Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205398.roa
File: AS205398.roa (raw, json)
Hash identifier: SV/7s8HQaVPWa52WeyKIQPW4HN29hRcbKMMj8rAeN3s=
Subject key identifier: AB:85:CD:0E:9E:3E:57:02:96:1A:11:29:3E:48:41:43:0A:4B:D0:D2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7E0FC19281105830DC7903F1F286F250624A66E1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205398.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 205398
IP address blocks: 2a06:a005:2db::/48 maxlen: 48
2a06:a005:5ab::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:c1:92:81:10:58:30:dc:79:03:f1:f2:86:f2:50:62:4a:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=AB85CD0E9E3E5702961A11293E4841430A4BD0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:88:ad:ee:92:f1:bc:be:12:a0:66:05:cb:
e4:e3:bc:a9:31:0e:8a:d5:b1:72:b4:53:eb:a1:21:
23:93:62:df:6e:94:1f:99:a0:2b:75:4c:eb:49:79:
8a:49:6d:af:cf:ca:8f:0b:1c:68:96:68:a7:24:d7:
ab:4a:31:9f:3b:5c:0c:24:c8:cf:31:24:28:0d:d8:
42:bc:f0:d5:79:91:c3:9a:f0:dd:4b:75:e8:07:3a:
44:17:98:e7:47:4d:c0:9f:55:4a:bf:97:ee:7e:b0:
48:6d:74:a4:2b:6c:2f:ac:4d:1d:84:18:31:22:d1:
ca:7b:50:bf:81:2e:db:eb:43:16:f3:a7:a2:39:e0:
3e:c1:16:64:8d:0d:ae:51:5b:f1:9f:0f:24:30:16:
79:e0:71:1b:88:82:72:d3:f7:d3:2c:34:40:bd:00:
b7:f0:d4:2e:73:9b:e8:cf:59:c8:22:6c:d3:ee:94:
73:d3:01:f6:9f:68:55:56:22:a5:e8:40:95:ca:c5:
56:94:78:d4:9b:19:d4:38:59:1f:9a:25:f3:8a:84:
6d:fa:3c:47:cc:fb:2b:f8:9c:7e:92:ca:6c:07:da:
b7:aa:c7:28:70:e7:fe:5d:64:ad:11:e1:9d:ef:a2:
11:07:90:12:e8:a4:c0:67:cd:2a:ed:d1:cd:6d:10:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:CD:0E:9E:3E:57:02:96:1A:11:29:3E:48:41:43:0A:4B:D0:D2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2db::/48
2a06:a005:5ab::/48
Signature Algorithm: sha256WithRSAEncryption
7c:33:a9:51:68:51:5e:35:87:61:33:7c:03:1d:af:92:84:65:
13:1b:98:42:d0:f9:cb:49:a3:d7:4e:bc:4c:ae:4a:2f:bc:51:
0b:6f:4c:53:12:ad:71:85:fd:78:c3:ee:c7:dc:c6:ac:74:36:
9a:69:3b:1c:68:9a:4d:63:42:33:18:bb:cb:92:73:2d:df:81:
5c:27:ec:0d:41:94:bb:23:2e:33:4d:c4:d3:a5:56:84:4e:ee:
ed:4d:86:68:3c:c8:87:0b:76:61:db:c6:85:be:ff:c6:49:e8:
c4:53:41:79:0a:c9:64:37:16:d1:8c:30:fa:93:df:01:57:07:
4d:58:4e:8e:61:32:4e:91:50:2a:8f:cd:c3:dc:27:bc:a1:d9:
1c:fd:51:1e:48:0f:3b:98:62:dd:70:17:d2:43:a6:15:95:38:
56:e3:59:66:75:fd:6a:bf:9d:0d:e1:a3:67:09:fc:1a:66:8b:
ac:58:d6:6b:8f:57:9e:08:93:34:dd:b9:5e:bd:7c:28:85:c0:
53:0f:67:a3:21:01:2b:20:6e:45:b9:aa:58:6b:a5:10:53:e9:
83:48:99:bb:30:36:65:8d:c8:2e:0e:f2:e9:39:ac:85:31:2e:
cc:b9:ee:d0:28:ce:d2:ec:33:fc:87:8f:ef:7c:37:01:2b:49:
e5:db:a9:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUfg/BkoEQWDDceQPx8obyUGJKZuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTNaFw0yMzEyMzEyMzU5MTNaMDMxMTAvBgNV
BAMTKEFCODVDRDBFOUUzRTU3MDI5NjFBMTEyOTNFNDg0MTQzMEE0QkQwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBIit7pLxvL4SoGYFy+TjvKkx
DorVsXK0U+uhISOTYt9ulB+ZoCt1TOtJeYpJba/Pyo8LHGiWaKck16tKMZ87XAwk
yM8xJCgN2EK88NV5kcOa8N1LdegHOkQXmOdHTcCfVUq/l+5+sEhtdKQrbC+sTR2E
GDEi0cp7UL+BLtvrQxbzp6I54D7BFmSNDa5RW/GfDyQwFnngcRuIgnLT99MsNEC9
ALfw1C5zm+jPWcgibNPulHPTAfafaFVWIqXoQJXKxVaUeNSbGdQ4WR+aJfOKhG36
PEfM+yv4nH6SymwH2reqxyhw5/5dZK0R4Z3vohEHkBLopMBnzSrt0c1tEOR3AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUq4XNDp4+VwKWGhEpPkhBQwpL0NIwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA1Mzk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgag
BQLbAwcAKgagBQWrMA0GCSqGSIb3DQEBCwUAA4IBAQB8M6lRaFFeNYdhM3wDHa+S
hGUTG5hC0PnLSaPXTrxMrkovvFELb0xTEq1xhf14w+7H3MasdDaaaTscaJpNY0Iz
GLvLknMt34FcJ+wNQZS7Iy4zTcTTpVaETu7tTYZoPMiHC3Zh28aFvv/GSejEU0F5
CslkNxbRjDD6k98BVwdNWE6OYTJOkVAqj83D3Ce8odkc/VEeSA87mGLdcBfSQ6YV
lThW41lmdf1qv50N4aNnCfwaZousWNZrj1eeCJM03blevXwohcBTD2ejIQErIG5F
uapYa6UQU+mDSJm7MDZljcguDvLpOayFMS7Mue7QKM7S7DP8h4/vfDcBK0nl26lr
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:48 2025 by rpki-client