Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212071.roa
File: AS212071.roa (raw, json)
Hash identifier: Vp8jcgJeSFmqKqoOJhldHYEP9TNjyk3TmCOvNPR88yQ=
Subject key identifier: BA:F0:1C:76:A5:F8:F2:99:FE:0F:F0:C0:E1:D3:22:BB:83:85:F7:AF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6F6DEF98D71AD8DC2DD509412CA3F5BBC062778A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212071.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 212071
IP address blocks: 2a06:a005:12e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6d:ef:98:d7:1a:d8:dc:2d:d5:09:41:2c:a3:f5:bb:c0:62:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=BAF01C76A5F8F299FE0FF0C0E1D322BB8385F7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:b4:c9:97:20:3d:44:64:80:a9:50:63:fe:
7e:a2:fe:92:eb:d0:92:a2:0c:79:f9:94:0a:9d:d1:
d9:cd:e8:71:b4:11:8f:b6:de:7c:d5:57:94:35:5a:
a0:d4:7d:77:df:36:6b:c3:da:c8:e8:50:27:63:61:
e8:66:79:f9:1b:8c:f4:33:fb:63:30:94:7e:f6:38:
45:65:35:51:81:db:62:f0:3c:25:ab:14:46:c5:ea:
fb:28:35:68:ff:00:73:40:bb:c8:9c:f4:c6:62:56:
b4:b1:9b:0b:41:cd:d2:3d:7b:7b:96:9a:78:95:82:
6b:3d:aa:15:1a:ad:1b:0b:f4:47:61:c8:91:f3:83:
7f:6f:9c:fa:af:85:e3:0b:ff:c3:88:8c:b8:28:54:
12:f6:ea:60:32:c6:db:6d:eb:0a:94:80:38:c4:43:
e6:7e:54:ce:de:2a:1e:c6:3f:0e:48:1c:0f:0d:6f:
73:57:01:6c:d5:03:80:a8:dd:f7:6c:c0:19:1f:a8:
c8:02:f9:d6:27:f9:e1:67:56:6a:50:77:9f:4f:06:
42:66:ad:e3:57:b9:c6:e1:a9:8b:6e:66:ab:22:60:
0d:28:85:24:fa:d9:e7:64:d3:84:db:d1:28:0f:9a:
b2:2d:93:f1:ed:f0:cc:68:fe:7e:97:e9:ed:d2:d1:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:1C:76:A5:F8:F2:99:FE:0F:F0:C0:E1:D3:22:BB:83:85:F7:AF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:12e0::/44
Signature Algorithm: sha256WithRSAEncryption
2f:d0:8c:f8:11:a5:30:a1:64:29:87:29:b7:43:f2:21:65:0c:
f4:81:f0:6f:bf:ab:a7:8d:63:5c:11:91:09:fa:a2:cb:3e:ee:
17:e2:85:6c:61:45:ac:e1:10:f7:ae:6e:c6:c1:b5:92:99:05:
e8:22:ee:88:35:46:95:bf:16:84:f7:69:ad:7a:d8:dd:3b:65:
bd:27:32:31:d4:a1:cd:f2:3d:17:ac:97:43:6c:b7:a2:ac:a3:
b7:51:8f:d0:6e:f8:fe:72:35:ea:df:a3:35:cb:b0:49:f8:a4:
8b:d1:1f:a5:d1:c1:be:e9:a0:3b:75:2a:1d:c3:d9:28:b8:86:
28:5b:f7:0f:94:51:28:c3:54:b9:d8:07:1b:47:50:8c:40:4a:
95:4e:e0:2c:5b:fe:cf:8b:58:91:0c:75:c9:14:0c:fc:61:b6:
90:70:8c:85:26:13:4a:bd:09:7c:34:58:6f:4f:30:ed:52:7f:
73:d5:f3:92:b9:4a:ae:02:ab:4c:06:43:1b:17:e1:a5:08:5b:
ca:c2:78:22:38:d0:81:02:ea:ad:aa:a2:8b:54:09:e2:dd:63:
63:79:80:f4:14:c3:ad:86:82:4b:6c:90:48:d4:3a:b7:4b:52:
66:8e:e0:2d:f5:84:e3:ff:2c:c1:b3:ba:e7:8d:29:9b:cb:53:
58:5e:5b:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUb23vmNca2Nwt1QlBLKP1u8Bid4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjVaFw0yMzEyMzEyMzU5MjVaMDMxMTAvBgNV
BAMTKEJBRjAxQzc2QTVGOEYyOTlGRTBGRjBDMEUxRDMyMkJCODM4NUY3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6bTJlyA9RGSAqVBj/n6i/pLr
0JKiDHn5lAqd0dnN6HG0EY+23nzVV5Q1WqDUfXffNmvD2sjoUCdjYehmefkbjPQz
+2MwlH72OEVlNVGB22LwPCWrFEbF6vsoNWj/AHNAu8ic9MZiVrSxmwtBzdI9e3uW
mniVgms9qhUarRsL9EdhyJHzg39vnPqvheML/8OIjLgoVBL26mAyxttt6wqUgDjE
Q+Z+VM7eKh7GPw5IHA8Nb3NXAWzVA4Co3fdswBkfqMgC+dYn+eFnVmpQd59PBkJm
reNXucbhqYtuZqsiYA0ohST62edk04Tb0SgPmrItk/Ht8Mxo/n6X6e3S0ZvPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUuvAcdqX48pn+D/DA4dMiu4OF968wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEyMDcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BRLgMA0GCSqGSIb3DQEBCwUAA4IBAQAv0Iz4EaUwoWQphym3Q/IhZQz0gfBvv6un
jWNcEZEJ+qLLPu4X4oVsYUWs4RD3rm7GwbWSmQXoIu6INUaVvxaE92mtetjdO2W9
JzIx1KHN8j0XrJdDbLeirKO3UY/Qbvj+cjXq36M1y7BJ+KSL0R+l0cG+6aA7dSod
w9kouIYoW/cPlFEow1S52AcbR1CMQEqVTuAsW/7Pi1iRDHXJFAz8YbaQcIyFJhNK
vQl8NFhvTzDtUn9z1fOSuUquAqtMBkMbF+GlCFvKwngiONCBAuqtqqKLVAni3WNj
eYD0FMOthoJLbJBI1Dq3S1JmjuAt9YTj/yzBs7rnjSmby1NYXltq
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org