Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204508.roa
File: AS204508.roa (raw, json)
Hash identifier: 9FRrOqfI5RRjqjxxNK2OjNQPthXFv0wXz+4ypVxvIvs=
Subject key identifier: 34:16:D9:EB:8E:87:7E:43:1A:DB:B6:04:E3:23:CE:7E:CF:F1:6B:2F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5BD131517193B02223D82D286C508B5EB92EA450
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204508.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 204508
IP address blocks: 2a06:a005:5f2::/48 maxlen: 48
2a06:a005:5fa::/47 maxlen: 48
2a06:a005:d29::/48 maxlen: 48
2a06:a005:f50::/44 maxlen: 48
2a06:a005:1930::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d1:31:51:71:93:b0:22:23:d8:2d:28:6c:50:8b:5e:b9:2e:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=3416D9EB8E877E431ADBB604E323CE7ECFF16B2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:24:1e:3a:11:92:ed:e5:ff:8c:7d:35:7a:
1e:fd:aa:70:de:02:99:9d:bc:fb:17:a0:f7:2f:8c:
06:8b:7c:fa:a2:10:bd:e5:67:30:8d:21:0f:cb:15:
b8:89:98:c2:4b:a3:51:d1:e6:fc:2c:51:ac:3d:c2:
e0:c5:87:20:fe:04:b4:e6:8c:3f:82:0e:0d:a4:91:
25:2b:68:16:ef:73:51:47:0a:c8:44:98:f8:51:6b:
c1:0c:83:fe:2f:00:d5:e8:b4:02:90:15:d7:b2:d6:
a6:be:5f:e2:66:75:ed:a2:e9:5d:ba:30:e7:f9:00:
22:6b:02:4d:9e:b4:4f:9d:2b:5a:7f:1f:94:1c:eb:
1f:39:c8:45:92:6b:7c:40:67:21:7b:f7:ed:f6:3f:
08:49:57:29:37:31:55:48:f2:a4:2e:fc:e3:9f:5b:
39:fe:97:00:73:3d:ec:14:fb:b2:19:d0:03:ca:74:
0a:0c:e8:d4:ca:8f:73:3c:bd:7e:1f:57:0b:f9:af:
75:87:25:77:04:b2:94:50:1a:38:c1:b9:f3:dc:4d:
48:0d:41:dd:e1:19:16:a0:dc:79:fd:ec:9e:7f:3e:
aa:e7:86:f1:a3:55:4c:45:6d:2c:c3:24:eb:c6:e5:
08:a4:42:94:20:41:b9:90:f1:86:e9:d7:f0:0f:1a:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:D9:EB:8E:87:7E:43:1A:DB:B6:04:E3:23:CE:7E:CF:F1:6B:2F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f2::/48
2a06:a005:5fa::/47
2a06:a005:d29::/48
2a06:a005:f50::/44
2a06:a005:1930::/44
Signature Algorithm: sha256WithRSAEncryption
9b:ca:5e:39:e4:78:a4:00:d9:97:35:33:ac:8e:8e:18:90:b1:
06:62:5e:2b:e6:a5:36:d5:06:a1:c0:80:df:ab:6f:90:b8:f1:
e5:fe:60:b3:ea:06:62:5e:5b:99:a8:df:45:43:6b:c3:e6:48:
28:73:81:5a:c9:34:75:e8:d4:d3:2b:a9:3b:ea:3d:b9:50:69:
ad:0b:d2:21:cb:0b:2d:3a:24:c8:fd:56:c2:97:70:3f:91:32:
f5:18:1d:61:49:e4:ce:0c:1f:a0:dc:86:7f:e9:be:9d:e9:3b:
0b:4d:73:1b:5e:34:4a:52:9b:5e:84:23:5a:b1:8f:87:3e:69:
8b:f4:b4:f7:18:d4:66:c1:2e:34:84:9c:d8:30:ac:31:93:48:
a9:76:8a:e1:29:82:cb:0d:6f:3f:9a:79:e3:69:cb:b0:05:00:
5d:26:73:d4:2b:c6:9b:a0:e0:8e:06:6d:8f:ef:fe:e5:86:10:
9b:93:b8:0e:d0:7f:48:c3:6b:f7:02:c1:85:73:44:19:6d:e3:
40:b2:12:6c:6b:61:67:5d:84:96:35:63:1a:75:06:9b:4d:78:
82:cb:fd:c1:07:09:53:21:56:f4:02:55:a7:ca:4c:81:18:3e:
e3:82:cc:28:9c:e5:90:d9:e6:84:6b:62:17:db:87:51:4b:b5:
22:13:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org