Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204406.roa
File: AS204406.roa (raw, json)
Hash identifier: 0pKagYMV8U+FRySOrT0AjsfNlcSiX2YhORSOBZ4Ggjg=
Subject key identifier: 57:FD:90:00:42:03:4F:D0:16:D8:8C:CD:EA:98:E2:B7:C0:DB:AB:6E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7E4E55C9CBA3A88C8A1ED3425CFF2E62BB0E654D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204406.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 204406
IP address blocks: 2a06:a005:1660::/44 maxlen: 48
2a06:a005:1c90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4e:55:c9:cb:a3:a8:8c:8a:1e:d3:42:5c:ff:2e:62:bb:0e:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=57FD900042034FD016D88CCDEA98E2B7C0DBAB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:c7:22:71:6f:65:40:96:0e:1d:ca:c1:c1:
56:4b:7f:89:b0:5c:d9:7a:86:7f:20:c2:49:e2:b7:
b6:cf:73:78:0c:b1:05:38:e0:64:13:60:b1:fa:80:
cb:d3:e7:3b:b5:17:75:c9:60:5a:0c:77:80:5c:05:
34:79:3d:13:c7:42:c0:2f:38:fd:7b:5b:9a:e1:44:
bb:03:55:55:62:9f:14:2d:2f:0b:8a:9d:51:ec:7c:
89:56:b9:54:48:48:d2:ad:a3:24:a4:e9:ca:79:24:
3c:eb:2d:18:fd:72:2d:3f:0e:9a:0c:e4:5d:d8:ed:
81:33:5f:ec:67:ba:e7:03:e5:82:97:42:9b:e7:35:
4a:84:3b:41:eb:93:7e:13:b2:01:21:49:d2:fa:74:
d7:8c:50:99:a9:9c:f2:53:81:7f:d9:ba:96:fd:e6:
56:f0:72:6d:ef:54:7b:2c:75:aa:5a:b8:39:3b:12:
53:71:27:5d:a3:f8:7d:19:26:37:58:cd:23:bc:42:
d2:72:9e:6e:8e:82:da:fe:6e:e1:fa:2d:05:95:52:
29:58:01:3a:3b:76:28:c5:3a:45:f1:4d:b3:40:e6:
f3:0d:36:1c:96:a5:c1:15:b9:1e:2c:d6:17:df:6e:
73:7c:cb:43:4d:a5:d9:65:62:9f:42:34:78:53:6c:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:90:00:42:03:4F:D0:16:D8:8C:CD:EA:98:E2:B7:C0:DB:AB:6E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1660::/44
2a06:a005:1c90::/44
Signature Algorithm: sha256WithRSAEncryption
1a:11:26:01:e8:fd:5d:d6:78:61:8d:7e:6b:d9:61:e7:23:58:
6a:6c:9a:68:3b:0a:78:81:34:4c:c5:26:81:08:21:f5:72:84:
e3:39:cf:13:fa:bc:2f:c5:29:c0:74:21:9b:d7:92:e9:79:e5:
34:6b:f1:6e:29:11:ff:a3:97:36:af:7b:ab:ac:ac:09:e4:bf:
94:ff:cc:d6:1b:39:ab:37:b4:93:4c:50:f8:4d:c9:fb:36:5d:
6f:74:53:51:f8:33:2e:a0:77:5f:7b:3e:a1:ce:b6:d3:0c:77:
ba:86:b3:3b:c4:88:73:39:a8:e8:a0:60:19:0a:12:98:31:d5:
87:97:a1:92:e8:80:5e:ac:65:5e:c1:cb:13:45:86:59:ac:77:
c4:75:ad:bf:4b:ec:df:08:5b:80:d2:9c:51:10:5a:c5:39:57:
ae:e8:0f:0b:bf:f4:21:72:20:4a:a1:a3:1e:93:aa:37:f0:81:
c8:54:6c:2f:7d:57:1c:25:6f:5e:72:5e:91:5c:93:40:67:b1:
6a:f8:fe:dd:48:a8:61:9b:ac:72:92:c5:c9:19:72:11:97:de:
c8:b6:48:5f:34:99:32:c4:85:99:ff:88:6d:6b:29:94:69:4d:
36:6e:db:8d:4f:ce:15:42:81:d6:d8:1f:a2:f5:c3:00:30:88:
85:94:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org