Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204844.roa
File: AS204844.roa (raw, json)
Hash identifier: g1EI8gqvG6ECVNCu/MAKjvsVSyT+wnz2GKMtrlhpeqE=
Subject key identifier: 15:D0:CA:7B:44:38:10:DD:9D:59:E8:1C:52:AE:BA:35:23:17:89:45
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1F214CF102FD02D67155BB0F6B53320CA10B6C1F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204844.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 204844
IP address blocks: 2a06:a005:14f0::/44 maxlen: 48
2a06:a005:1b40::/44 maxlen: 48
2a06:a005:1be0::/44 maxlen: 48
2a06:a005:1d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:21:4c:f1:02:fd:02:d6:71:55:bb:0f:6b:53:32:0c:a1:0b:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=15D0CA7B443810DD9D59E81C52AEBA3523178945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:75:34:66:25:01:27:bf:db:ca:24:7b:48:
7f:98:53:ef:2f:91:4e:72:f5:d9:a6:62:c8:15:85:
13:7b:41:26:49:c4:1f:11:23:dd:1d:4c:b0:cb:a6:
44:9b:77:aa:1f:7f:27:5d:b0:2a:07:0e:52:e5:04:
2c:d9:04:26:78:32:7b:57:24:7a:69:55:bd:de:c0:
c9:25:cd:4c:8a:94:18:44:20:35:4a:70:c2:c2:f0:
c9:5c:94:8a:61:4d:bb:3d:c4:67:62:a0:f7:f5:b4:
70:8c:e6:b3:fe:57:e1:fb:ff:01:1d:8b:1c:a3:5f:
40:82:1c:50:36:70:d4:8c:1a:94:13:0a:75:ca:b0:
21:8a:3a:bc:6c:38:3a:da:98:18:ad:d1:50:2e:66:
8e:86:d5:ad:0d:ea:bb:d1:fc:c2:20:55:19:11:64:
c2:bb:9f:b7:58:c4:a4:b4:e5:53:94:fe:e0:ba:af:
27:68:6a:75:14:18:cc:78:f9:b4:0d:a0:94:b4:d9:
4d:ae:14:7c:26:b0:4d:0c:c5:cd:74:bb:c0:2f:5c:
fb:2b:5d:44:e6:87:a2:0c:df:c8:f7:61:d8:d5:90:
bf:f4:e9:be:23:17:0e:78:02:6b:ff:00:cb:91:e1:
55:a4:11:c6:0e:be:39:81:79:74:c9:54:f4:d5:f4:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:CA:7B:44:38:10:DD:9D:59:E8:1C:52:AE:BA:35:23:17:89:45
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:14f0::/44
2a06:a005:1b40::/44
2a06:a005:1be0::/44
2a06:a005:1d60::/44
Signature Algorithm: sha256WithRSAEncryption
50:00:46:73:15:5c:df:2b:cb:5c:50:06:cd:33:cf:e1:76:e0:
16:5e:bc:92:bc:4b:be:d7:00:32:d8:20:a0:aa:47:e3:bd:1c:
e5:5a:da:03:85:2d:97:75:79:31:ac:7e:b0:db:2f:02:ff:38:
5e:6e:39:65:57:8a:67:e2:4c:fb:51:0b:98:85:63:6b:76:32:
ba:1e:a6:46:52:b7:e3:2a:51:38:89:b5:5b:2f:6a:de:c9:9e:
7c:42:ae:34:c8:4a:52:c9:b7:a3:e9:07:dc:19:30:8f:c9:c5:
5a:30:a4:cb:ec:23:69:36:9f:99:e6:2c:8d:e4:31:5b:3c:14:
a7:c7:e1:97:be:85:11:17:ce:1f:7f:42:0a:f9:99:5b:bd:4f:
c4:7a:87:16:01:2a:49:87:3d:03:e4:67:00:ff:8e:e5:ce:cd:
ec:6d:ab:86:06:eb:d2:1f:0a:00:fc:25:3f:30:2a:d0:ff:c9:
d8:dd:bd:e8:52:b3:cd:fa:77:bb:7c:fe:85:10:5a:cd:34:0e:
5a:18:7a:cd:20:1a:c2:43:f9:20:49:66:e3:a9:e8:8a:29:c6:
7f:b5:af:a4:e7:a4:8b:68:27:62:c4:a7:ca:4a:9c:af:93:4e:
20:f0:39:79:42:f2:27:cb:58:c5:34:3e:51:05:ab:36:be:0a:
bf:d3:5f:91
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUHyFM8QL9AtZxVbsPa1MyDKELbB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MThaFw0yMzEyMzEyMzU5MThaMDMxMTAvBgNV
BAMTKDE1RDBDQTdCNDQzODEwREQ5RDU5RTgxQzUyQUVCQTM1MjMxNzg5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+nU0ZiUBJ7/byiR7SH+YU+8v
kU5y9dmmYsgVhRN7QSZJxB8RI90dTLDLpkSbd6offyddsCoHDlLlBCzZBCZ4MntX
JHppVb3ewMklzUyKlBhEIDVKcMLC8MlclIphTbs9xGdioPf1tHCM5rP+V+H7/wEd
ixyjX0CCHFA2cNSMGpQTCnXKsCGKOrxsODramBit0VAuZo6G1a0N6rvR/MIgVRkR
ZMK7n7dYxKS05VOU/uC6rydoanUUGMx4+bQNoJS02U2uFHwmsE0Mxc10u8AvXPsr
XUTmh6IM38j3YdjVkL/06b4jFw54Amv/AMuR4VWkEcYOvjmBeXTJVPTV9L+VAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUFdDKe0Q4EN2dWegcUq66NSMXiUUwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0ODQ0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgag
BRTwAwcEKgagBRtAAwcEKgagBRvgAwcEKgagBR1gMA0GCSqGSIb3DQEBCwUAA4IB
AQBQAEZzFVzfK8tcUAbNM8/hduAWXrySvEu+1wAy2CCgqkfjvRzlWtoDhS2XdXkx
rH6w2y8C/zhebjllV4pn4kz7UQuYhWNrdjK6HqZGUrfjKlE4ibVbL2reyZ58Qq40
yEpSybej6QfcGTCPycVaMKTL7CNpNp+Z5iyN5DFbPBSnx+GXvoURF84ff0IK+Zlb
vU/EeocWASpJhz0D5GcA/47lzs3sbauGBuvSHwoA/CU/MCrQ/8nY3b3oUrPN+ne7
fP6FEFrNNA5aGHrNIBrCQ/kgSWbjqeiKKcZ/ta+k56SLaCdixKfKSpyvk04g8Dl5
QvIny1jFND5RBas2vgq/01+R
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org