Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211946.roa
File: AS211946.roa (raw, json)
Hash identifier: pjRcCHQ25K6IXV6aJoIgYUtnZSplI14x28I2SBpS4h8=
Subject key identifier: 53:B8:4A:D4:F4:27:57:9A:19:BB:9C:5F:9C:27:E2:6B:B7:18:82:04
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7F9784F46E233A2B5ECFA7F48FEBE7A88BE086BA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211946.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 211946
IP address blocks: 2a06:a005:f40::/44 maxlen: 48
2a06:a005:1bd0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:97:84:f4:6e:23:3a:2b:5e:cf:a7:f4:8f:eb:e7:a8:8b:e0:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=53B84AD4F427579A19BB9C5F9C27E26BB7188204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:fb:91:3f:ab:97:70:07:2e:57:57:7d:c6:
e0:c4:ee:48:e5:ed:68:b9:4d:22:d4:d2:19:5e:bb:
53:4b:c2:56:5d:62:6c:c6:ff:63:f5:df:0d:f9:f6:
bf:bd:d4:98:cc:a1:19:dd:d8:a8:b1:c2:77:7b:c9:
5f:61:53:7b:ff:78:d1:3b:93:0e:41:b3:23:bd:50:
62:08:7c:3b:e4:7e:c1:1e:f1:01:29:45:04:15:c1:
36:73:56:30:75:83:28:fc:9f:5f:24:18:78:bf:50:
58:44:49:c1:b7:4a:40:af:fe:e5:39:85:ff:21:72:
46:3f:16:91:07:74:d5:cc:91:6e:50:d9:0c:a9:67:
75:34:11:1b:ca:ea:fd:83:74:a7:f4:00:c0:9d:91:
19:77:a2:a9:11:e2:cb:f9:8e:69:bd:17:0e:e1:43:
08:4c:90:46:3b:1f:1f:33:65:6f:89:2b:15:2b:11:
46:5f:f8:67:d3:6f:1b:41:56:d0:2f:60:11:45:57:
d0:23:16:9a:fc:b8:38:da:0a:83:08:2b:1d:65:ee:
a3:37:62:b4:59:d7:3a:5a:b1:08:6d:5f:96:fd:b6:
18:0a:5f:8a:41:a5:03:00:da:1b:dc:d8:77:46:96:
71:b6:3b:53:c8:d6:e0:d5:b9:2d:b9:80:8a:9f:92:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:4A:D4:F4:27:57:9A:19:BB:9C:5F:9C:27:E2:6B:B7:18:82:04
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f40::/44
2a06:a005:1bd0::/44
Signature Algorithm: sha256WithRSAEncryption
82:7c:9c:67:cd:3f:6e:37:60:e9:21:21:d9:07:7e:45:ae:6d:
20:0f:46:c2:cd:80:ba:ed:c3:67:c3:f9:33:6c:7b:7d:a7:7f:
90:c7:b1:29:d0:85:57:88:ab:00:4e:52:5a:3b:49:31:86:64:
d1:42:b1:d0:bf:33:20:e0:7e:56:f8:ac:87:48:6a:3a:13:85:
9d:bb:ea:af:01:df:d5:6d:bc:be:b5:2e:a8:a0:b9:3c:90:33:
63:e3:87:ad:bd:db:c1:ef:c3:5c:11:75:00:83:f7:a1:66:45:
86:02:f4:b7:1e:dd:86:08:ef:20:a5:70:e7:9d:30:35:38:93:
c5:05:f1:d4:35:50:f6:b4:4a:83:d5:a6:62:d3:ae:ac:84:ea:
77:da:86:eb:ce:af:4c:6b:a3:38:aa:e6:71:6c:fb:3c:46:9a:
e0:d0:65:75:43:12:8a:28:af:cc:78:02:2b:29:2d:fd:06:e8:
5e:84:06:15:b5:ed:35:51:8a:e1:01:5e:18:0a:75:4a:f8:4a:
2c:8f:82:b0:7c:ca:d0:32:f6:c3:02:93:94:d4:bc:46:b1:13:
8a:7f:9e:b2:74:45:65:c7:d8:99:90:ad:21:87:62:a1:b1:48:
d9:aa:7d:92:18:f0:76:64:72:68:72:8c:0e:da:e9:be:95:74:
87:b4:4b:fa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUf5eE9G4jOitez6f0j+vnqIvghrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjVaFw0yMzEyMzEyMzU5MjVaMDMxMTAvBgNV
BAMTKDUzQjg0QUQ0RjQyNzU3OUExOUJCOUM1RjlDMjdFMjZCQjcxODgyMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNfuRP6uXcAcuV1d9xuDE7kjl
7Wi5TSLU0hleu1NLwlZdYmzG/2P13w359r+91JjMoRnd2Kixwnd7yV9hU3v/eNE7
kw5BsyO9UGIIfDvkfsEe8QEpRQQVwTZzVjB1gyj8n18kGHi/UFhEScG3SkCv/uU5
hf8hckY/FpEHdNXMkW5Q2QypZ3U0ERvK6v2DdKf0AMCdkRl3oqkR4sv5jmm9Fw7h
QwhMkEY7Hx8zZW+JKxUrEUZf+GfTbxtBVtAvYBFFV9AjFpr8uDjaCoMIKx1l7qM3
YrRZ1zpasQhtX5b9thgKX4pBpQMA2hvc2HdGlnG2O1PI1uDVuS25gIqfkq/LAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUU7hK1PQnV5oZu5xfnCfia7cYggQwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjExOTQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgag
BQ9AAwcEKgagBRvQMA0GCSqGSIb3DQEBCwUAA4IBAQCCfJxnzT9uN2DpISHZB35F
rm0gD0bCzYC67cNnw/kzbHt9p3+Qx7Ep0IVXiKsATlJaO0kxhmTRQrHQvzMg4H5W
+KyHSGo6E4Wdu+qvAd/Vbby+tS6ooLk8kDNj44etvdvB78NcEXUAg/ehZkWGAvS3
Ht2GCO8gpXDnnTA1OJPFBfHUNVD2tEqD1aZi066shOp32obrzq9Ma6M4quZxbPs8
Rprg0GV1QxKKKK/MeAIrKS39BuhehAYVte01UYrhAV4YCnVK+Eosj4KwfMrQMvbD
ApOU1LxGsROKf56ydEVlx9iZkK0hh2KhsUjZqn2SGPB2ZHJocowO2um+lXSHtEv6
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org