fe:83:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:2C:F7:4A:32:87:96:53:42:67:C7:7A:37:87:0F:ED:5D:9A:87
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45e::/48
Signature Algorithm: sha256WithRSAEncryption
48:ee:0b:4e:42:e8:5a:d4:c1:89:bc:67:3a:10:8f:f4:e0:29:
bf:0a:1a:48:7d:9e:35:c8:5b:97:73:1c:bf:65:b1:dc:f1:77:
c5:69:fb:26:a9:e1:e8:23:cf:81:f4:b1:08:af:45:49:9a:6b:
27:ee:45:09:46:3f:f7:78:be:7b:9b:0e:a6:99:ce:f6:7f:ac:
2e:2f:ea:20:ca:30:d0:b4:5a:0e:46:a7:5c:1b:f0:98:40:0b:
2f:24:64:8e:a3:d5:1e:82:1d:5d:a5:22:04:dd:d1:66:61:60:
e7:bd:f5:79:d5:23:6d:4c:a1:34:4a:08:68:0c:fc:e0:b1:13:
c7:ea:1c:de:4f:59:5c:30:e4:bf:17:a5:0e:d3:c7:f1:ab:a7:
44:bc:af:ad:ee:4c:5c:44:57:18:cf:08:09:e8:39:34:09:1c:
d8:b9:13:12:83:8c:26:67:ce:52:2e:3f:80:a0:83:bd:00:85:
1e:bf:80:b8:e4:40:04:10:cc:fd:b8:d6:59:93:f3:99:48:54:
10:3d:74:60:92:a4:54:16:f8:b3:86:98:79:72:28:e0:34:df:
7e:61:0f:19:a4:a7:ba:69:70:b5:b1:98:15:c4:ac:07:f6:3d:
86:d3:3d:9c:86:16:f4:fb:07:2b:4f:41:14:89:fe:b9:84:e3:
57:7e:02:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCXLhw8lD0od5k0yOpibNkHqBqCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTdaFw0yMzEyMzEyMzU5MTdaMDMxMTAvBgNV
BAMTKDUxQjMyQ0Y3NEEzMjg3OTY1MzQyNjdDNzdBMzc4NzBGRUQ1RDlBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDespoNefbxV7hZveiwiCsLFAsv
BMLwx0gUfhvmNItNWV8Swo+WK6I2DTtgWvf/iD5dXPjM7it3pStdQTmECr67HZqu
xQ310WTkiKbJP6ioBZwzkQuY6uY3RnTTJ/MLHEPdZObqnkTDqDT3+qzpbDwS0jkA
Mp7dN78Qv7SWMkF6o3qERIvfD2OgA6OX8ZDEerA+BWWQlpc/2xqLs0UYxSDT7lxq
K4ptA65SxSbN6BhKWt5s5uklFsxGXBnhKyatCIfpfaq0dlcV0a/hF3uGmPmXQyU4
9kEkpXX9xfQ4mA5UdSsCr0ZuKnrcRQkOnqQzotYc9bfIpemJkrz/RCX+g1wLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUbMs90oyh5ZTQmfHejeHD+1dmocwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjExMzkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQReMA0GCSqGSIb3DQEBCwUAA4IBAQBI7gtOQuha1MGJvGc6EI/04Cm/ChpIfZ41
yFuXcxy/ZbHc8XfFafsmqeHoI8+B9LEIr0VJmmsn7kUJRj/3eL57mw6mmc72f6wu
L+ogyjDQtFoORqdcG/CYQAsvJGSOo9Uegh1dpSIE3dFmYWDnvfV51SNtTKE0Sgho
DPzgsRPH6hzeT1lcMOS/F6UO08fxq6dEvK+t7kxcRFcYzwgJ6Dk0CRzYuRMSg4wm
Z85SLj+AoIO9AIUev4C45EAEEMz9uNZZk/OZSFQQPXRgkqRUFvizhph5cijgNN9+
YQ8ZpKe6aXC1sZgVxKwH9j2G0z2chhb0+wcrT0EUif65hONXfgJF
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org