Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204268.roa
File: AS204268.roa (raw, json)
Hash identifier: XB9GhZFjvODfSH/MLd7DLQQknpjOnO/bj8Bc1YluaMQ=
Subject key identifier: 5C:54:BD:2A:6E:60:C8:83:89:BB:A0:D7:8B:2A:F3:CA:B3:9D:FD:02
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 30B22BA1EF7570644367EC7A5C6C1131DB693AAC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204268.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 204268
IP address blocks: 2a06:a005:a0e::/48 maxlen: 48
2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:15b0::/44 maxlen: 48
2a06:a005:1d59::/48 maxlen: 48
2a06:a005:2320::/44 maxlen: 48
2a06:a005:2820::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b2:2b:a1:ef:75:70:64:43:67:ec:7a:5c:6c:11:31:db:69:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=5C54BD2A6E60C88389BBA0D78B2AF3CAB39DFD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:65:fc:01:89:19:4a:d5:55:a9:e8:e7:a9:
26:1c:f8:4e:2b:31:08:5e:af:89:8e:d6:ac:46:0d:
94:b1:48:fe:7a:8f:a1:ca:56:7d:f9:84:9e:55:95:
d0:7a:fb:15:c1:d7:ac:3e:43:d6:b1:15:fd:96:71:
1e:60:04:1c:cb:25:c9:bf:f0:39:42:9f:db:05:fe:
86:c9:c2:75:03:90:a4:50:9a:38:6a:46:84:75:f9:
50:5a:1b:79:0e:ad:85:9f:23:6b:e5:0f:1c:c2:06:
81:35:b5:bd:40:94:26:89:f5:e1:e9:c4:5c:d9:2c:
40:75:f4:11:da:f3:c3:42:dd:55:4d:bd:63:b3:da:
a0:51:a3:4e:0c:db:35:62:68:20:dd:da:83:65:28:
ff:97:1f:65:1c:45:8d:db:3c:5f:5b:9f:f1:06:9d:
49:2f:cf:c4:ad:d2:ee:e9:fd:e4:ca:92:25:b6:91:
07:12:18:c6:6e:dd:0a:d7:49:68:18:e9:66:4d:bc:
94:04:d1:21:3f:ed:60:f5:d6:03:89:bd:4f:c6:a2:
7e:ea:46:6b:de:bc:da:bc:7a:0b:8a:be:5a:b1:00:
ef:1a:30:f9:a1:7d:04:57:1f:21:27:3f:82:73:c4:
ee:54:21:3d:ba:0a:4a:71:66:a7:96:a7:55:11:3d:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:BD:2A:6E:60:C8:83:89:BB:A0:D7:8B:2A:F3:CA:B3:9D:FD:02
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
2a06:a005:15b0::/44
2a06:a005:1d59::/48
2a06:a005:2320::/44
2a06:a005:2820::/44
Signature Algorithm: sha256WithRSAEncryption
7e:1e:b3:95:f8:3d:ec:83:76:a5:fc:e4:69:35:99:6d:88:2c:
1a:b0:67:87:10:7c:46:5c:e5:cb:8a:81:6e:14:74:19:12:9a:
24:40:d4:13:da:99:5c:d3:0f:c9:be:33:d1:fb:96:bf:15:c9:
93:12:fe:24:f6:01:03:4c:24:e7:e8:91:d1:a5:42:9c:f5:0d:
ee:72:04:a3:6d:c9:06:45:22:02:56:30:9a:5c:2c:81:29:5c:
96:e9:b3:74:95:2e:b9:d9:97:80:9b:07:57:d8:d4:a0:3b:16:
70:6a:3b:a6:8b:8f:14:4b:73:43:a4:25:42:9f:5c:41:c2:dc:
0a:04:6f:eb:e9:0c:8e:00:11:a4:93:0f:ef:9f:f2:d1:46:0f:
3d:17:a7:7d:4f:bc:19:2e:c0:53:b8:7c:c6:23:a5:81:69:a4:
49:4b:31:31:d7:a6:a2:5a:d1:7e:11:3b:0f:9a:97:1e:a2:5d:
5f:5d:a6:c8:e4:c4:f9:d6:7e:da:03:5f:64:4f:a4:01:30:c0:
dc:83:7d:ef:e2:d5:b2:aa:fe:3f:28:31:e2:31:ec:45:9a:22:
d4:82:5b:2a:22:ca:47:25:04:6d:df:51:0a:2a:e6:cc:74:e7:
63:e8:03:27:7c:4d:20:0f:b8:87:37:c6:fc:f2:bb:fe:bc:23:
a4:78:7b:8d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUMLIroe91cGRDZ+x6XGwRMdtpOqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjBaFw0yMzEyMzEyMzU5MjBaMDMxMTAvBgNV
BAMTKDVDNTRCRDJBNkU2MEM4ODM4OUJCQTBENzhCMkFGM0NBQjM5REZEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDksmX8AYkZStVVqejnqSYc+E4r
MQher4mO1qxGDZSxSP56j6HKVn35hJ5VldB6+xXB16w+Q9axFf2WcR5gBBzLJcm/
8DlCn9sF/obJwnUDkKRQmjhqRoR1+VBaG3kOrYWfI2vlDxzCBoE1tb1AlCaJ9eHp
xFzZLEB19BHa88NC3VVNvWOz2qBRo04M2zViaCDd2oNlKP+XH2UcRY3bPF9bn/EG
nUkvz8St0u7p/eTKkiW2kQcSGMZu3QrXSWgY6WZNvJQE0SE/7WD11gOJvU/Gon7q
RmvevNq8eguKvlqxAO8aMPmhfQRXHyEnP4JzxO5UIT26CkpxZqeWp1URPd3XAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQUXFS9Km5gyIOJu6DXiyrzyrOd/QIwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0MjY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzBFBAIAAjA/AwcAKgag
BQoOAwcAKgagBQoSAwcEKgagBRAAAwcEKgagBRWwAwcAKgagBR1ZAwcEKgagBSMg
AwcEKgagBSggMA0GCSqGSIb3DQEBCwUAA4IBAQB+HrOV+D3sg3al/ORpNZltiCwa
sGeHEHxGXOXLioFuFHQZEpokQNQT2plc0w/JvjPR+5a/FcmTEv4k9gEDTCTn6JHR
pUKc9Q3ucgSjbckGRSICVjCaXCyBKVyW6bN0lS652ZeAmwdX2NSgOxZwajumi48U
S3NDpCVCn1xBwtwKBG/r6QyOABGkkw/vn/LRRg89F6d9T7wZLsBTuHzGI6WBaaRJ
SzEx16aiWtF+ETsPmpceol1fXabI5MT51n7aA19kT6QBMMDcg33v4tWyqv4/KDHi
MexFmiLUglsqIspHJQRt31EKKubMdOdj6AMnfE0gD7iHN8b88rv+vCOkeHuN
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org