Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204474.roa
File: AS204474.roa (raw, json)
Hash identifier: 0l4wM81u058Sf+5dYPn/ywOu3Rq/QNcD0QsgpB2w4Wo=
Subject key identifier: E0:6B:F7:09:9D:C0:1C:1C:00:CC:7E:BD:05:DD:1E:09:45:20:AB:3C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0AB316924C810269ABE485D9EBBBDACFA38627E2
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204474.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 204474
IP address blocks: 2a06:a005:1cf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b3:16:92:4c:81:02:69:ab:e4:85:d9:eb:bb:da:cf:a3:86:27:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=E06BF7099DC01C1C00CC7EBD05DD1E094520AB3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:6a:f0:45:e6:be:a6:d4:79:56:c6:b4:87:
59:30:69:86:58:dc:19:ed:b4:11:c6:7f:a3:a0:b9:
66:a6:1a:13:a8:f6:3f:15:42:97:6e:69:86:bb:b5:
40:a5:1e:1a:e0:43:ed:33:64:37:7c:39:0c:9a:e0:
94:77:06:a6:2a:59:16:29:58:00:bc:43:b2:98:1b:
83:20:7a:ae:46:6a:e8:d1:0c:be:59:6b:97:b3:2d:
c8:d1:64:28:74:83:e9:ea:97:cb:7d:63:d7:1d:0b:
f6:29:1a:c8:01:be:39:fd:15:29:7c:7a:16:e9:42:
dd:b6:96:3d:56:7f:ac:d2:77:b4:e3:9c:88:52:99:
1d:c9:cc:ef:f5:40:e9:6e:75:e3:30:65:29:52:a9:
c2:eb:3b:de:b4:76:0f:ce:e3:42:d0:39:1e:14:25:
ea:94:33:7e:f1:e9:8c:86:d3:78:aa:c2:c6:a3:cd:
2b:fe:e8:e4:9b:78:c5:eb:67:4d:aa:72:93:57:c9:
02:a0:75:3a:73:a4:02:1a:56:b3:e1:6a:b9:67:6b:
1b:fc:93:67:f1:f6:ed:69:4f:42:cd:f1:3d:20:4c:
30:d2:26:70:9a:ec:1c:d7:c5:7b:03:0e:0f:fe:ea:
91:c7:59:4e:da:e4:1b:3b:08:12:bb:4f:38:88:80:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:F7:09:9D:C0:1C:1C:00:CC:7E:BD:05:DD:1E:09:45:20:AB:3C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:0b:24:40:d4:20:6c:a8:e6:21:47:79:48:c4:5a:01:9e:1c:
57:7f:c1:a6:61:51:2e:31:28:88:51:08:16:2d:c9:59:fa:6b:
e5:07:4c:cb:21:6b:74:30:a0:3f:1a:ec:be:2f:0d:ac:d1:16:
a7:dd:42:4c:84:b6:96:a6:56:1f:61:68:c7:f4:8c:f1:38:3d:
f6:d2:63:de:5a:22:10:c7:ea:f6:55:f6:98:27:11:c3:df:d7:
b6:71:78:20:68:cf:d3:2f:51:24:55:ed:38:fd:f2:85:46:1a:
67:aa:a8:48:97:fc:64:de:c6:b8:23:a2:61:c0:e5:07:c5:0a:
b1:57:5d:71:f2:24:46:40:41:cf:5f:c1:fa:61:ac:4b:3b:84:
99:04:05:c8:b2:6a:6d:88:4c:ad:35:13:e9:41:65:cc:9e:c0:
62:df:dc:6a:c5:d5:46:25:80:b6:3c:31:52:15:04:ec:3d:31:
3b:52:d5:68:32:a0:fe:7b:11:24:d1:7d:51:59:e6:3b:f0:ea:
8b:45:2d:37:33:16:ab:81:f5:98:a5:ad:f1:98:b1:a5:84:95:
d5:a8:ad:bf:01:0b:d5:f4:24:81:5d:3b:2e:e8:54:14:c8:35:
66:1d:78:01:2e:d7:90:7d:e7:39:4c:4b:c7:f7:1d:dd:d3:e7:
fc:93:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:51 2025 by rpki-client