Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205245.roa
File: AS205245.roa (raw, json)
Hash identifier: YUspGUCu1eFxE/yHqDWnxh+LrJAuqoohDDH+L8FMo5Q=
Subject key identifier: 23:EB:D9:82:F0:C0:86:17:8F:4B:7C:6B:0A:35:19:D3:F4:7F:1F:27
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 59E2A1ABE75C1471710BFB4DDBB044E99EAB6C70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205245.roa
Signing time: Tue 04 Feb 2025 00:17:08 +0000
ROA not before: Tue 04 Feb 2025 00:12:08 +0000
ROA not after: Tue 03 Feb 2026 00:17:08 +0000
asID: 205245
IP address blocks: 2a14:7580:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e2:a1:ab:e7:5c:14:71:71:0b:fb:4d:db:b0:44:e9:9e:ab:6c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:08 2025 GMT
Not After : Feb 3 00:17:08 2026 GMT
Subject: CN=23EBD982F0C086178F4B7C6B0A3519D3F47F1F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:34:26:70:b1:f2:6f:a0:a8:de:a6:e5:db:
d1:9a:0a:91:90:8a:cf:a3:4e:f6:35:aa:bc:ca:b4:
86:c0:9c:22:0f:d4:c8:3e:55:5f:94:d2:9d:51:05:
e9:b7:c2:53:ff:7b:72:a1:be:dc:6b:07:51:43:fb:
27:89:5f:f9:98:d8:35:41:ad:7f:ec:de:8f:e6:2c:
6d:30:55:66:0f:37:11:5b:97:f9:9f:e4:c1:d1:67:
00:fd:86:fa:30:98:e8:d9:66:e1:45:1a:58:df:8d:
9f:34:a0:73:ed:51:f6:b5:00:86:8b:98:d7:b4:d5:
10:17:1d:c2:2f:3a:90:03:22:83:5e:70:77:de:d1:
ee:9f:bd:1a:12:a4:ac:01:85:b3:41:d4:73:79:a9:
5a:c5:db:03:1f:bf:81:74:b8:3e:f0:10:86:21:c0:
51:02:0b:24:01:b4:71:aa:b6:47:c1:22:51:db:f2:
20:76:f3:dd:6e:f6:01:c1:ff:a1:7b:ac:68:d1:60:
16:fd:86:66:36:83:ac:18:d8:cb:f3:6b:a4:4a:e5:
e4:aa:31:1f:1b:be:fb:d2:74:6b:3b:9b:d0:10:69:
ea:03:e3:f7:be:e0:2e:3b:b3:b2:a6:d9:62:2a:cb:
9d:2a:2d:c2:c4:0d:e6:7c:a4:bc:93:ba:86:3d:81:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EB:D9:82:F0:C0:86:17:8F:4B:7C:6B:0A:35:19:D3:F4:7F:1F:27
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS205245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f200::/40
Signature Algorithm: sha256WithRSAEncryption
86:49:04:28:23:7b:70:89:51:4e:f0:48:e3:9a:cb:fd:0f:b7:
44:c4:8d:6c:85:41:f9:ef:d5:c0:6a:ab:73:ff:be:05:71:af:
63:5a:0a:d2:e7:d6:4a:f0:e4:c3:a2:56:0f:93:f1:b5:35:cb:
2c:0c:02:fb:53:80:8f:e2:ee:c0:85:8a:ac:bb:9c:aa:56:ab:
24:7a:99:42:15:6f:c0:d5:b0:26:22:66:6a:75:03:16:f7:57:
12:a9:bb:8d:c7:5d:2a:c2:92:06:ec:68:4b:f4:0e:b7:63:c6:
cb:40:91:d9:d1:5f:30:4d:32:e5:98:b7:87:bb:da:cd:28:e2:
86:f6:4a:e5:63:47:d6:14:d9:27:3a:51:fa:8d:1e:26:61:2a:
27:5d:55:72:b2:0d:d7:37:74:34:c5:34:90:c5:6a:83:f2:9a:
46:5b:f2:11:2e:37:c8:19:af:9c:83:12:b3:e0:78:60:f9:d6:
0d:67:ee:6e:9d:64:e8:99:6d:b8:8c:60:c8:3d:80:22:3a:8a:
8f:26:53:22:b5:1f:db:ca:59:84:44:a2:ba:e0:69:c1:8a:11:
29:50:f7:c9:08:00:dc:38:cc:28:e6:0a:36:1f:48:01:55:de:
df:20:78:04:9c:72:84:d0:5e:94:52:4d:78:7d:69:c0:b6:d9:
8a:0c:fc:8f
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUWeKhq+dcFHFxC/tN27BE6Z6rbHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTAyMDQwMDEyMDhaFw0yNjAyMDMwMDE3MDhaMDMxMTAvBgNV
BAMTKDIzRUJEOTgyRjBDMDg2MTc4RjRCN0M2QjBBMzUxOUQzRjQ3RjFGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijDQmcLHyb6Co3qbl29GaCpGQ
is+jTvY1qrzKtIbAnCIP1Mg+VV+U0p1RBem3wlP/e3KhvtxrB1FD+yeJX/mY2DVB
rX/s3o/mLG0wVWYPNxFbl/mf5MHRZwD9hvowmOjZZuFFGljfjZ80oHPtUfa1AIaL
mNe01RAXHcIvOpADIoNecHfe0e6fvRoSpKwBhbNB1HN5qVrF2wMfv4F0uD7wEIYh
wFECCyQBtHGqtkfBIlHb8iB2891u9gHB/6F7rGjRYBb9hmY2g6wY2Mvza6RK5eSq
MR8bvvvSdGs7m9AQaeoD4/e+4C47s7Km2WIqy50qLcLEDeZ8pLyTuoY9gcXdAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUI+vZgvDAhhePS3xrCjUZ0/R/HycwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA1MjQ1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1
gPIwDQYJKoZIhvcNAQELBQADggEBAIZJBCgje3CJUU7wSOOay/0Pt0TEjWyFQfnv
1cBqq3P/vgVxr2NaCtLn1krw5MOiVg+T8bU1yywMAvtTgI/i7sCFiqy7nKpWqyR6
mUIVb8DVsCYiZmp1Axb3VxKpu43HXSrCkgbsaEv0DrdjxstAkdnRXzBNMuWYt4e7
2s0o4ob2SuVjR9YU2Sc6UfqNHiZhKiddVXKyDdc3dDTFNJDFaoPymkZb8hEuN8gZ
r5yDErPgeGD51g1n7m6dZOiZbbiMYMg9gCI6io8mUyK1H9vKWYREorrgacGKESlQ
98kIANw4zCjmCjYfSAFV3t8geASccoTQXpRSTXh9acC22YoM/I8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:01 2025 by rpki-client