Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204291.roa
File: AS204291.roa (raw, json)
Hash identifier: p+WlzUoXKBz7wz37w/y7CUU727So+kWdjEBXcfiVVUs=
Subject key identifier: 5D:FA:AA:12:DC:B4:E4:8C:51:AA:08:8C:76:19:07:B9:1E:74:9F:92
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6FB6622F2158EE206A031DE331FECC3DF40878B3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204291.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 204291
IP address blocks: 2a06:a005:1740::/44 maxlen: 48
2a06:a005:1750::/44 maxlen: 48
2a06:a005:1760::/44 maxlen: 48
2a06:a005:1770::/44 maxlen: 48
2a06:a005:1780::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b6:62:2f:21:58:ee:20:6a:03:1d:e3:31:fe:cc:3d:f4:08:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=5DFAAA12DCB4E48C51AA088C761907B91E749F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:c5:be:dc:35:98:40:12:15:1d:26:2f:88:
2a:30:e8:a9:5b:05:35:cc:f2:7e:0f:3e:2a:7b:25:
1d:31:8f:61:52:47:39:11:68:45:0a:f8:5b:23:e8:
b0:c6:0a:f1:ca:8b:d6:c7:a7:d9:2b:42:a9:a8:92:
73:38:19:19:53:a1:81:a8:fd:63:83:fd:6f:31:08:
88:3a:3c:c0:0e:e1:ac:89:86:c3:d2:3a:84:3b:bb:
1e:d1:ff:14:84:98:fd:2b:e4:3e:7d:75:e9:6b:9b:
f0:a8:0c:6e:87:d0:07:cb:71:b6:04:3c:3a:11:64:
1d:cc:32:92:19:48:b7:e3:4a:4f:d3:bd:f1:a3:46:
e6:a3:aa:36:63:55:93:cc:97:ad:27:a1:1c:89:a2:
90:d4:7a:92:f1:c1:12:d6:52:69:f3:99:1c:12:72:
f9:e7:a0:64:fa:7f:00:95:23:de:ad:a4:57:ae:80:
8e:10:03:a5:7e:8e:e5:7a:f8:4e:e4:30:a8:f1:0a:
7b:ba:64:55:19:8b:89:34:20:66:68:6f:1a:94:6e:
1f:6d:5f:87:dc:f0:ac:30:37:8e:f4:04:3c:7f:e3:
0a:fd:41:d0:0f:8c:46:c5:bc:c1:5f:45:6a:02:f5:
9a:40:ae:bb:e0:9c:b3:8e:d3:9d:a5:6d:34:17:bb:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:AA:12:DC:B4:E4:8C:51:AA:08:8C:76:19:07:B9:1E:74:9F:92
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1740::-2a06:a005:178f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:1f:47:88:fb:1f:b3:d7:db:77:06:1f:a4:76:f6:f5:4f:95:
e3:72:8b:de:f0:e2:76:23:30:d5:cc:b1:04:29:e3:4c:48:75:
41:5e:8f:98:82:65:48:45:40:e5:71:fb:67:00:4a:3e:74:db:
0b:7c:de:3a:be:1a:d9:4a:70:52:ed:89:50:36:3d:ac:a0:eb:
45:7b:d5:8c:9a:b4:6e:8c:54:81:5b:d6:54:cd:3b:b3:03:3e:
fc:99:2a:46:5b:db:cf:ca:93:29:96:eb:ce:54:81:9b:48:9e:
b4:8f:32:a4:ee:3e:2d:f3:d1:47:24:27:61:ba:95:c6:e2:2c:
fc:84:c3:d3:50:97:c0:7a:6d:79:f3:ff:10:7c:53:20:99:f6:
f4:95:87:5c:29:4a:ff:de:4f:a6:1a:6b:69:59:b7:f3:86:db:
d8:cc:34:cb:63:cd:73:63:ee:79:fd:b2:1f:7e:36:f1:69:7d:
f3:d2:40:4b:c4:93:29:97:cb:b1:2d:3a:7c:e2:0a:73:ba:39:
f3:dc:a6:18:78:8b:3b:8d:39:86:fd:6c:c2:ed:7b:8b:20:80:
d3:15:79:36:a2:34:10:b4:1f:67:09:d3:39:40:a6:81:22:08:
c9:84:d3:fe:19:0f:8a:d1:46:2e:fd:09:11:84:c0:69:23:2b:
e2:8b:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org