Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202905.roa
File: AS202905.roa (raw, json)
Hash identifier: ir59N2GpbWroPQwhMjLZzEThbtX3o/Nxz39xCg4XLgg=
Subject key identifier: BA:91:1F:76:74:43:12:39:13:7B:31:94:24:64:F9:87:96:6C:5D:84
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6DCF9C9EFBA94692A055435A75354878A7012C31
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202905.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 202905
IP address blocks: 2a06:a005:1279::/48 maxlen: 48
2a06:a005:1ff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:cf:9c:9e:fb:a9:46:92:a0:55:43:5a:75:35:48:78:a7:01:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=BA911F7674431239137B31942464F987966C5D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:17:f2:d2:79:db:00:79:18:7c:c0:db:fa:
9f:ea:9d:b1:43:e0:ce:3f:77:f2:65:e8:50:3d:f2:
31:54:99:35:3a:91:c0:5d:be:bd:48:52:6c:30:47:
83:ae:3e:8b:b3:f6:1a:64:28:6b:2b:4d:fa:5f:82:
80:de:1d:24:07:b8:0e:0d:e5:cd:1b:db:11:58:1a:
8f:b3:71:47:d9:c3:79:a1:c3:27:0d:f4:8c:93:75:
e4:85:32:02:69:87:33:91:83:21:a2:87:96:52:28:
a4:e7:f2:b3:29:e1:b5:c2:85:8b:90:66:d9:b1:2b:
95:85:aa:fc:18:33:28:00:b5:2e:67:e5:1f:45:cc:
d3:f5:ba:40:ce:94:e0:70:2a:be:19:7d:f3:41:9b:
16:5f:72:db:00:e6:d6:90:09:00:9b:41:cd:e0:95:
0b:09:bb:64:b3:72:de:2f:fc:a0:61:04:39:d1:25:
f0:c9:de:58:f7:c4:cd:98:88:58:a1:cc:97:e5:11:
df:ad:54:9d:54:cb:fd:50:6e:b1:fd:df:90:9c:60:
07:13:a3:cb:cc:bf:05:99:97:59:a4:b6:4b:98:0e:
d6:e2:83:d9:50:99:f9:4c:6e:28:bc:ba:ca:1f:10:
9b:7f:c7:bf:cd:0a:8e:2f:bc:0a:a1:eb:f3:90:f4:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:1F:76:74:43:12:39:13:7B:31:94:24:64:F9:87:96:6C:5D:84
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1279::/48
2a06:a005:1ff0::/44
Signature Algorithm: sha256WithRSAEncryption
99:a8:ca:9b:4c:78:83:1f:02:43:a7:9e:0b:ae:c0:9e:dc:ed:
8d:de:2b:52:ff:b3:f2:0b:0b:ff:75:f5:31:47:eb:dc:63:98:
3d:c2:2a:53:a7:34:2c:fe:4b:6b:1a:e1:26:fa:58:c8:06:9a:
0b:9b:51:7c:c0:b4:eb:1e:c0:da:ba:b3:1c:ce:98:54:82:80:
89:d9:16:c0:db:a9:c9:e6:86:df:cb:32:ac:f1:f6:5e:62:de:
e8:90:ef:b6:f9:bc:24:26:7f:78:72:ec:87:10:e9:a1:83:fc:
39:78:50:0d:09:6b:2d:4e:c9:cf:41:ae:42:c6:51:22:3f:78:
c7:57:50:ba:89:3c:97:6b:95:42:04:5b:34:a9:ee:33:35:fa:
dc:ce:31:61:47:c9:04:f3:b8:34:7a:78:43:5e:bd:5a:69:0d:
32:0e:f8:f9:65:e2:1d:18:27:18:06:d5:19:22:5e:01:13:55:
14:79:12:d0:f3:88:b4:10:d5:85:ea:04:d5:af:08:bf:49:b5:
63:8e:a5:39:9a:13:40:64:90:29:58:81:d4:c8:78:2f:f5:00:
5d:53:bb:02:df:ae:5b:a8:a2:fe:5d:5b:75:bc:64:d8:8c:03:
22:e9:94:ab:0e:47:d1:8f:90:80:8c:48:de:87:d8:cd:b6:d4:
80:3f:97:bc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUbc+cnvupRpKgVUNadTVIeKcBLDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjFaFw0yMzEyMzEyMzU5MjFaMDMxMTAvBgNV
BAMTKEJBOTExRjc2NzQ0MzEyMzkxMzdCMzE5NDI0NjRGOTg3OTY2QzVEODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkxfy0nnbAHkYfMDb+p/qnbFD
4M4/d/Jl6FA98jFUmTU6kcBdvr1IUmwwR4OuPouz9hpkKGsrTfpfgoDeHSQHuA4N
5c0b2xFYGo+zcUfZw3mhwycN9IyTdeSFMgJphzORgyGih5ZSKKTn8rMp4bXChYuQ
ZtmxK5WFqvwYMygAtS5n5R9FzNP1ukDOlOBwKr4ZffNBmxZfctsA5taQCQCbQc3g
lQsJu2Szct4v/KBhBDnRJfDJ3lj3xM2YiFihzJflEd+tVJ1Uy/1QbrH935CcYAcT
o8vMvwWZl1mktkuYDtbig9lQmflMbii8usofEJt/x7/NCo4vvAqh6/OQ9NJxAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUupEfdnRDEjkTezGUJGT5h5ZsXYQwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAyOTA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgag
BRJ5AwcEKgagBR/wMA0GCSqGSIb3DQEBCwUAA4IBAQCZqMqbTHiDHwJDp54LrsCe
3O2N3itS/7PyCwv/dfUxR+vcY5g9wipTpzQs/ktrGuEm+ljIBpoLm1F8wLTrHsDa
urMczphUgoCJ2RbA26nJ5obfyzKs8fZeYt7okO+2+bwkJn94cuyHEOmhg/w5eFAN
CWstTsnPQa5CxlEiP3jHV1C6iTyXa5VCBFs0qe4zNfrczjFhR8kE87g0enhDXr1a
aQ0yDvj5ZeIdGCcYBtUZIl4BE1UUeRLQ84i0ENWF6gTVrwi/SbVjjqU5mhNAZJAp
WIHUyHgv9QBdU7sC365bqKL+XVt1vGTYjAMi6ZSrDkfRj5CAjEjeh9jNttSAP5e8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org