Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS206119.roa
File: AS206119.roa (raw, json)
Hash identifier: NqZBUOxmqPvHY/vQhIxi6fSKIP05Zfs1pOEtV4TkXF4=
Subject key identifier: 2E:8C:80:1E:C4:F0:83:1B:43:DE:BC:5B:65:3D:84:93:F0:3B:94:0D
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 3D1FCBA6989B7319BE8DACF74E134387D346AA2F
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS206119.roa
Signing time: Tue 06 Jun 2023 09:25:56 +0000
ROA not before: Tue 06 Jun 2023 09:20:56 +0000
ROA not after: Tue 04 Jun 2024 09:25:56 +0000
asID: 206119
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1f:cb:a6:98:9b:73:19:be:8d:ac:f7:4e:13:43:87:d3:46:aa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:20:56 2023 GMT
Not After : Jun 4 09:25:56 2024 GMT
Subject: CN=2E8C801EC4F0831B43DEBC5B653D8493F03B940D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:a1:00:39:12:60:52:f7:b1:d3:08:41:ab:
eb:69:4e:46:2c:af:13:02:13:f7:09:b4:14:9b:c3:
a6:4c:e1:89:de:32:ae:11:fd:f5:8b:07:a4:4a:a8:
f6:7c:28:8b:0f:78:de:e5:01:e5:b3:8f:4a:16:ed:
33:c7:a9:d6:75:0f:de:87:95:23:94:86:ac:51:dc:
70:2f:a8:32:78:49:40:bb:67:cf:6a:b4:29:5f:55:
a3:c2:5f:25:2e:17:51:35:c7:00:e7:fb:09:e9:94:
98:3a:7f:51:b2:91:ca:5d:08:cc:96:8f:53:38:7a:
30:56:ab:7d:82:70:78:af:ae:d6:5e:03:e4:a9:8f:
dd:6f:d3:92:7f:46:a1:16:c9:8a:d8:ec:3e:fe:ee:
06:98:dd:7a:51:85:7b:3b:59:d4:9b:ae:15:75:17:
16:c7:b4:6a:34:29:d1:71:72:cc:31:3b:c9:13:0f:
33:f2:16:ea:82:34:cd:0a:0c:0b:86:51:47:9e:52:
ab:1a:a7:54:30:bb:72:a7:81:cf:8e:31:c2:5a:44:
06:2a:c4:1d:b3:1e:03:68:de:fd:c7:ec:4c:69:9d:
cc:29:74:40:56:f7:a8:d2:63:98:42:0a:8d:20:3b:
7f:41:ab:28:5c:8d:5a:5c:0a:06:77:3b:b9:99:ce:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8C:80:1E:C4:F0:83:1B:43:DE:BC:5B:65:3D:84:93:F0:3B:94:0D
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS206119.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a0:dc:73:bb:0e:cc:93:85:cc:2d:60:df:30:04:75:2c:e5:
33:57:7e:ab:9e:ba:ce:3f:8f:60:ea:8a:c6:73:a3:6a:83:7c:
dc:49:ba:33:57:8c:48:39:fe:a6:cb:f3:64:15:33:63:66:cd:
38:42:e9:c4:75:bd:b4:85:61:b5:49:4b:b4:df:f9:be:10:b2:
62:8e:7d:e0:f0:bc:ec:19:02:9e:f0:42:5c:6a:10:b7:41:dd:
32:71:42:e2:24:cf:bf:3b:08:3c:4f:b9:3a:05:e2:37:80:e4:
2e:28:73:50:f0:98:d1:f5:21:5e:d0:f3:8e:03:81:97:35:67:
9a:38:0f:0f:00:11:54:5e:21:ed:6d:fe:71:47:49:47:c0:c5:
00:87:c5:09:4a:fb:91:6d:25:af:8e:90:12:87:dd:d0:f1:45:
d6:a8:9f:03:87:81:47:9c:a4:5a:6f:a7:6b:9e:69:ca:de:cc:
00:59:0e:c3:cf:7e:cb:c2:7f:b8:54:f2:20:1e:90:18:3d:8a:
84:d6:28:13:78:d3:44:af:3c:4c:12:66:d9:aa:16:7f:f4:bf:
09:4f:6b:b8:4c:cf:ec:3c:e7:26:2e:d6:7c:e9:a0:fe:a7:d2:
5b:48:1c:e2:a5:3d:12:17:ab:20:0d:1e:30:65:cb:b2:c9:23:
a9:90:cc:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPR/Lppibcxm+jaz3ThNDh9NGqi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTIwNTZaFw0yNDA2MDQwOTI1NTZaMDMxMTAvBgNV
BAMTKDJFOEM4MDFFQzRGMDgzMUI0M0RFQkM1QjY1M0Q4NDkzRjAzQjk0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvi6EAORJgUvex0whBq+tpTkYs
rxMCE/cJtBSbw6ZM4YneMq4R/fWLB6RKqPZ8KIsPeN7lAeWzj0oW7TPHqdZ1D96H
lSOUhqxR3HAvqDJ4SUC7Z89qtClfVaPCXyUuF1E1xwDn+wnplJg6f1GykcpdCMyW
j1M4ejBWq32CcHivrtZeA+Spj91v05J/RqEWyYrY7D7+7gaY3XpRhXs7WdSbrhV1
FxbHtGo0KdFxcswxO8kTDzPyFuqCNM0KDAuGUUeeUqsap1Qwu3Kngc+OMcJaRAYq
xB2zHgNo3v3H7ExpncwpdEBW96jSY5hCCo0gO39BqyhcjVpcCgZ3O7mZznO3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQULoyAHsTwgxtD3rxbZT2Ek/A7lA0wHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ1NTZmNDE2LWFhZDYt
NDFiZi1hZWJmLTgwYTJjYzY3YTQ2Ni8wL0FTMjA2MTE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdb
MA0GCSqGSIb3DQEBCwUAA4IBAQCEoNxzuw7Mk4XMLWDfMAR1LOUzV36rnrrOP49g
6orGc6Nqg3zcSbozV4xIOf6my/NkFTNjZs04QunEdb20hWG1SUu03/m+ELJijn3g
8LzsGQKe8EJcahC3Qd0ycULiJM+/Owg8T7k6BeI3gOQuKHNQ8JjR9SFe0POOA4GX
NWeaOA8PABFUXiHtbf5xR0lHwMUAh8UJSvuRbSWvjpASh93Q8UXWqJ8Dh4FHnKRa
b6drnmnK3swAWQ7Dz37Lwn+4VPIgHpAYPYqE1igTeNNErzxMEmbZqhZ/9L8JT2u4
TM/sPOcmLtZ86aD+p9JbSBzipT0SF6sgDR4wZcuyySOpkMy5
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org