Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205088.roa
File: AS205088.roa (raw, json)
Hash identifier: k6RihQSF5wEtoXUf+BKOzfmDOiWBAyVV33xiOWR4OLo=
Subject key identifier: 46:77:D0:AF:68:0E:83:2C:F2:76:6E:FF:AD:C6:67:D0:44:8F:49:87
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2B02A6DD36E90013CCF57F6A248629EC9427E32B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205088.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 205088
IP address blocks: 2a06:a005:bc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:02:a6:dd:36:e9:00:13:cc:f5:7f:6a:24:86:29:ec:94:27:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=4677D0AF680E832CF2766EFFADC667D0448F4987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:8e:6f:33:03:78:5c:6d:b1:6f:78:a7:18:
c4:34:a2:6e:e7:c6:67:dd:94:c8:be:a1:2f:87:63:
d2:31:27:40:6c:82:6f:36:ef:22:48:f7:64:b0:3a:
c5:e2:66:91:a8:a8:eb:1c:b6:32:94:0c:96:fa:18:
f2:69:f0:83:3a:21:f2:08:d3:58:3a:59:c5:ab:0b:
2e:09:59:97:5d:9b:97:10:aa:90:e9:59:26:3e:6a:
9a:f5:a5:db:bb:8c:ed:e6:e2:01:85:fe:ec:62:cd:
18:95:e4:2a:00:e9:d1:d0:c1:19:05:33:0f:cf:34:
f9:ec:8d:04:73:3c:32:20:37:9c:fd:bf:f0:c7:aa:
62:87:fc:98:da:aa:47:86:f2:6d:08:08:a3:5c:b6:
d9:e8:1d:af:e4:65:bd:7a:c4:d3:d1:86:58:60:47:
d1:25:00:0a:27:a9:ea:7a:c7:29:dc:b0:9c:3e:36:
b1:7c:f2:20:d4:c9:79:24:b0:9e:cd:5c:97:6a:e4:
2b:ec:16:41:82:96:14:da:13:25:92:71:73:cc:ca:
58:3f:6f:cf:c3:94:6c:d5:fd:9a:70:58:12:65:38:
2c:0a:0d:c7:bd:68:ef:cb:bb:c6:2c:f1:cf:dc:94:
95:03:d7:68:8c:41:f2:06:32:b4:5d:22:81:33:88:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:D0:AF:68:0E:83:2C:F2:76:6E:FF:AD:C6:67:D0:44:8F:49:87
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205088.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bc0::/44
Signature Algorithm: sha256WithRSAEncryption
99:8c:23:5a:d5:cd:6b:83:2d:a8:d2:6d:e8:58:a5:d0:c7:6d:
41:eb:98:7d:7c:a3:56:9d:5b:14:99:33:aa:3e:ac:a6:ea:32:
f1:44:6c:08:43:10:e4:61:d0:ba:a0:a0:e2:83:97:9a:44:1c:
11:50:cc:7b:28:9b:47:e1:37:6b:59:a1:07:e2:ba:2e:5e:c7:
93:39:49:f5:03:40:d4:e8:1f:1b:3e:c0:42:c4:ef:5f:c0:20:
61:6f:d1:74:1a:81:63:77:5c:0e:7b:94:82:37:6b:b7:2a:e1:
af:4c:cb:a4:c2:6f:13:06:e7:bc:1e:a1:5b:ff:bc:f8:76:dc:
26:30:8c:4b:99:99:10:b5:11:4e:2e:d2:fd:a3:eb:7d:69:fd:
34:0b:6d:9c:ea:84:cc:a6:d9:6b:84:8e:67:0f:9a:19:1e:4c:
9d:fe:3d:fd:0a:d0:96:44:b9:a1:01:00:51:24:59:5a:fa:ef:
78:61:f5:6b:91:43:d3:3b:25:0f:e3:ea:ea:35:aa:9a:35:3a:
ee:ac:bc:e3:9c:f5:bd:d0:fa:23:56:f9:7b:40:18:3f:95:9c:
42:9d:4a:61:1f:35:a9:2f:e9:87:15:44:30:88:9f:2e:b8:1b:
a5:5b:83:e5:6a:0b:c1:d9:01:56:2b:fd:48:32:6b:41:dd:f1:
08:95:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:49 2025 by rpki-client