Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213105.roa
File: AS213105.roa (raw, json)
Hash identifier: QP4SWKD7QnYE2dLcYmQcKrYeKP1I+8SWLGtY7OP9lWE=
Subject key identifier: 1B:D2:2C:F5:0C:C8:39:87:3C:54:00:BF:72:38:04:3D:B5:36:07:2A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7500AB9722C16EFF69B714D6083E0361394CADF6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213105.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 213105
IP address blocks: 2a06:a005:1260::/44 maxlen: 48
2a06:a005:18e0::/44 maxlen: 48
2a06:a005:1d30::/44 maxlen: 48
2a06:a005:1f20::/44 maxlen: 48
2a06:a005:1f30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:00:ab:97:22:c1:6e:ff:69:b7:14:d6:08:3e:03:61:39:4c:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=1BD22CF50CC839873C5400BF7238043DB536072A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:c1:8e:6c:12:7b:9c:9e:f5:0d:55:11:3b:
dd:fb:25:5b:69:ee:76:5d:a9:e8:f9:95:84:1c:31:
ed:92:3a:7c:cb:18:f1:fd:36:06:3c:5a:93:b3:ea:
32:aa:79:8d:20:92:a5:c5:d7:3f:c8:5c:6b:a4:1c:
7f:c8:4a:29:ea:75:bc:9c:52:9a:ac:56:90:b3:ba:
92:45:7c:e2:d9:90:8f:3f:fb:78:99:76:f2:78:4c:
cd:21:06:25:4d:1c:d4:8d:62:d1:e6:ec:2f:a5:82:
95:0a:39:9b:5a:b3:46:43:87:54:af:ba:38:c7:e7:
04:13:d0:a2:7f:21:b6:1c:5a:52:92:f5:6e:2c:8d:
5f:2f:e0:ba:dd:9f:28:1f:8c:dc:d4:32:9e:6b:25:
54:2d:92:5f:17:c0:87:dd:cf:32:40:dc:1e:f4:2c:
17:8f:e6:3f:1d:14:d0:9d:4e:43:81:83:39:ed:7a:
0b:fc:f6:a5:71:0f:05:a7:0e:21:34:6c:00:09:44:
9b:00:b9:f7:28:10:fb:00:75:b1:8a:62:91:cf:7b:
b6:bb:68:d4:2c:47:35:1f:c2:f5:f5:c3:65:7b:bc:
e5:27:4f:49:24:38:f5:a3:06:3a:79:66:8f:17:65:
21:80:da:72:b2:28:1d:18:0b:9b:d5:f7:06:f1:9a:
98:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:2C:F5:0C:C8:39:87:3C:54:00:BF:72:38:04:3D:B5:36:07:2A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS213105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1260::/44
2a06:a005:18e0::/44
2a06:a005:1d30::/44
2a06:a005:1f20::/43
Signature Algorithm: sha256WithRSAEncryption
44:ae:e0:f8:a1:e6:10:01:a0:c5:3e:ab:dd:e3:b0:31:4d:1a:
8a:0d:98:09:5e:0c:67:7f:ee:50:87:4c:4e:a9:ce:24:05:f3:
e8:89:5a:91:da:12:c5:9e:ac:d3:65:cd:2d:85:71:56:00:54:
86:cd:1c:2e:d3:ba:73:1f:92:bd:09:25:0a:4e:46:43:96:84:
21:e0:dc:d0:22:d8:50:63:67:f4:b7:ce:d6:b5:43:68:73:b3:
fa:54:d0:19:c7:4d:33:74:a0:5c:c0:5e:b3:17:02:7d:21:39:
b6:57:61:a2:c3:a6:c7:3f:ef:4b:2d:0a:dd:e8:51:eb:3c:bf:
3a:35:68:64:cc:d8:62:27:6c:ea:1c:db:d8:8d:0f:87:a8:f0:
e1:a8:bd:89:02:41:68:f7:0a:67:a5:22:21:d4:dd:1f:6e:85:
38:66:5e:1d:3b:ce:5c:aa:4f:89:95:45:bc:e8:a0:84:b9:c0:
4d:e3:23:7b:24:75:0a:cf:cc:f2:c3:25:b3:eb:cf:fe:be:bb:
da:df:80:ec:6e:fc:35:4f:01:cd:22:29:ac:69:dd:99:bd:ee:
78:0d:e0:2b:0e:b2:05:3a:e4:6e:0a:17:f0:c5:4a:55:4c:21:
8a:c1:8d:24:c6:48:ca:2c:3d:0d:d6:fd:1f:e2:ab:06:da:25:
70:90:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org