Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211604.roa
File: AS211604.roa (raw, json)
Hash identifier: q8t5QXwundAUI5H0/dnrfcBcKXSj4vd847ub2fDWIzw=
Subject key identifier: 91:38:08:4F:91:A5:AE:0E:6E:46:FD:A7:19:A9:84:FA:4E:80:BD:52
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4E406A88CEE0D330628C2E94A166B4355B66BA2A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211604.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 211604
IP address blocks: 2a06:a005:450::/48 maxlen: 48
2a06:a005:452::/47 maxlen: 48
2a06:a005:1274::/47 maxlen: 48
2a06:a005:12f0::/44 maxlen: 48
2a06:a005:1b30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:40:6a:88:ce:e0:d3:30:62:8c:2e:94:a1:66:b4:35:5b:66:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=9138084F91A5AE0E6E46FDA719A984FA4E80BD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:77:ec:ed:65:ca:70:06:88:a2:e6:39:30:
03:7d:c1:3e:2f:3e:2a:67:15:97:03:7a:87:fb:50:
c7:ce:8b:ee:36:97:be:14:60:de:ed:59:47:da:a0:
e8:7d:e5:a6:f6:7a:7f:5c:f6:93:64:a3:3e:95:9e:
35:bb:c8:89:2f:ba:db:17:11:b1:e5:1e:1e:50:55:
03:f8:e1:4a:41:67:50:84:4e:e6:c9:4e:8c:56:c4:
20:3e:27:92:59:ee:25:7f:b9:fe:0d:c1:67:6c:a2:
c2:51:88:15:7a:85:e9:53:27:4e:ac:a5:cd:05:ba:
a5:7c:db:17:9d:91:4e:cf:84:ad:3c:e0:33:2a:ff:
41:9f:e7:5c:cc:18:d6:07:45:ae:18:66:05:58:ec:
c3:33:cc:2d:4b:8e:91:b2:01:50:d9:e3:8c:52:f8:
7c:a5:2a:f4:ca:b3:f0:cf:80:6d:cf:73:f7:fb:7c:
84:75:15:45:41:87:88:4e:63:7b:e2:8b:89:0b:de:
09:08:d0:3a:b1:e4:8e:cd:9a:af:f4:e2:f0:30:5e:
b3:55:7e:2b:fb:89:37:73:f7:77:48:10:01:58:f2:
f5:ac:04:96:09:86:f6:78:21:5e:4f:6b:66:d2:eb:
5f:bd:e7:6c:da:f9:4e:5d:37:d6:7f:ba:6f:7c:ec:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:38:08:4F:91:A5:AE:0E:6E:46:FD:A7:19:A9:84:FA:4E:80:BD:52
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:450::/48
2a06:a005:452::/47
2a06:a005:1274::/47
2a06:a005:12f0::/44
2a06:a005:1b30::/44
Signature Algorithm: sha256WithRSAEncryption
96:7e:d9:f4:c0:61:96:9e:0c:b5:ad:33:d3:76:67:64:7a:93:
ef:5d:7f:cb:cb:59:94:53:80:6b:c0:96:b2:e3:56:25:7a:ca:
aa:95:28:db:75:26:f3:53:59:c8:cf:fd:d0:00:b7:07:89:42:
e8:57:39:8a:d2:e7:87:37:f2:ce:04:05:59:e1:68:7c:2c:cc:
00:54:47:1a:74:dd:5f:5b:80:25:de:5e:f4:f1:99:1d:f9:15:
a7:30:27:be:3c:d2:6f:26:2e:2c:5f:ae:62:07:34:50:77:83:
29:36:01:5c:1b:a3:be:e0:52:4e:8a:10:21:5e:bb:50:36:2f:
04:21:b9:1a:14:71:bb:5c:dc:87:0f:3e:ae:15:5a:3b:e6:84:
60:e2:dc:02:67:e8:9a:01:ee:26:ed:13:06:e3:08:30:26:73:
27:e3:d5:99:62:92:97:4d:91:e8:30:97:f1:f7:5c:2c:f5:37:
60:b7:c8:d8:b1:56:6d:95:4a:5e:51:68:8a:22:49:b9:09:59:
08:83:93:3a:ff:c2:cf:dc:7e:25:74:35:c4:8d:f9:61:f3:94:
95:74:0c:4f:68:a0:83:a4:b4:a5:4e:e5:c4:05:70:f2:99:b0:
60:ed:98:58:18:9e:bf:9f:f6:60:e6:b3:a0:6d:d7:91:a4:df:
61:28:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org