Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204446.roa
File: AS204446.roa (raw, json)
Hash identifier: uzZdBhBexnmk7ZbugFapvYcJlY2hwxfslL4PEVNFIcU=
Subject key identifier: C2:54:76:24:AE:7B:4F:1E:E4:0C:D1:FE:64:3A:67:D3:30:0A:6B:35
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0C564679D45C03A92DC896C114819E8196DB9504
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204446.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 204446
IP address blocks: 2a06:a005:a20::/44 maxlen: 48
2a06:a005:1320::/44 maxlen: 48
2a06:a005:15d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:56:46:79:d4:5c:03:a9:2d:c8:96:c1:14:81:9e:81:96:db:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=C2547624AE7B4F1EE40CD1FE643A67D3300A6B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:a1:5c:5c:a8:d2:92:38:7c:04:86:b0:4c:
59:60:7f:1d:bc:36:5e:b8:62:5c:99:db:21:4a:1e:
28:e1:da:95:a7:6d:23:92:fc:36:a3:2e:e4:10:96:
7e:62:a9:4f:dc:90:0f:84:fc:76:07:e4:46:70:58:
8d:d4:ae:3f:0a:7d:36:88:1b:f9:98:79:09:b4:83:
97:5e:63:b2:df:4b:05:9f:82:33:7d:24:28:98:b3:
b1:39:78:17:78:d6:13:f6:06:c4:1d:5b:f2:9a:6e:
4e:4e:5f:fb:9c:82:5f:7d:a0:e9:86:cf:a9:78:a4:
e1:f7:55:df:25:63:06:a6:6e:94:2e:fd:6e:44:6e:
4c:1c:32:35:7d:b2:2e:ec:eb:c0:ab:03:a0:dc:cb:
d7:5b:97:c9:49:c0:d2:78:a2:cd:09:75:9d:fb:44:
82:f8:f3:64:79:9c:55:99:1e:9d:ef:63:c5:ed:d2:
52:46:1b:6b:83:de:0e:88:99:ab:bd:c5:fd:8d:fe:
11:c3:b0:fa:b0:6d:be:cc:a1:f1:60:cf:ab:23:11:
4f:54:a6:93:df:bb:0a:40:5c:39:90:df:71:10:80:
72:a6:f4:c4:41:94:9c:e4:25:41:3a:87:1f:af:da:
35:82:5a:ba:9e:f4:cf:15:33:13:6e:96:65:ec:22:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:76:24:AE:7B:4F:1E:E4:0C:D1:FE:64:3A:67:D3:30:0A:6B:35
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a20::/44
2a06:a005:1320::/44
2a06:a005:15d0::/48
Signature Algorithm: sha256WithRSAEncryption
23:64:d6:96:fc:0c:fc:3e:c1:87:b2:5c:86:0d:69:86:ff:d3:
74:a4:ff:62:83:80:9e:0c:13:6d:55:2f:a2:1b:06:f1:15:b9:
62:e3:c6:c0:a0:0e:47:ec:02:33:b1:af:a2:0b:f8:02:b1:c7:
6d:c2:33:04:00:22:c4:8d:f3:b7:b2:6e:2b:9f:bd:1e:df:4f:
ee:f0:2b:a6:9a:1f:e4:34:3e:de:35:e2:53:14:44:f1:45:c7:
44:93:d2:08:ca:c5:80:e0:2e:ec:32:08:32:0c:ce:1b:bb:06:
ab:a9:af:46:7e:27:7e:5b:89:64:e1:13:cc:c9:dd:2a:73:ed:
99:3f:c7:ec:3f:10:8e:94:cc:dd:0b:9e:92:5f:8a:07:2e:e2:
dc:ac:f6:e8:05:b7:47:6c:27:98:5c:b3:54:f7:c1:43:cd:6c:
36:e2:5f:15:4d:cf:34:49:08:ce:3d:43:58:49:49:80:d6:13:
e4:dd:87:0a:e5:22:64:70:c3:0a:10:3a:5f:fd:ed:1d:33:0e:
5b:20:53:be:31:ff:63:29:4c:92:5c:6f:b5:c0:6c:f1:97:f5:
9c:34:16:8c:3b:8b:2d:4a:8d:f5:9c:1f:a4:a2:7c:23:1e:90:
e8:98:3d:38:13:8f:0c:89:6e:8f:35:f1:fa:7a:b1:4f:73:15:
22:84:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org