Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205152.roa
File: AS205152.roa (raw, json)
Hash identifier: E63/c7VQiT/ThXyeKQqb332Pu+0jeEqN0NZ4H9GdYNY=
Subject key identifier: D0:65:86:77:6D:6B:C3:11:81:86:9A:51:F8:6F:65:DF:0C:43:2F:51
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0F9B7CAB4926617D8E433DDBFF196E53FDF3455A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205152.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 205152
IP address blocks: 2a06:a005:1a80::/44 maxlen: 48
2a06:a005:1a90::/44 maxlen: 48
2a06:a005:1aa0::/44 maxlen: 48
2a06:a005:1ab0::/44 maxlen: 48
2a06:a005:1ac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9b:7c:ab:49:26:61:7d:8e:43:3d:db:ff:19:6e:53:fd:f3:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=D06586776D6BC31181869A51F86F65DF0C432F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:74:35:a3:cf:53:16:7f:57:f0:87:52:a4:
dc:8e:f4:e6:84:d7:0a:42:2d:a0:d6:ce:75:a9:b3:
4d:c1:80:24:c7:30:be:8f:4e:e2:d0:84:bb:0a:ce:
00:06:7d:fb:29:b3:61:d2:3f:66:4a:dd:a4:76:38:
01:83:a9:f1:b0:e3:91:25:f0:02:a0:18:69:bd:49:
75:51:89:ce:58:31:f9:62:31:22:be:97:56:8c:f9:
02:66:77:67:bf:ee:f2:ca:87:d9:53:b5:89:ed:68:
0d:08:c1:3f:66:5c:66:bb:a0:88:28:c3:a5:d8:c3:
2b:3a:29:26:25:ea:34:14:3b:06:3e:89:15:1b:b9:
9a:1f:f3:d4:c7:ba:7b:0f:eb:7e:17:15:65:14:f2:
16:b0:0e:53:ed:31:9c:c0:97:ee:a8:b6:f3:b8:88:
27:7e:65:a5:48:43:70:af:40:aa:cd:d2:81:f3:a7:
b6:a4:f3:e2:a3:bf:f4:da:fc:98:77:b4:dc:51:4a:
96:07:12:f9:51:b7:ee:8d:f2:5a:ea:ab:7a:be:ac:
e7:60:26:28:47:96:c8:26:46:b7:fc:ee:b9:c1:97:
06:3b:34:1b:cb:37:a1:9a:da:51:f6:0e:01:57:b8:
6f:9c:f6:a0:4f:f8:69:1a:fc:e9:cd:55:17:92:c5:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:86:77:6D:6B:C3:11:81:86:9A:51:F8:6F:65:DF:0C:43:2F:51
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:a9:7a:1d:dd:76:b9:ee:3b:b1:30:3d:fa:87:39:e0:4e:db:
0b:2c:2b:d9:cd:43:52:1a:01:e8:c7:1e:89:1f:4b:2d:70:3e:
81:f0:bb:80:43:50:08:35:ce:f7:d8:d8:48:90:95:f3:8e:9f:
51:e3:c9:b0:ab:e3:4e:bb:10:f5:6a:d5:cc:33:a8:4e:ec:7b:
82:8f:12:b7:d1:bd:fa:56:1d:7c:d4:30:f9:d7:38:1b:86:db:
c2:72:2b:41:7d:db:fd:fc:6b:2c:1e:0a:65:93:2b:04:b1:cf:
bb:36:d3:3f:a9:ca:e3:2c:64:f1:9c:b9:5c:c7:fe:e0:03:50:
3c:d9:4b:72:37:2e:52:66:74:fa:a0:89:2d:fe:31:1e:47:21:
c7:f4:66:98:c9:8a:fe:c9:b3:a1:ab:a7:ee:91:96:da:21:3b:
a0:1d:4b:49:e2:5c:dc:52:d2:74:a1:e3:a9:19:58:ee:28:95:
e5:23:3b:35:32:5e:8b:bc:11:da:82:bd:5d:7f:0d:67:bb:e6:
ec:20:ec:08:51:52:98:f9:a5:8b:ed:72:b4:29:7f:45:00:27:
de:6c:3f:20:68:c4:63:e3:9c:85:93:09:37:f8:fe:04:ff:34:
a0:68:7c:3b:f5:94:ed:e7:7f:39:fb:a7:ef:d1:5c:9e:f0:88:
2a:bc:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org