Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205214.roa
File: AS205214.roa (raw, json)
Hash identifier: I/RNCYWX6rUKu3VFOARfO/gN6G5Zx/l2y7i728XKKpw=
Subject key identifier: 2A:80:8F:4E:F0:4E:36:BA:87:57:AF:F0:DF:BB:97:4D:2B:94:10:4C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 72F56AD6437100027D251A6B6B894FFA84B180A6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205214.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 205214
IP address blocks: 2a06:a005:830::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f5:6a:d6:43:71:00:02:7d:25:1a:6b:6b:89:4f:fa:84:b1:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=2A808F4EF04E36BA8757AFF0DFBB974D2B94104C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:0a:23:da:48:40:65:0a:6b:e6:ce:d9:4a:
1b:05:5d:ce:24:de:33:3c:e9:20:85:15:51:75:ab:
17:10:6f:ac:0c:ea:6e:3a:5f:fe:95:c5:e6:b3:9d:
29:b1:e9:46:ec:97:b5:0e:98:ca:ff:36:1d:b4:53:
49:21:20:86:02:55:a2:b4:69:fa:7e:a7:00:48:b0:
bd:48:a8:ec:60:51:7e:f2:1c:d5:0b:91:4f:59:aa:
79:db:b3:b4:4f:8a:0f:7d:08:c2:f1:99:8a:84:47:
18:61:a5:4e:6d:83:f8:fa:f7:54:e0:c1:f1:ad:d3:
dd:df:f4:ab:ff:a5:c3:67:8c:01:ff:10:6f:24:c8:
bb:c9:98:65:e3:b1:b1:b6:36:ad:1d:cd:21:e1:16:
c0:47:15:69:b6:fe:8d:20:ad:4b:82:87:22:e2:64:
c2:97:d0:75:ae:65:82:8c:31:cc:8a:fa:f4:de:08:
be:06:35:1b:db:f5:a4:07:69:89:fb:e9:db:1c:0c:
34:30:22:0f:46:98:c7:34:2f:f7:25:57:45:14:c7:
c0:bf:7d:1d:07:12:50:06:4a:39:73:17:52:33:fc:
d7:3c:e5:69:dc:7f:c6:8b:73:8e:04:65:c0:94:a3:
1e:e9:69:ac:ae:89:72:12:dd:30:2c:da:04:f9:90:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:8F:4E:F0:4E:36:BA:87:57:AF:F0:DF:BB:97:4D:2B:94:10:4C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:830::/44
Signature Algorithm: sha256WithRSAEncryption
7e:78:72:4e:db:e7:37:74:f1:43:dc:c5:69:58:31:da:af:8f:
ae:a9:43:8e:4b:ec:75:da:b7:31:4d:ff:7d:a2:2b:fc:5f:eb:
9c:4c:71:f1:0f:3b:7f:a0:22:d2:24:e3:83:66:f9:bc:60:d8:
69:44:17:06:f8:42:03:25:f8:b6:88:b5:8b:5a:b8:37:e9:c7:
b6:7a:65:c4:24:8b:b8:b0:d0:46:ae:17:16:26:ab:45:12:e5:
c8:49:39:84:8b:7c:95:9d:3e:1b:9e:d3:7d:13:00:bd:87:e0:
50:a2:77:64:c6:d4:70:56:d3:81:e3:79:a3:12:e7:d6:30:09:
65:ae:c0:7c:92:60:88:96:bc:6f:17:c2:17:c1:c0:dd:51:e8:
70:a5:9a:3e:ff:aa:79:13:94:54:a5:df:e7:42:da:ea:40:2b:
b9:01:ab:b2:68:8f:f3:ea:bc:21:53:b0:17:fa:1a:16:78:fe:
6e:57:a9:2f:eb:e1:7f:6d:62:4f:0d:fa:66:b2:f9:61:63:90:
47:7f:e8:34:ee:10:a1:f7:91:41:ad:6a:4b:70:38:59:38:cd:
3b:fe:58:cd:6f:59:c0:38:37:f8:d1:7f:b0:44:8b:67:6e:06:
c8:30:b1:db:99:7a:61:37:5a:ea:35:98:67:89:ff:db:d0:39:
be:69:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org