Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204857.roa
File: AS204857.roa (raw, json)
Hash identifier: hscWj+4vHY2Kj8ydsMs2Td+m9yxvKOOpff3RSuEHNw4=
Subject key identifier: C0:D7:B8:60:D9:7E:8D:AD:43:79:B5:F3:AD:29:F4:AF:5F:97:7E:92
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7FB85C6105B800A7E69582674E78CD6BEC1A36C7
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204857.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 204857
IP address blocks: 2a06:a005:b70::/44 maxlen: 48
2a06:a005:b80::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
2a06:a005:bd0::/44 maxlen: 48
2a06:a005:be0::/44 maxlen: 48
2a06:a005:bf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b8:5c:61:05:b8:00:a7:e6:95:82:67:4e:78:cd:6b:ec:1a:36:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=C0D7B860D97E8DAD4379B5F3AD29F4AF5F977E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:1a:36:6f:bf:d5:f0:00:92:a6:c4:2b:55:
88:e8:ab:0a:b1:5a:f0:66:d4:ab:ca:d9:de:c9:bc:
ba:8c:50:b7:9a:a0:4a:d4:85:7c:0f:d8:d3:a9:68:
78:4a:ec:9b:c4:af:8c:e0:25:bb:08:1f:3c:8c:5f:
82:c6:38:9a:86:ae:b4:e7:b8:92:9d:42:b1:8b:05:
44:cc:64:5f:5f:ab:28:48:6f:d7:bf:e3:e5:7c:80:
aa:fb:83:6a:90:e4:1c:88:dd:52:90:0e:d9:62:8c:
6d:4b:fd:f5:42:f3:5f:09:70:6c:c1:35:8f:7f:0e:
21:91:83:fb:fd:ea:ec:f5:b2:30:c8:6f:de:6c:3f:
6b:42:c1:5a:63:b0:b7:77:9d:be:73:4c:7e:ab:e7:
e8:43:3f:d0:9a:33:84:ce:bd:bb:3f:cd:21:f5:c7:
0b:ad:56:d7:27:3a:4f:e2:ea:80:61:d8:da:34:e6:
3c:3e:62:83:2c:f4:31:23:ab:7c:75:8c:9a:74:f9:
f4:b8:6e:49:04:18:8c:4b:5a:01:7d:b2:9a:6b:56:
81:60:85:76:90:cd:d4:c0:c0:4e:4b:10:5c:c5:c1:
ff:13:92:0d:36:cc:44:10:6c:58:f4:e4:89:25:f6:
9d:26:bf:da:92:d8:71:c6:c7:91:8b:fd:f5:f7:08:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:B8:60:D9:7E:8D:AD:43:79:B5:F3:AD:29:F4:AF:5F:97:7E:92
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:5e:c6:55:ba:0c:10:56:19:2a:74:e3:fa:2a:ce:13:13:6e:
95:f0:3a:ce:09:05:1e:fd:ec:2c:20:c8:93:72:12:55:a2:90:
e3:f4:00:08:30:8e:ad:c3:f5:3f:90:f2:c3:8f:3d:25:bc:5f:
0c:0c:bf:5a:d2:a5:1e:ba:29:7f:07:97:e3:f8:0b:08:2c:d0:
92:c7:cb:4b:a0:70:22:bd:21:56:05:fc:0f:fc:fe:8b:ea:97:
26:1f:aa:6e:e8:b7:81:ca:57:6b:25:2c:8d:bb:53:22:8b:19:
77:40:44:34:d6:b3:56:49:41:49:b5:ef:69:f8:0e:64:a0:01:
2b:f9:24:ea:bc:44:04:59:c0:a7:00:43:93:e2:45:a0:1e:76:
c4:37:29:e7:2e:fc:f2:bf:df:2d:54:3a:a6:3b:75:ca:8d:8d:
cc:87:fa:20:82:9e:4b:52:d3:7b:fd:34:1b:46:53:44:5e:d4:
80:ee:cc:b9:31:b3:24:f8:a5:18:f9:db:b8:4c:32:09:e8:ab:
ee:a2:cb:ed:46:ba:26:3d:72:5b:f9:ea:7b:20:d4:e5:e5:3c:
9d:b5:2c:50:7d:45:25:ba:6a:68:df:07:33:c6:e5:ba:44:35:
a7:9c:90:f2:04:74:3f:41:e0:30:9b:aa:86:2f:df:15:9e:84:
89:0e:6f:ac
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUf7hcYQW4AKfmlYJnTnjNa+waNscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjJaFw0yMzEyMzEyMzU5MjJaMDMxMTAvBgNV
BAMTKEMwRDdCODYwRDk3RThEQUQ0Mzc5QjVGM0FEMjlGNEFGNUY5NzdFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEERo2b7/V8ACSpsQrVYjoqwqx
WvBm1KvK2d7JvLqMULeaoErUhXwP2NOpaHhK7JvEr4zgJbsIHzyMX4LGOJqGrrTn
uJKdQrGLBUTMZF9fqyhIb9e/4+V8gKr7g2qQ5ByI3VKQDtlijG1L/fVC818JcGzB
NY9/DiGRg/v96uz1sjDIb95sP2tCwVpjsLd3nb5zTH6r5+hDP9CaM4TOvbs/zSH1
xwutVtcnOk/i6oBh2No05jw+YoMs9DEjq3x1jJp0+fS4bkkEGIxLWgF9spprVoFg
hXaQzdTAwE5LEFzFwf8Tkg02zEQQbFj05Ikl9p0mv9qS2HHGx5GL/fX3CDwnAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUwNe4YNl+ja1DebXzrSn0r1+XfpIwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA0ODU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnMBIDBwQq
BqAFC3ADBwUqBqAFC4AwEQMHBCoGoAUL0AMGAioGoAUIMA0GCSqGSIb3DQEBCwUA
A4IBAQCUXsZVugwQVhkqdOP6Ks4TE26V8DrOCQUe/ewsIMiTchJVopDj9AAIMI6t
w/U/kPLDjz0lvF8MDL9a0qUeuil/B5fj+AsILNCSx8tLoHAivSFWBfwP/P6L6pcm
H6pu6LeByldrJSyNu1Miixl3QEQ01rNWSUFJte9p+A5koAEr+STqvEQEWcCnAEOT
4kWgHnbENynnLvzyv98tVDqmO3XKjY3Mh/oggp5LUtN7/TQbRlNEXtSA7sy5MbMk
+KUY+du4TDIJ6KvuosvtRromPXJb+ep7INTl5TydtSxQfUUlumpo3wczxuW6RDWn
nJDyBHQ/QeAwm6qGL98VnoSJDm+s
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:11 2025 by rpki-client