Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204992.roa
File: AS204992.roa (raw, json)
Hash identifier: uaNnE++ILB6Rbv3Uib5pN5row7DMQlP52SVsJw2XfXY=
Subject key identifier: 6F:A6:C9:6C:A1:DB:AD:D1:32:DA:6C:4E:C1:B3:26:C8:97:7A:14:D7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4D7B470717F8EB802DFCEBDFDD51981CC9AAAF80
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204992.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 204992
IP address blocks: 2a06:a005:5f3::/48 maxlen: 48
2a06:a005:a11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7b:47:07:17:f8:eb:80:2d:fc:eb:df:dd:51:98:1c:c9:aa:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=6FA6C96CA1DBADD132DA6C4EC1B326C8977A14D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:5a:1a:6b:1e:b1:0d:02:2b:43:d4:fa:48:
0d:00:6b:24:ed:21:6a:ee:bb:e4:19:c0:41:d7:18:
7d:75:c2:7f:bf:fd:0d:7d:98:03:b0:eb:15:5c:a6:
08:11:38:18:d6:83:59:e8:c4:1a:e3:ff:1b:ff:41:
da:f3:11:3b:3c:77:bb:86:f1:d0:8f:a0:58:39:03:
cf:3b:02:66:46:ca:c9:7a:7c:21:c3:52:1c:08:72:
61:36:84:b0:5e:5a:1d:f9:79:5f:e5:fc:58:72:fd:
ca:12:6a:a8:cf:1b:0d:20:c9:ee:7f:f7:ad:e4:e8:
2c:ab:8c:e8:69:be:34:6f:93:b4:1b:49:93:52:9c:
15:6b:d5:e8:7b:da:71:5e:32:6c:c1:84:d9:69:6b:
ca:14:7d:a1:44:53:54:dc:ee:a6:37:8e:1b:95:1b:
c1:3c:a5:23:84:a8:fa:bf:1a:45:1d:89:e7:1f:1a:
1e:f1:9f:4c:12:6a:da:e4:95:e6:25:76:75:84:d5:
f1:e6:e4:dd:76:b2:e2:3c:4a:d5:a8:d3:da:1d:55:
20:13:1c:4f:ee:1c:f5:1a:fd:6c:d2:04:e7:ec:9a:
cc:e5:80:8d:cf:97:6d:b7:11:d2:8c:3a:5a:01:53:
f7:5a:1a:2f:87:4b:bd:e1:a1:c8:a7:b8:ae:e0:dd:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:C9:6C:A1:DB:AD:D1:32:DA:6C:4E:C1:B3:26:C8:97:7A:14:D7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS204992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f3::/48
2a06:a005:a11::/48
Signature Algorithm: sha256WithRSAEncryption
59:79:c1:3b:77:84:2b:a7:c9:a0:89:e2:62:c3:f0:50:f2:51:
0e:15:7c:ac:69:d9:33:18:16:77:62:52:ec:df:88:32:7e:86:
88:ac:11:71:0b:05:ef:fe:6d:c3:47:a8:bd:95:fa:69:04:28:
0d:fe:c8:60:13:79:4b:af:7b:58:46:47:98:32:2f:df:7a:6e:
f5:40:10:fd:a9:f7:de:bf:28:14:de:d4:c2:86:13:f5:2f:91:
7f:c4:34:c2:47:04:92:ac:60:6f:fe:c7:50:94:f9:4d:f4:c6:
c0:fb:4b:d6:e6:3f:ba:18:55:8d:31:3b:35:f4:08:6b:25:e0:
d6:6d:0d:34:92:39:ea:08:05:41:dc:f3:28:96:d1:de:59:1d:
4f:7e:ef:30:ca:7a:7b:4a:75:da:9a:e5:9d:47:a9:24:8e:e2:
34:2c:b6:ae:64:11:4c:d3:06:25:a3:26:a5:c0:1c:19:73:93:
75:c7:93:44:cb:79:07:de:f7:44:73:68:b2:99:6f:d1:06:f4:
c2:5d:57:f6:c7:2c:c8:9d:9c:5e:94:ca:36:6a:d6:a7:14:19:
6c:f8:83:90:ad:b2:6f:fc:8d:8d:af:1d:80:b1:c3:2e:ab:8a:
c8:9e:fd:40:db:b2:9d:80:af:32:39:c0:94:ab:e8:b6:5c:a2:
83:3e:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org