Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204710.roa
File: AS204710.roa (raw, json)
Hash identifier: SAA4+JUt+MhC9+yMf5PSJCO1velopGkCKnck9RqOJfI=
Subject key identifier: FF:69:A6:44:0C:94:FD:DA:49:79:CE:3F:64:ED:6E:A4:28:15:28:ED
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 29522D169A2056EFD05383611E7BC95BC2E2B9C4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204710.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 204710
IP address blocks: 2a06:a005:a0a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:52:2d:16:9a:20:56:ef:d0:53:83:61:1e:7b:c9:5b:c2:e2:b9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=FF69A6440C94FDDA4979CE3F64ED6EA4281528ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:f1:73:fd:21:11:97:45:7e:0c:f8:2f:51:
e2:5f:ab:e8:29:1e:7c:ac:dd:75:03:1c:8d:5e:53:
3a:de:00:0a:ea:b0:15:a2:e1:6f:6b:14:8f:cc:f8:
30:37:e5:87:c6:12:25:f2:71:26:64:b8:4c:d3:e0:
8a:d9:33:96:01:96:38:a2:e1:35:6f:10:6b:15:1d:
5e:7d:f8:59:70:3c:ad:03:9a:7f:19:48:3e:30:25:
ef:de:2a:01:55:3d:24:06:ba:da:0b:69:1c:04:1c:
5f:78:8f:a1:b0:5e:42:07:08:ce:4f:93:63:e4:e3:
b3:ef:d7:72:45:dc:a5:84:b4:e4:e7:b8:5e:ff:a8:
c4:31:6a:c0:d8:08:fd:d6:29:be:87:be:92:41:2f:
23:89:74:bb:c3:99:1d:8d:8f:99:e6:78:66:bc:26:
78:a7:a4:17:53:ad:8d:0a:7d:5f:6c:cf:45:9d:76:
4c:75:7e:41:ed:1c:7b:8e:ee:27:ac:df:c9:71:d9:
17:f5:e1:86:8e:20:f4:92:d7:50:83:fc:37:df:be:
ad:38:cc:48:11:70:53:85:e0:39:85:51:5e:8a:eb:
7f:7c:22:a5:3b:59:94:de:ec:70:af:f8:dd:09:13:
b1:ad:f2:7d:fc:f3:3f:67:1d:c3:a2:80:26:77:48:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:A6:44:0C:94:FD:DA:49:79:CE:3F:64:ED:6E:A4:28:15:28:ED
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0a::/48
Signature Algorithm: sha256WithRSAEncryption
42:81:c5:0d:aa:c3:ee:26:a5:9d:29:90:fa:50:01:56:01:68:
c0:8c:f8:22:f8:93:d2:94:3d:05:44:51:63:49:53:82:f0:de:
82:a1:a0:8b:cc:33:a8:11:e7:b8:ce:11:1f:76:f6:6f:e0:05:
b6:5d:9c:cd:13:60:0b:53:2a:ff:cd:28:68:5b:11:8e:66:82:
a9:72:e7:fd:83:6c:62:e6:c1:6b:d6:58:3d:da:d0:0f:9f:d9:
dc:25:c1:dc:11:43:85:95:d7:dc:13:fa:d4:3d:69:92:1b:6a:
64:dc:d1:65:80:3e:18:6c:ad:c1:a7:a7:09:50:e2:59:66:eb:
58:ea:49:d7:a4:a2:4c:62:a4:dd:54:4e:cc:94:9d:18:71:35:
d3:12:c5:41:be:7f:44:aa:c5:e7:13:3b:06:e4:3e:07:50:c3:
76:2e:a8:5c:8a:88:b5:02:0a:c1:af:9c:8d:a3:11:69:49:ed:
c1:c2:97:ba:b1:36:8c:2c:55:5e:fa:8a:bb:59:ef:83:d5:4e:
1d:30:9b:17:67:ee:8b:f2:b9:97:b4:2a:b2:83:63:8b:6a:a0:
b2:15:17:44:5c:f2:86:6f:81:3e:ec:dd:c0:3b:f9:51:d2:d3:
10:0a:24:61:04:e0:c4:5b:f2:68:9a:4e:e5:9f:68:5c:95:02:
dc:3a:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org