Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204740.roa
File: AS204740.roa (raw, json)
Hash identifier: rxdPNy24PfaQsNDR+N6+2SGJaAMVTDGKfFn4FAlGHz8=
Subject key identifier: 34:83:74:A8:B2:3B:CD:CC:40:F9:28:79:57:08:28:4C:54:BA:C5:4F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6046349D43DDAB281414ADB3EE59DD47ED900173
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204740.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 204740
IP address blocks: 2a06:a005:a0d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:46:34:9d:43:dd:ab:28:14:14:ad:b3:ee:59:dd:47:ed:90:01:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=348374A8B23BCDCC40F928795708284C54BAC54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:37:0f:58:67:40:07:0b:51:6e:89:59:30:
10:cd:f2:64:7f:c9:1e:67:db:40:66:42:b9:93:09:
db:7e:fe:2e:4d:fb:3b:3d:e4:b6:4c:5e:3f:a8:07:
6d:f6:54:3f:0c:0f:54:08:55:a2:97:c1:73:d8:aa:
2b:8c:b8:4f:eb:23:3a:2b:f6:15:3b:73:75:95:05:
ae:5c:3c:ce:f4:6e:03:97:ae:fd:5d:7b:68:b0:80:
05:62:95:a1:f7:f6:b5:fa:66:a9:69:a9:6c:89:09:
27:9e:3c:d9:dc:64:4a:cf:d6:7a:6c:1a:77:9c:4b:
0c:19:04:95:30:c3:8e:8a:ab:41:8f:67:ce:b7:e6:
a1:aa:57:dd:ce:2f:da:a6:3f:e6:aa:b1:84:42:58:
11:1d:58:bc:1c:ec:a4:ac:54:04:9c:49:05:50:e4:
26:60:72:ba:2a:de:b6:93:83:98:b7:2b:2b:a2:36:
ec:14:d6:a1:69:03:23:dd:fb:c3:ba:46:27:ef:b6:
3b:e3:ff:49:e5:91:75:53:c1:20:d2:ec:a1:cb:b3:
08:72:35:8a:c5:43:a2:7e:12:05:5b:68:11:a2:2a:
bf:bf:54:79:f1:c0:c6:da:31:4a:6b:74:0e:b7:00:
c7:ae:b3:13:a0:b7:f1:86:28:a5:3d:fa:6a:5c:cd:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:74:A8:B2:3B:CD:CC:40:F9:28:79:57:08:28:4C:54:BA:C5:4F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0d::/48
Signature Algorithm: sha256WithRSAEncryption
5a:51:c1:52:2b:ee:14:5b:9b:41:9e:f5:60:a9:6c:f8:5b:f8:
83:17:f9:8d:1c:7c:5c:87:b1:6e:35:f7:f2:b0:43:0f:8e:ae:
5d:1f:a2:89:0f:9e:36:12:34:16:fb:93:77:00:81:82:84:13:
86:28:b2:b3:d6:c4:3e:35:ed:36:28:ac:e8:1d:80:90:7a:ea:
e3:a7:af:03:72:8a:13:bf:b9:7a:ea:e6:b5:98:30:60:6f:c7:
fb:75:28:d3:ac:4b:14:13:4b:e8:3f:76:52:7b:1b:c1:db:b7:
51:c9:88:2e:d6:4f:95:a5:05:07:3e:66:a9:a6:e5:3b:28:8d:
4c:bd:f3:77:74:64:99:33:0a:1d:b9:e3:0e:80:5a:02:94:4c:
37:de:59:75:da:31:63:84:bd:4a:c2:e5:d2:68:d0:81:a7:17:
db:cd:f4:3a:70:5b:38:c2:35:95:d3:54:e5:ad:3d:51:91:91:
b3:51:c9:69:cb:37:a6:56:7d:0e:fa:3a:af:30:f6:5a:cd:81:
29:ad:a2:c9:0d:4c:21:76:03:d3:14:3f:5e:f0:ed:f2:51:c8:
87:f1:42:d2:08:63:4d:1d:db:b4:de:c3:f5:13:ab:68:36:5d:
0a:b4:1b:83:a3:83:da:31:0a:c6:90:17:90:5d:61:5a:83:10:
93:86:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org