Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205421.roa
File: AS205421.roa (raw, json)
Hash identifier: IBAqdIKC5omGLOTLR5xX80jP7VHZzmmQiDKw9Vzxl7Q=
Subject key identifier: 88:86:33:18:BB:D4:5F:68:10:4F:65:38:26:D2:E7:AE:49:90:D2:CC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 17D98CDC0C33E34448075EB3C856AC7916B27EE3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205421.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 205421
IP address blocks: 2a06:a005:1b80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d9:8c:dc:0c:33:e3:44:48:07:5e:b3:c8:56:ac:79:16:b2:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=88863318BBD45F68104F653826D2E7AE4990D2CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:66:c5:25:96:d9:a5:82:e2:3c:a0:c8:4d:
b7:55:9c:87:91:5f:6d:4a:28:34:22:ae:ad:9f:27:
97:73:0b:f0:ec:55:b9:c3:4b:ca:9a:12:f7:ce:f3:
d0:89:81:3e:0c:c1:80:43:fe:8f:54:53:98:6f:93:
cb:c6:aa:34:e3:e8:6a:3e:da:95:67:24:89:a4:1a:
76:08:07:32:c7:fd:78:c7:1c:0d:de:fe:7a:97:0b:
8e:1f:49:1b:30:70:49:5d:dc:7d:91:f4:b9:f0:1d:
8b:0f:c8:50:5e:2d:d7:d3:5c:c1:69:03:50:f7:bf:
91:d6:c8:78:1c:2e:ed:4b:f9:ac:43:ce:9b:44:5f:
05:9c:5a:c4:bc:6a:54:e9:3b:ca:62:85:bc:42:8f:
fe:59:cb:60:f4:e4:5a:af:2e:2d:df:65:2b:be:ed:
17:e5:5d:8b:57:ce:95:65:7f:b4:09:67:c6:77:c1:
3d:94:cd:ff:25:43:4f:c0:df:10:24:9c:b1:85:7c:
06:51:4c:35:52:b3:eb:3e:92:04:60:73:de:f8:b4:
f1:7b:93:74:a9:fd:09:0e:13:08:71:75:9e:7e:59:
b4:d0:04:dd:f7:fd:9a:41:b8:d0:19:a5:72:d1:19:
92:fb:84:b5:8a:8f:f8:09:f9:2b:f6:ec:d5:74:63:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:33:18:BB:D4:5F:68:10:4F:65:38:26:D2:E7:AE:49:90:D2:CC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b80::/44
Signature Algorithm: sha256WithRSAEncryption
54:a4:93:11:6d:48:21:31:a7:1c:db:ca:ec:ef:32:58:7e:da:
b8:c8:c7:2a:9b:7f:30:f5:1b:43:15:66:63:1c:be:64:be:9a:
d4:d1:0d:40:85:e0:73:68:7c:6a:51:83:8f:d0:d1:ab:ea:2c:
be:4e:f8:60:89:f8:14:9a:68:48:67:77:0b:83:43:8c:b1:2a:
06:02:e3:4d:c8:ae:78:6e:57:fe:c2:06:b8:71:7d:33:58:61:
40:e2:20:a3:e2:b4:a3:1b:69:f4:a5:02:25:92:0d:db:c7:ae:
dc:81:b4:80:18:21:31:89:d2:2e:cc:41:5a:cd:7e:44:58:57:
1b:c2:05:e1:33:02:c1:1b:af:4b:27:59:50:41:6c:c8:bd:dc:
79:ae:93:bc:ea:e0:6d:e9:6a:52:81:ca:d7:97:a6:6b:6d:52:
c5:ad:ca:8b:9f:df:d9:da:55:17:2c:1d:d7:d5:b7:2b:35:0f:
7f:c6:3f:65:ff:57:e4:11:38:00:37:ae:fb:a9:53:29:37:d0:
ae:bc:a0:f7:7f:0c:ec:4c:e4:d3:54:78:b7:cf:59:2c:2b:a7:
c0:4b:60:0b:60:96:96:d2:e9:ec:28:ce:c1:27:33:96:f6:28:
41:e9:18:f4:93:6d:09:ad:64:f6:3f:5a:d0:e5:d7:ad:f5:30:
b3:90:30:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org