Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205531.roa
File: AS205531.roa (raw, json)
Hash identifier: s2plpA1pD2ZaRzJZRF6f6MUIzP7jzXmDMPTfjAxVeCM=
Subject key identifier: C7:61:2D:63:A8:E7:FF:66:35:5A:1A:4C:AA:C2:E6:C6:81:09:CB:70
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 14F0108ECF6289D56E2761FE58B144E542AD1C4E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205531.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 205531
IP address blocks: 2a06:a005:a0b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f0:10:8e:cf:62:89:d5:6e:27:61:fe:58:b1:44:e5:42:ad:1c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=C7612D63A8E7FF66355A1A4CAAC2E6C68109CB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:04:0a:37:56:88:f7:a1:15:ab:f4:17:3d:
c4:c4:69:aa:c3:a2:c1:6f:27:b5:15:b7:22:49:69:
b5:2f:aa:ef:30:89:ef:35:4c:d8:ac:0c:80:6c:ec:
58:23:16:8a:70:a0:8c:fb:d9:a6:da:21:a4:36:d3:
1b:b4:dd:62:12:b8:25:0d:da:0a:6d:d2:d2:b5:7a:
e1:2c:1c:d9:f9:12:0c:bb:01:21:a9:ae:8b:92:b7:
62:99:c8:3a:65:c4:ca:5b:f8:68:ae:9c:3d:22:fc:
94:23:67:57:7b:68:f2:f0:72:9c:7a:10:2c:86:e5:
2a:af:dd:ae:3b:ba:03:92:70:b0:45:29:1f:9a:d8:
3f:93:ce:bd:23:f3:bc:22:a0:21:ba:36:6e:5b:a2:
df:18:d5:61:cf:87:d7:d3:aa:d9:54:38:b5:cf:78:
5a:6d:59:af:d8:6e:01:53:b9:2c:c4:73:25:10:ed:
8e:1b:5a:89:22:1a:14:03:1e:12:76:c8:b4:e8:8d:
76:7f:94:0c:03:45:8e:97:e3:05:ef:c5:ab:67:c9:
e6:ca:f0:1f:39:16:5b:e4:74:63:d6:f0:d8:dc:48:
cc:8b:90:55:10:c2:ca:37:ed:a8:a8:5b:f9:10:5d:
c5:82:e6:5b:45:ba:16:f4:4a:fe:eb:fb:d5:d0:d0:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:61:2D:63:A8:E7:FF:66:35:5A:1A:4C:AA:C2:E6:C6:81:09:CB:70
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:1e:3a:87:ef:18:cc:d9:9c:ed:1b:16:75:7b:f9:f3:18:d3:
bc:c9:c1:3a:30:4e:8d:69:41:7d:2c:62:83:41:d3:e5:2b:c5:
84:2c:05:dc:42:ee:0f:cf:4b:aa:78:88:1d:3e:7e:52:ad:e1:
49:7c:e1:b1:40:5e:c3:9c:f1:a3:02:92:f8:7b:ee:5f:38:73:
5d:5c:ab:cf:db:b5:14:17:ec:bc:bc:c1:10:e6:c5:8b:aa:14:
28:8d:16:ad:44:d7:e7:9b:eb:3c:7e:93:1c:80:d9:d3:e6:28:
07:85:82:cd:cc:35:49:a4:a5:4f:09:17:a2:da:80:3e:8c:7c:
6c:f5:33:c6:d3:b0:fc:47:46:9c:12:61:65:34:c7:00:6f:be:
db:a0:62:34:c1:08:34:d3:f3:8a:1f:d5:7b:e9:60:e5:ac:fa:
cb:c5:f4:6b:3d:0f:91:ce:d2:5e:8c:c9:4e:a8:cf:83:dc:5f:
86:2d:ed:d4:48:c5:57:56:aa:4e:11:03:01:98:77:24:6f:4e:
98:8f:19:9f:23:ff:ec:bb:cf:16:1f:29:93:27:94:e3:45:af:
5a:f5:10:cf:09:e0:ce:97:0a:e4:55:4a:d5:45:6f:50:a0:a4:
f3:eb:9f:46:6f:6a:4a:6f:38:64:72:ae:88:98:42:1b:b5:10:
cc:a1:e8:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUFPAQjs9iidVuJ2H+WLFE5UKtHE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjJaFw0yMzEyMzEyMzU5MjJaMDMxMTAvBgNV
BAMTKEM3NjEyRDYzQThFN0ZGNjYzNTVBMUE0Q0FBQzJFNkM2ODEwOUNCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw9wQKN1aI96EVq/QXPcTEaarD
osFvJ7UVtyJJabUvqu8wie81TNisDIBs7FgjFopwoIz72abaIaQ20xu03WISuCUN
2gpt0tK1euEsHNn5Egy7ASGprouSt2KZyDplxMpb+GiunD0i/JQjZ1d7aPLwcpx6
ECyG5Sqv3a47ugOScLBFKR+a2D+Tzr0j87wioCG6Nm5bot8Y1WHPh9fTqtlUOLXP
eFptWa/YbgFTuSzEcyUQ7Y4bWokiGhQDHhJ2yLTojXZ/lAwDRY6X4wXvxatnyebK
8B85FlvkdGPW8NjcSMyLkFUQwso37aioW/kQXcWC5ltFuhb0Sv7r+9XQ0NSRAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUx2EtY6jn/2Y1WhpMqsLmxoEJy3AwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA1NTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQoLMA0GCSqGSIb3DQEBCwUAA4IBAQAqHjqH7xjM2ZztGxZ1e/nzGNO8ycE6ME6N
aUF9LGKDQdPlK8WELAXcQu4Pz0uqeIgdPn5SreFJfOGxQF7DnPGjApL4e+5fOHNd
XKvP27UUF+y8vMEQ5sWLqhQojRatRNfnm+s8fpMcgNnT5igHhYLNzDVJpKVPCRei
2oA+jHxs9TPG07D8R0acEmFlNMcAb77boGI0wQg00/OKH9V76WDlrPrLxfRrPQ+R
ztJejMlOqM+D3F+GLe3USMVXVqpOEQMBmHckb06YjxmfI//su88WHymTJ5TjRa9a
9RDPCeDOlwrkVUrVRW9QoKTz659Gb2pKbzhkcq6ImEIbtRDMoei6
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:47 2025 by rpki-client