Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204069.roa
File: AS204069.roa (raw, json)
Hash identifier: zt8vNl2vxu9i8Yk67QRe5Zl/fUqKngWR809VTWQquCE=
Subject key identifier: 97:DD:A7:9A:F3:D4:F1:BA:D5:95:B5:86:F6:FC:7C:76:04:2F:F2:0F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 69AA5F63C3881A338035DABF43A5E91DB2471738
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204069.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 204069
IP address blocks: 2a06:a005:a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:aa:5f:63:c3:88:1a:33:80:35:da:bf:43:a5:e9:1d:b2:47:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=97DDA79AF3D4F1BAD595B586F6FC7C76042FF20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:b3:40:fe:d4:34:d5:1f:d1:7f:30:68:4d:
b2:fc:cf:f4:29:2f:46:56:1e:2a:b9:1f:17:71:84:
eb:37:eb:47:07:7b:ba:e0:0a:88:e5:ec:9f:2f:69:
87:6a:44:ba:05:0b:1a:9d:cb:b2:d3:17:37:79:4d:
f0:a4:a6:71:a6:d1:39:01:32:77:b9:2f:51:c2:11:
f2:bc:9c:14:9a:01:20:89:80:ae:17:76:ae:cb:49:
9f:b7:de:8e:90:65:2d:54:c3:d8:fd:36:56:4c:62:
2c:81:18:30:8f:4e:f7:6a:31:5a:1f:ff:7a:1b:06:
4c:71:99:9b:25:35:11:b2:e2:ee:13:76:a7:40:52:
6f:42:19:fa:13:94:dd:ce:80:8c:e2:83:bd:c8:89:
5e:de:d5:91:77:0f:fd:f5:f6:09:02:55:0c:b4:99:
c8:29:39:4d:fc:4e:f6:6f:b9:41:f9:97:51:24:cd:
73:4d:22:24:1d:f1:02:bc:ab:7f:06:69:a1:c5:48:
da:db:3a:7a:24:c6:37:08:3c:62:ba:77:a9:8a:38:
e5:ad:5c:24:4a:89:71:2b:a5:fc:31:f1:4e:a5:f6:
a7:3a:bb:de:c2:95:2f:2c:fb:b9:d6:b3:6c:fb:93:
d7:49:81:22:78:88:74:44:41:74:c8:a1:ee:93:86:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DD:A7:9A:F3:D4:F1:BA:D5:95:B5:86:F6:FC:7C:76:04:2F:F2:0F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a14::/48
Signature Algorithm: sha256WithRSAEncryption
90:1b:72:e9:f6:45:e6:1a:b2:e5:dd:e5:5e:47:f5:f2:eb:89:
d1:f7:47:10:43:71:b6:41:eb:d8:00:0a:16:c7:2b:6e:80:c6:
13:32:11:52:37:a7:5b:1e:c1:07:23:ba:a0:de:84:be:69:af:
95:bd:1c:40:b8:2a:94:6f:85:b3:e4:92:26:6d:d8:6e:93:3c:
4f:03:de:6d:ce:2e:00:28:54:21:09:17:26:0c:88:34:02:14:
a5:e7:54:b4:ea:f5:98:fb:85:70:44:83:79:a5:79:bd:ee:bd:
b1:b5:dc:7a:d8:f4:9e:8e:2c:94:e3:b9:36:1f:9b:f9:cf:55:
97:81:e0:2f:c8:b3:1d:ab:00:59:98:37:b8:34:a7:62:c2:49:
a7:31:99:57:5f:2b:5e:e4:bf:69:b7:21:1d:be:ff:88:00:4e:
3b:9c:fb:35:83:7c:79:87:1a:26:bf:6b:cb:01:c4:ae:14:f6:
ee:a9:c1:b8:c3:5d:4d:e7:9a:83:12:9e:c4:fc:e7:37:12:4c:
b4:63:a9:11:ce:85:e0:6c:1c:33:2f:17:e6:93:aa:9d:47:fa:
90:5f:a1:61:db:c0:bf:78:ef:62:34:8b:1d:8b:a2:bf:43:ab:
43:9a:07:8a:69:4b:3d:5c:3e:63:6b:13:7f:41:d6:21:37:aa:
23:81:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org