Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204375.roa
File: AS204375.roa (raw, json)
Hash identifier: Y2AeIXAIxXDU0vZuCkizuMfqIKfA1++s3DwagT14Mac=
Subject key identifier: BB:EC:1E:5E:1C:5A:26:C7:B8:F3:C1:29:5C:15:2B:AB:63:0A:DF:D7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 32BAA3409FB3FC4AEFA9D9507147EDA171D8BB01
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204375.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 204375
IP address blocks: 2a06:a005:2d3::/48 maxlen: 48
2a06:a005:5a0::/48 maxlen: 48
2a06:a005:ad0::/44 maxlen: 48
2a06:a005:2270::/44 maxlen: 48
2a06:a005:2590::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ba:a3:40:9f:b3:fc:4a:ef:a9:d9:50:71:47:ed:a1:71:d8:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=BBEC1E5E1C5A26C7B8F3C1295C152BAB630ADFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:db:96:ec:41:31:af:2a:8e:ae:21:ed:c8:
ad:61:15:73:a8:08:f4:d2:9c:28:95:d4:c8:a4:0f:
8f:fd:40:33:9b:c0:a0:3c:9d:66:d5:5f:5b:93:15:
05:5d:ce:85:b3:46:27:02:00:a8:32:1e:f1:ba:f6:
df:b3:b9:a2:88:54:01:7d:e4:65:4b:78:24:09:ad:
ab:e0:cb:85:7b:39:f0:2e:4c:9e:c2:48:fc:68:dc:
f3:53:14:85:cc:99:f7:96:45:64:45:93:77:ed:8c:
e5:00:42:58:fb:b5:91:a0:2a:66:2a:c2:3a:47:c3:
cc:98:4a:33:2d:b7:ea:06:5a:46:f7:82:b8:42:82:
5a:1e:82:86:c9:9d:d7:d1:df:4b:d1:9c:d0:3a:2b:
54:21:b8:4b:47:38:3f:51:bf:a6:0c:e5:f2:4b:45:
68:58:d8:ea:07:fd:63:b9:6a:3b:c2:cb:e5:5b:31:
7c:09:05:f6:cd:f0:ad:26:dc:88:88:70:88:3f:4b:
88:94:b4:72:33:92:2a:30:e5:e3:a8:fd:93:69:da:
5d:46:b8:b4:85:3c:cc:97:78:a2:01:1f:4a:ca:6b:
ed:19:5d:f5:b7:05:38:e5:61:3f:8a:26:de:48:78:
c1:c8:44:82:84:2b:94:48:16:28:bb:30:1a:c8:4c:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:1E:5E:1C:5A:26:C7:B8:F3:C1:29:5C:15:2B:AB:63:0A:DF:D7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204375.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d3::/48
2a06:a005:5a0::/48
2a06:a005:ad0::/44
2a06:a005:2270::/44
2a06:a005:2590::/44
Signature Algorithm: sha256WithRSAEncryption
68:3b:92:a5:33:5f:ef:cc:1b:8b:59:47:a9:e8:27:d2:66:b5:
f4:ca:ec:14:41:52:fb:b1:7c:d6:4d:d1:ca:7c:d0:e7:5d:3e:
b5:6e:57:9b:20:dc:c7:5a:73:e5:4b:96:af:48:a6:8e:3b:76:
57:30:c8:20:22:3a:41:c8:da:e4:f5:dd:28:60:42:bf:7e:1f:
dd:82:3b:23:98:5b:9b:18:32:b3:d3:38:ad:3e:b0:bd:cd:48:
3d:9a:83:2d:cf:0f:e3:e2:0c:a7:6c:5c:5a:da:a3:fe:9f:56:
9c:de:d9:c3:7f:95:21:60:0f:f5:b2:fd:04:0b:ef:b1:53:9b:
d4:5a:de:fd:cf:59:e5:20:3e:84:6b:09:49:fb:25:a2:a2:86:
c7:c3:2a:4d:5f:79:cf:20:0d:b7:18:c4:ad:8c:e9:01:f2:63:
30:06:a4:b2:7c:c8:1b:37:e0:1f:59:0a:29:31:d7:7c:c8:76:
90:c0:c8:07:52:39:bc:a1:d6:2c:46:75:db:c7:9e:0a:78:e5:
0e:f0:aa:e2:92:1a:1b:5b:26:6d:3a:47:81:d3:75:68:09:dc:
d8:e3:87:f0:89:cd:89:2e:dc:ac:3e:66:6d:9f:7f:15:bf:7f:
09:bb:ae:91:0c:64:96:da:f3:16:1c:b4:a4:b5:4b:4e:5b:7a:
69:e9:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org