Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212154.roa
File: AS212154.roa (raw, json)
Hash identifier: WoPCH5QGsehVOSUGszPZnND6qpH/dZ8FB5DKLPHe5+w=
Subject key identifier: 4E:F4:DA:61:48:60:6C:1D:40:A5:3F:9E:15:2C:75:61:7B:BD:2F:D9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 34DCC882852ED3ABE4732C10223C28B294D5B03D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212154.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 212154
IP address blocks: 2a06:a005:5a5::/48 maxlen: 48
2a06:a005:a03::/48 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:dc:c8:82:85:2e:d3:ab:e4:73:2c:10:22:3c:28:b2:94:d5:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=4EF4DA6148606C1D40A53F9E152C75617BBD2FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bc:be:c6:b7:27:61:2b:b8:33:db:88:98:b0:
bd:3b:78:38:dc:c7:6c:ad:21:13:59:9c:b7:a3:dc:
d1:05:48:27:48:3b:bf:78:43:d5:2b:1f:75:ac:c4:
8c:79:ab:63:b5:4e:d6:c6:50:95:ef:25:dc:c7:3e:
6d:b7:10:8a:c2:e4:f3:64:b8:9f:a5:bd:46:78:4f:
fa:cf:c5:70:b9:6d:2e:89:91:92:29:85:2c:cd:c0:
b4:21:0e:a2:b4:97:d3:9d:c4:53:48:7d:e6:98:5b:
fe:93:ff:d6:a8:a0:5c:90:34:3e:90:70:3b:ce:ae:
a7:ee:d1:d6:43:34:81:d9:3e:b6:00:7c:ff:6b:66:
be:91:03:53:8b:7b:5a:f5:cc:c0:03:c6:13:fc:5c:
b2:60:bc:0c:ad:63:fd:14:75:c8:b9:01:2d:b7:2b:
45:a5:91:e6:e0:db:c9:26:e5:1e:d5:3f:6c:bb:d6:
8e:d9:7a:f6:9b:ec:d2:0d:13:b4:30:2c:52:62:63:
4e:64:bb:de:ec:86:44:6b:2b:05:10:9c:c7:a7:09:
0a:b6:00:44:66:57:25:93:97:b4:f6:59:e6:fe:13:
26:ca:4d:c7:a7:02:b6:d2:4e:8b:57:60:2d:6a:b3:
79:67:c3:86:03:92:45:d9:1a:35:e7:85:3f:cf:2f:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:DA:61:48:60:6C:1D:40:A5:3F:9E:15:2C:75:61:7B:BD:2F:D9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a5::/48
2a06:a005:a03::/48
2a06:a005:16f0::/44
Signature Algorithm: sha256WithRSAEncryption
5a:2a:7f:08:a5:f4:5f:70:2a:f4:ff:38:8b:a8:fb:9d:a8:8d:
55:eb:02:5f:83:63:11:34:43:a9:4b:b5:84:a6:06:ff:8b:f3:
ca:81:bb:bf:a6:0e:ce:87:de:60:45:8c:5a:65:55:d5:1f:e8:
b3:58:d3:42:d0:08:13:96:3b:27:20:84:0c:8a:2d:45:5a:bc:
8e:0a:01:a2:a0:c5:23:4a:a3:fe:ac:01:d1:24:bb:01:2d:d8:
34:d1:6d:16:c8:00:23:cc:6e:05:95:d3:f6:76:8a:1d:17:fb:
94:a5:ba:ca:63:86:52:e0:7b:83:45:34:80:d4:c3:93:34:9f:
df:89:f1:d7:5a:33:e1:ad:be:3f:45:91:2c:a3:f1:d3:f6:fd:
19:44:72:0a:85:8e:53:cf:5c:bd:11:d1:9f:05:dc:a7:4a:8d:
f6:b8:8a:d1:ac:8e:a2:70:30:f1:2e:17:5e:c4:03:9b:64:80:
0a:92:fb:50:57:d0:b0:46:e8:d9:72:83:a8:7f:c7:dc:b6:0d:
34:69:ec:01:af:83:a1:22:80:36:60:d4:e8:ab:29:49:03:e4:
47:5f:b8:1c:37:56:18:74:be:45:a0:b8:57:4c:11:de:c0:93:
e0:bd:b0:a6:df:5c:13:5e:75:ed:65:cd:a3:28:bb:df:9e:33:
c3:b1:9b:f5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUNNzIgoUu06vkcywQIjwospTVsD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTVaFw0yMzEyMzEyMzU5MTVaMDMxMTAvBgNV
BAMTKDRFRjREQTYxNDg2MDZDMUQ0MEE1M0Y5RTE1MkM3NTYxN0JCRDJGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvvL7GtydhK7gz24iYsL07eDjc
x2ytIRNZnLej3NEFSCdIO794Q9UrH3WsxIx5q2O1TtbGUJXvJdzHPm23EIrC5PNk
uJ+lvUZ4T/rPxXC5bS6JkZIphSzNwLQhDqK0l9OdxFNIfeaYW/6T/9aooFyQND6Q
cDvOrqfu0dZDNIHZPrYAfP9rZr6RA1OLe1r1zMADxhP8XLJgvAytY/0Udci5AS23
K0Wlkebg28km5R7VP2y71o7Zevab7NINE7QwLFJiY05ku97shkRrKwUQnMenCQq2
AERmVyWTl7T2Web+EybKTcenArbSTotXYC1qs3lnw4YDkkXZGjXnhT/PL/+VAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUTvTaYUhgbB1ApT+eFSx1YXu9L9kwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEyMTU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgag
BQWlAwcAKgagBQoDAwcEKgagBRbwMA0GCSqGSIb3DQEBCwUAA4IBAQBaKn8IpfRf
cCr0/ziLqPudqI1V6wJfg2MRNEOpS7WEpgb/i/PKgbu/pg7Oh95gRYxaZVXVH+iz
WNNC0AgTljsnIIQMii1FWryOCgGioMUjSqP+rAHRJLsBLdg00W0WyAAjzG4FldP2
doodF/uUpbrKY4ZS4HuDRTSA1MOTNJ/fifHXWjPhrb4/RZEso/HT9v0ZRHIKhY5T
z1y9EdGfBdynSo32uIrRrI6icDDxLhdexAObZIAKkvtQV9CwRujZcoOof8fctg00
aewBr4OhIoA2YNToqylJA+RHX7gcN1YYdL5FoLhXTBHewJPgvbCm31wTXnXtZc2j
KLvfnjPDsZv1
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:07 2025 by rpki-client