Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204693.roa
File: AS204693.roa (raw, json)
Hash identifier: IuH2YP2cpjiuAqPd0+SQjshCO9VCtEsCVciCzQL7YYg=
Subject key identifier: BF:BE:5A:EF:A5:87:34:C3:79:C5:55:D7:BC:70:37:80:98:D3:1B:7D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5EAEC673B84BAAF1005CF6A240360551A7AD52C3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204693.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 204693
IP address blocks: 2a06:a005:ce0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ae:c6:73:b8:4b:aa:f1:00:5c:f6:a2:40:36:05:51:a7:ad:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=BFBE5AEFA58734C379C555D7BC70378098D31B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:7d:62:df:88:57:23:ce:fd:96:f1:e2:f4:
73:21:80:b1:22:c6:ab:f8:6e:9e:4a:3a:e6:ad:24:
0f:fd:91:63:24:71:5f:fd:5e:c3:8e:80:b7:e0:5d:
2f:ca:f8:74:16:c7:9e:85:0d:b9:ca:22:b8:0e:48:
50:47:13:ed:43:c6:26:0a:e7:4d:6c:49:31:30:37:
34:08:23:4d:e3:26:97:e6:06:e9:11:7f:83:23:cc:
7c:cb:e1:fc:f4:34:8e:ed:77:2f:7f:1c:5e:f9:aa:
23:39:f6:ad:5d:e1:16:3c:b5:0a:0d:cc:e2:12:d4:
ba:d7:94:09:69:a7:9a:e2:0b:26:15:97:5c:83:50:
68:c0:44:d7:51:3e:92:3a:6f:d8:a0:fd:3f:ef:43:
e4:c0:90:75:72:73:fb:07:70:a2:1c:e7:01:a4:6f:
bd:f8:b1:d3:58:9c:a9:8a:3a:53:b8:a8:89:a8:bf:
d3:d0:39:ea:28:43:a7:e0:30:24:e4:74:8f:9e:20:
d7:ee:70:33:02:de:25:7f:a1:29:b9:59:9a:82:fd:
b6:47:32:4a:f6:93:c9:0f:a1:e8:99:df:91:15:cf:
4e:da:8c:8e:45:ff:2e:88:7e:bd:88:69:84:c2:fe:
df:e5:b0:46:e5:c3:4f:aa:a1:c0:d1:08:f4:37:22:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:5A:EF:A5:87:34:C3:79:C5:55:D7:BC:70:37:80:98:D3:1B:7D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ce0::/44
Signature Algorithm: sha256WithRSAEncryption
39:75:06:39:de:7c:ec:2b:99:50:88:e5:57:ba:c0:1e:2a:55:
65:ce:ec:4b:01:6e:b2:45:33:d0:13:04:59:ae:b3:c9:35:76:
bf:8e:17:0a:44:7f:38:c0:41:af:4d:30:3f:54:20:e4:00:7a:
c6:52:df:45:07:15:a1:40:c4:cd:f4:2f:6f:d4:ce:e1:a4:37:
11:84:72:a0:ad:5f:98:d8:34:10:99:bd:2d:e2:26:43:b0:d6:
f2:4d:11:02:7e:6d:91:97:e6:f0:84:65:f0:55:9e:cc:1b:f2:
1c:b8:d1:db:b7:d2:f9:c9:5c:75:6c:38:41:76:65:07:46:5c:
7c:75:f6:8b:85:84:da:47:69:3c:49:93:45:7b:fc:33:e2:70:
99:3c:02:ea:7f:2e:1c:54:ad:55:0f:c8:df:20:d0:12:a4:10:
24:24:31:f7:0a:fe:76:42:f1:c9:97:55:b4:70:db:6a:e9:fd:
db:4b:62:66:25:65:f9:27:7f:16:f6:6c:1f:40:20:66:7f:2b:
67:12:ea:29:77:19:34:98:09:b0:dc:21:e0:0a:1f:f8:fb:0e:
f9:04:e6:00:29:66:7b:fc:a1:fd:63:9f:09:56:9b:ab:67:5f:
f5:20:ce:d3:24:29:84:65:01:4b:4c:60:7f:09:b2:aa:ea:40:
24:15:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org