Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205092.roa
File: AS205092.roa (raw, json)
Hash identifier: soIuZCjSyuUoY2VS55Bu7D+bNUw8PeLLZqgYdyMKqCM=
Subject key identifier: 4D:46:EB:7F:26:7E:A9:B3:5E:BC:51:04:F4:25:14:DD:F0:B6:23:6D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 21FEEA413F91755BC9F5731CF990B1264E38C536
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205092.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 205092
IP address blocks: 2a06:a005:930::/44 maxlen: 48
2a06:a005:940::/44 maxlen: 48
2a06:a005:960::/44 maxlen: 48
2a06:a005:970::/44 maxlen: 48
2a06:a005:980::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fe:ea:41:3f:91:75:5b:c9:f5:73:1c:f9:90:b1:26:4e:38:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=4D46EB7F267EA9B35EBC5104F42514DDF0B6236D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:4f:3a:cc:b5:c1:3e:93:1d:fc:41:d6:92:
37:b0:07:22:fe:74:83:98:b3:2e:43:a9:8a:bf:b8:
65:80:38:8e:fd:0f:46:0b:f5:32:22:3c:cd:a6:61:
be:bc:a9:d6:82:bd:ec:0b:83:58:ec:34:4d:43:5d:
c9:dc:19:72:9f:96:4b:57:cf:ba:22:2d:0d:3c:4e:
6e:e1:4d:c8:fe:9d:3a:f9:ae:17:ef:fc:7a:72:a7:
ba:43:f9:3f:9e:e2:6b:00:ee:93:d7:9f:a9:0b:4d:
cd:05:e4:0d:6c:3b:b8:12:f9:6c:71:cd:6d:9a:7e:
0d:6b:e0:75:23:a8:21:12:6a:ff:eb:6e:df:f1:52:
03:cc:07:ca:98:f1:eb:7e:99:91:8e:0b:d8:f5:6f:
b4:50:da:02:8a:f7:2d:95:ec:8c:1d:fe:df:6e:03:
61:91:64:58:5c:ca:a0:27:88:20:82:ce:d9:ec:f1:
e5:e5:e9:cf:0a:6e:0e:bb:6f:54:82:25:f0:5a:c1:
85:b9:eb:52:38:a8:d7:8a:07:44:12:df:ff:66:fd:
3a:32:e6:5b:3f:5a:18:c7:64:b2:7f:72:79:7f:73:
2c:14:3c:29:b0:e3:98:75:c3:36:3f:87:e2:93:96:
ae:38:2a:d2:fb:51:42:e5:b8:13:fd:e8:21:55:3a:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:EB:7F:26:7E:A9:B3:5E:BC:51:04:F4:25:14:DD:F0:B6:23:6D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:8b:c7:1c:03:cd:49:7d:c3:09:5f:48:64:81:76:54:4d:f8:
8a:8f:ff:02:26:d3:8e:71:2b:42:a9:9b:22:a0:b7:84:20:91:
66:10:23:87:3f:0b:f1:f3:bc:04:96:74:61:c8:67:fc:63:2f:
39:c4:28:6f:b9:94:1a:98:55:c4:61:32:8d:a6:1c:aa:91:c3:
fc:06:82:ac:7a:2d:45:e5:ec:08:b7:dd:0c:df:ce:9b:97:3b:
fd:28:66:a5:da:ea:66:f8:ea:73:52:dc:60:a3:9e:b4:0f:f5:
76:f1:32:a8:51:c1:3b:84:12:63:82:ba:87:ff:6c:e5:d7:3a:
d6:1d:2f:19:c1:00:14:b7:6a:b6:f8:6c:33:3f:80:01:84:f7:
56:36:6f:15:dd:ff:d0:8d:f4:92:7d:75:06:20:2c:27:69:58:
8c:51:00:c7:28:ef:16:b7:3a:dd:e1:bd:fc:5f:24:ae:da:9c:
88:07:1b:e6:bf:28:06:20:77:24:45:6f:9f:7e:54:b4:21:eb:
83:8f:75:8e:a0:d6:f4:4f:83:53:ca:fa:59:44:5d:c8:51:2d:
eb:cb:ef:7f:dc:2b:a6:76:fa:5b:ae:e8:dd:4f:c7:75:e9:2e:
92:74:6b:15:21:ca:78:f2:d7:cc:d5:6c:9a:8d:52:96:ff:fb:
76:23:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:58 2025 by rpki-client