Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212888.roa
File: AS212888.roa (raw, json)
Hash identifier: ggkF+Zsx+4QQ90tyOhDuH00NioFj4JD+m1oGxsPD+Wo=
Subject key identifier: A9:EB:A7:A9:83:EE:2B:84:F2:FC:E2:AB:41:DB:DC:E5:4E:17:7C:CB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7AEC1987D1681F0680A5DFD6A1A5E82365073012
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212888.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 212888
IP address blocks: 2a06:a005:1::/48 maxlen: 48
2a06:a005:a::/47 maxlen: 48
2a06:a005:1990::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ec:19:87:d1:68:1f:06:80:a5:df:d6:a1:a5:e8:23:65:07:30:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=A9EBA7A983EE2B84F2FCE2AB41DBDCE54E177CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:2d:62:41:f3:00:d1:ce:f4:11:b7:1a:42:
c7:55:5e:b4:3f:6d:61:e5:a3:61:75:4b:13:32:30:
7a:9d:ea:3d:95:22:32:27:b9:ff:1b:3a:fd:1a:f6:
04:3a:8d:be:9d:34:8f:d4:ca:a3:d6:21:e1:5c:59:
49:c5:aa:8e:ec:5f:f7:63:e0:4e:01:11:99:c8:fa:
1e:8e:ba:d4:31:d5:fd:3c:5b:80:8c:64:8d:fc:6b:
19:9d:a0:c1:ce:20:64:c1:af:36:06:4e:97:a4:13:
7f:5d:a4:de:72:6f:92:3c:dd:a6:64:75:d2:66:fc:
b6:a3:bb:d6:d8:bc:32:13:ba:15:d6:25:43:c4:33:
e1:0e:ef:b0:53:1d:c4:3f:02:23:86:41:02:53:54:
32:50:2a:92:ab:7e:a7:d7:fb:d7:8c:f1:0a:dd:19:
5a:9b:77:38:f1:06:a1:a9:b1:92:4d:71:a7:10:ac:
b1:b0:c4:76:57:af:d7:73:ad:d4:01:07:e1:ed:8b:
5b:b6:63:91:13:37:30:53:1b:58:c9:dc:a8:9f:3d:
fb:d9:e6:f7:9e:08:aa:01:3b:08:ed:73:7d:62:25:
09:ef:b5:80:99:ee:49:68:29:e9:53:33:c2:f6:ff:
4c:4f:3f:93:fb:e1:16:15:16:25:48:28:66:9f:73:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:A7:A9:83:EE:2B:84:F2:FC:E2:AB:41:DB:DC:E5:4E:17:7C:CB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1::/48
2a06:a005:a::/47
2a06:a005:1990::/44
Signature Algorithm: sha256WithRSAEncryption
38:c7:06:9f:b3:ea:0f:f3:4a:97:85:3c:84:68:de:f2:a5:03:
2c:e3:ca:fa:99:f6:73:f8:82:cb:f6:37:8e:88:78:63:14:c6:
c5:35:c7:8d:76:d0:2b:d6:b4:3e:c9:79:a9:c4:b0:10:6d:c2:
6d:ad:0f:29:86:b0:8d:25:b5:44:0e:c9:5a:b1:cd:cb:71:7f:
4b:a7:fa:d1:cf:f8:54:bb:f0:96:2b:1e:18:5b:21:37:e1:0e:
5d:5b:55:54:89:e2:d5:8f:d6:4b:68:de:dd:71:24:97:43:77:
36:2d:49:dc:01:eb:cd:b2:40:75:c0:b6:0b:3f:96:1d:e1:cb:
92:a9:1d:8a:a4:06:d7:0b:cb:c6:e1:a1:48:e4:d2:4d:f0:fb:
43:fd:2a:18:db:24:28:4d:39:52:2f:b3:70:31:c9:4d:9b:c3:
cf:fa:01:8f:a3:85:ce:eb:9d:5e:a2:b6:e9:1d:45:33:71:e5:
ba:d2:4f:94:0b:09:e8:e7:dd:07:e9:fc:b7:8e:09:48:5f:e8:
5f:8d:e4:5e:5a:a3:c8:f3:33:4c:e0:84:f4:76:32:24:58:a3:
fa:24:fe:2b:3b:bb:66:65:47:7b:a7:bf:52:1c:ae:96:17:bc:
c8:e1:06:1a:62:bb:41:e1:07:28:58:23:89:9f:e0:90:fe:bd:
d5:53:a9:42
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUeuwZh9FoHwaApd/WoaXoI2UHMBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTlaFw0yMzEyMzEyMzU5MTlaMDMxMTAvBgNV
BAMTKEE5RUJBN0E5ODNFRTJCODRGMkZDRTJBQjQxREJEQ0U1NEUxNzdDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMi1iQfMA0c70EbcaQsdVXrQ/
bWHlo2F1SxMyMHqd6j2VIjInuf8bOv0a9gQ6jb6dNI/UyqPWIeFcWUnFqo7sX/dj
4E4BEZnI+h6OutQx1f08W4CMZI38axmdoMHOIGTBrzYGTpekE39dpN5yb5I83aZk
ddJm/Laju9bYvDITuhXWJUPEM+EO77BTHcQ/AiOGQQJTVDJQKpKrfqfX+9eM8Qrd
GVqbdzjxBqGpsZJNcacQrLGwxHZXr9dzrdQBB+Hti1u2Y5ETNzBTG1jJ3KifPfvZ
5veeCKoBOwjtc31iJQnvtYCZ7kloKelTM8L2/0xPP5P74RYVFiVIKGafc7HpAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUqeunqYPuK4Ty/OKrQdvc5U4XfMswHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEyODg4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgag
BQABAwcBKgagBQAKAwcEKgagBRmQMA0GCSqGSIb3DQEBCwUAA4IBAQA4xwafs+oP
80qXhTyEaN7ypQMs48r6mfZz+ILL9jeOiHhjFMbFNceNdtAr1rQ+yXmpxLAQbcJt
rQ8phrCNJbVEDslasc3LcX9Lp/rRz/hUu/CWKx4YWyE34Q5dW1VUieLVj9ZLaN7d
cSSXQ3c2LUncAevNskB1wLYLP5Yd4cuSqR2KpAbXC8vG4aFI5NJN8PtD/SoY2yQo
TTlSL7NwMclNm8PP+gGPo4XO651eorbpHUUzceW60k+UCwno590H6fy3jglIX+hf
jeReWqPI8zNM4IT0djIkWKP6JP4rO7tmZUd7p79SHK6WF7zI4QYaYrtB4QcoWCOJ
n+CQ/r3VU6lC
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org