Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205245.roa
File: AS205245.roa (raw, json)
Hash identifier: XaT8f2ul6bDJLc7r4AjQ6DbHf4SKMgZagoIieKK1xA0=
Subject key identifier: FA:04:45:0C:E9:2E:27:A2:F0:85:84:4E:B6:EC:B4:5F:E0:AB:D5:B1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 19A14219E3D0458DFD542472925FE63244974936
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205245.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 205245
IP address blocks: 2a06:a005:7a0::/44 maxlen: 48
2a06:a005:7b0::/44 maxlen: 48
2a06:a005:820::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a1:42:19:e3:d0:45:8d:fd:54:24:72:92:5f:e6:32:44:97:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=FA04450CE92E27A2F085844EB6ECB45FE0ABD5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:d5:59:09:a5:f2:d0:6e:74:cf:e5:b6:7b:
67:8f:13:d5:ed:93:50:81:6f:3b:58:a7:6f:01:ee:
f5:2d:38:e0:28:9b:4a:7d:77:6e:23:0e:04:d3:eb:
ca:7f:8a:e2:29:95:b2:08:f9:8a:a5:b6:19:7d:6d:
4b:cd:55:43:9b:02:55:63:9f:b2:1e:9f:89:15:5e:
f5:58:ee:07:56:19:42:4d:0d:db:fb:fb:56:a0:94:
59:e3:6b:bf:cf:21:2f:fb:1e:78:93:84:1f:1f:b1:
8a:38:81:60:8a:7c:39:04:eb:89:bf:80:7d:13:a3:
48:c2:a3:b5:eb:da:05:08:02:d5:77:b3:11:39:af:
5b:30:3d:a3:51:f6:47:9a:9e:f6:80:c2:93:85:83:
5d:04:6e:5f:45:93:d6:98:b6:14:59:60:ae:86:86:
3d:a8:fa:81:d6:4e:99:f5:f6:79:62:a4:f3:d4:75:
21:98:75:d0:59:e8:37:e1:65:7d:44:72:55:0f:16:
ff:3d:1e:f6:50:93:a9:ee:a4:b0:f4:dc:b1:96:22:
e7:73:84:53:8e:f0:fb:78:b1:ac:8d:9f:e7:a8:df:
98:18:40:dc:01:4b:86:49:04:de:c3:e0:6d:80:7b:
75:61:19:6d:03:6d:f4:ab:7f:26:aa:f7:17:26:5c:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:04:45:0C:E9:2E:27:A2:F0:85:84:4E:B6:EC:B4:5F:E0:AB:D5:B1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7a0::/43
2a06:a005:820::/44
Signature Algorithm: sha256WithRSAEncryption
71:1d:f3:fd:be:9b:b6:b3:d9:2e:31:7f:df:11:d7:b1:98:62:
55:52:41:fb:dc:b0:ee:d0:76:25:43:42:1e:1a:d8:2e:dd:33:
23:10:4b:da:da:2f:33:35:d1:34:bb:7b:eb:a3:d9:d0:49:e7:
52:ed:99:e4:2d:fc:bc:77:a1:a0:9c:bc:df:ec:63:b4:85:2c:
4e:d5:bc:2c:51:90:26:06:7e:6f:29:5c:c1:89:0d:a9:5b:6b:
f3:cd:3b:8e:d0:82:cf:f6:0a:ce:bd:da:b5:26:80:bb:d4:98:
8a:1e:8d:44:f6:87:af:0d:63:4e:aa:2f:56:cc:0c:32:ce:10:
22:74:b5:d9:86:1f:ca:5a:cf:4a:2d:bd:c2:2d:af:05:2f:d8:
21:5c:3e:fe:2d:e5:04:33:81:5f:09:44:0e:64:27:96:fe:4e:
11:8c:d2:e8:0e:c0:40:d6:6c:36:70:11:e9:f7:c9:cb:25:11:
2a:37:0e:ee:d4:cb:9e:33:40:b2:e4:8b:85:24:a8:f8:41:80:
3a:6b:9a:37:51:cc:99:8f:c3:8b:12:19:c8:cc:60:bb:92:ea:
a3:4c:d8:a0:c6:01:7d:5d:45:13:20:a6:2b:dd:a8:ac:97:8d:
17:4f:79:bc:f7:91:a9:32:56:00:31:f1:60:16:d2:67:3d:f8:
b0:ea:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:54 2025 by rpki-client