Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204660.roa
File: AS204660.roa (raw, json)
Hash identifier: tek7x1ZoZPf+rn0gthvM/DrTCyOQJE3W/jA8wWKZ41E=
Subject key identifier: E9:58:E5:B0:09:A5:BD:02:4C:00:4E:BB:8E:EB:4C:F4:F9:57:0F:B6
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5C81D1D8B55DFC983AA59EDDBE3E4A9AC90EC8A6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204660.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 204660
IP address blocks: 2a06:a005:d23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:81:d1:d8:b5:5d:fc:98:3a:a5:9e:dd:be:3e:4a:9a:c9:0e:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=E958E5B009A5BD024C004EBB8EEB4CF4F9570FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:6d:b8:f5:38:6e:ae:bc:64:fe:e4:45:31:
fa:aa:6a:83:ea:c3:d1:a0:e7:51:42:6f:81:83:24:
0e:74:fa:c9:69:e8:e3:1f:c4:06:05:d1:ae:dd:c7:
7c:34:65:73:f2:03:b3:08:6b:c1:f5:9f:32:6e:59:
9e:8e:99:06:ef:78:c3:a3:2f:e1:9c:ab:75:f9:de:
fe:88:62:a3:24:9a:2e:e3:0e:03:3b:fa:7f:46:0e:
79:c0:83:62:0b:24:f1:a0:2b:af:7e:92:4e:4f:e6:
9b:2c:82:52:89:33:17:59:21:a6:17:a0:22:c0:b1:
3f:68:a4:1a:99:a8:df:46:49:a8:4d:09:b9:ce:af:
3c:48:3f:af:13:dc:86:e9:bf:19:19:df:0b:2a:43:
f0:1b:13:73:84:65:f0:76:f0:46:de:83:73:9f:35:
d2:b7:cc:1e:f3:94:a2:28:97:52:b0:85:0b:29:5a:
02:ce:b9:85:7c:f1:8b:9d:05:1e:e8:ae:99:c3:15:
7c:ce:c4:08:ac:ff:85:7c:c8:d4:68:71:cb:e6:ba:
e7:dc:7b:e0:9d:c1:76:fd:1d:17:a4:db:fb:16:6f:
f9:63:43:d6:91:97:04:88:a9:3b:ce:53:3a:3b:01:
12:4a:f0:4b:b0:9e:6a:df:ba:df:4c:68:ba:92:21:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:58:E5:B0:09:A5:BD:02:4C:00:4E:BB:8E:EB:4C:F4:F9:57:0F:B6
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d23::/48
Signature Algorithm: sha256WithRSAEncryption
79:91:70:6d:40:29:60:4d:05:3e:35:4b:a4:59:1d:44:19:e2:
d6:a5:38:d0:68:63:8a:50:00:a0:19:21:3c:74:07:48:c0:b4:
65:c2:7e:5b:dd:1d:6a:42:de:81:fb:5f:6b:59:7e:02:47:0a:
93:58:66:ff:1c:e9:ca:44:7a:23:b7:00:45:df:08:f6:ca:af:
4a:69:dd:c6:12:78:c8:2e:d4:38:9b:f3:b4:1e:19:41:aa:42:
2b:ef:16:54:36:66:e5:28:de:f3:93:40:05:0b:43:16:e5:bd:
71:d2:66:f2:c8:5b:73:b1:79:8d:19:80:d7:d3:9d:9f:91:3c:
e0:09:8c:ff:97:89:d7:46:cd:3c:0e:cd:e1:bc:27:87:e6:12:
a2:42:b3:28:21:51:6c:ee:6c:8d:23:76:97:5a:39:4d:57:2f:
81:bf:fc:36:33:80:b7:42:e1:1f:55:28:b1:0d:ef:e7:e9:0a:
11:17:be:2e:48:3e:30:59:51:43:f2:89:c8:6c:62:27:5e:24:
61:7a:be:e5:a9:70:94:e8:d9:42:ea:8c:1b:f5:38:fb:18:e0:
e2:b8:20:76:29:f9:68:1d:ae:ca:99:b3:83:8d:1e:c5:fb:f1:
fa:11:e8:1f:ed:1e:64:06:48:11:3a:34:24:57:33:ce:16:6e:
6d:04:bf:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUXIHR2LVd/Jg6pZ7dvj5KmskOyKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTVaFw0yMzEyMzEyMzU5MTVaMDMxMTAvBgNV
BAMTKEU5NThFNUIwMDlBNUJEMDI0QzAwNEVCQjhFRUI0Q0Y0Rjk1NzBGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz2249Thurrxk/uRFMfqqaoPq
w9Gg51FCb4GDJA50+slp6OMfxAYF0a7dx3w0ZXPyA7MIa8H1nzJuWZ6OmQbveMOj
L+Gcq3X53v6IYqMkmi7jDgM7+n9GDnnAg2ILJPGgK69+kk5P5pssglKJMxdZIaYX
oCLAsT9opBqZqN9GSahNCbnOrzxIP68T3IbpvxkZ3wsqQ/AbE3OEZfB28Ebeg3Of
NdK3zB7zlKIol1KwhQspWgLOuYV88YudBR7orpnDFXzOxAis/4V8yNRoccvmuufc
e+CdwXb9HRek2/sWb/ljQ9aRlwSIqTvOUzo7ARJK8Euwnmrfut9MaLqSId7hAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU6VjlsAmlvQJMAE67jutM9PlXD7YwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0NjYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQ0jMA0GCSqGSIb3DQEBCwUAA4IBAQB5kXBtQClgTQU+NUukWR1EGeLWpTjQaGOK
UACgGSE8dAdIwLRlwn5b3R1qQt6B+19rWX4CRwqTWGb/HOnKRHojtwBF3wj2yq9K
ad3GEnjILtQ4m/O0HhlBqkIr7xZUNmblKN7zk0AFC0MW5b1x0mbyyFtzsXmNGYDX
052fkTzgCYz/l4nXRs08Ds3hvCeH5hKiQrMoIVFs7myNI3aXWjlNVy+Bv/w2M4C3
QuEfVSixDe/n6QoRF74uSD4wWVFD8onIbGInXiRher7lqXCU6NlC6owb9Tj7GODi
uCB2KfloHa7KmbODjR7F+/H6Eegf7R5kBkgROjQkVzPOFm5tBL8X
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org