Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205539.roa
File: AS205539.roa (raw, json)
Hash identifier: /MFNlM/Vpj3wYcI2zmPJcZBMbw5s5sNd0VyMRDqkNWI=
Subject key identifier: A1:F8:9F:9D:E6:70:47:F0:B0:9E:CA:13:FB:16:44:44:77:12:09:BC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 33B99FA3F6EB4D610259625CC753D2DB1B9CF13E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205539.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 205539
IP address blocks: 2a06:a005:4df::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b9:9f:a3:f6:eb:4d:61:02:59:62:5c:c7:53:d2:db:1b:9c:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=A1F89F9DE67047F0B09ECA13FB164444771209BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:a0:c2:e0:f1:aa:0a:62:b0:67:d8:a7:bb:
23:34:46:d1:ad:5b:27:1c:4d:c2:44:0e:3f:66:c9:
bb:8b:4c:ed:f0:cd:10:9f:01:53:97:98:3b:ef:7b:
47:fa:46:d8:be:a1:23:c3:4c:ed:3d:f5:1d:6c:3d:
e2:72:b9:93:ae:d5:78:72:cf:0f:2d:44:4e:7f:0f:
3b:3c:7b:5e:db:16:a3:e1:c2:20:ed:a8:88:1f:e0:
60:7b:1f:4b:49:7f:b5:77:77:58:c6:22:e6:f3:ab:
07:ed:a9:44:19:57:4a:51:31:2d:b9:fd:3d:6e:af:
38:b6:73:52:f2:66:e7:6b:02:8f:68:b6:9e:07:27:
ce:1c:16:fd:39:ae:57:98:94:27:b5:78:58:f5:bf:
54:98:0f:7b:58:16:85:0e:6f:17:61:bb:c3:26:7a:
c0:16:a4:c7:25:8a:e7:e9:83:8a:89:c4:14:bb:db:
0e:e6:3c:da:43:bf:71:bf:97:a1:06:88:67:40:4f:
a8:55:a2:73:cd:56:88:23:d0:65:2e:1d:a5:d2:12:
5f:57:e5:b0:7d:8d:18:2a:b3:eb:28:34:ee:bb:a4:
db:f8:09:47:d9:5f:20:35:10:54:10:30:94:56:77:
23:b6:39:ac:de:3c:0c:03:01:de:ba:9b:33:d6:ea:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:9F:9D:E6:70:47:F0:B0:9E:CA:13:FB:16:44:44:77:12:09:BC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4df::/48
Signature Algorithm: sha256WithRSAEncryption
5d:d8:9f:58:4a:88:be:a4:e8:52:30:ae:e0:3a:41:08:7e:0c:
34:9f:77:74:62:e1:59:8a:b5:51:28:03:8d:06:10:34:e5:b1:
a0:8d:8e:86:ef:a2:de:7a:c4:30:01:d1:a4:9f:e9:14:2e:48:
ee:8d:86:8e:67:fb:6a:e8:40:1c:4a:d8:41:45:7c:8b:0f:23:
cd:bf:6b:cf:ae:03:7a:60:32:02:5c:50:eb:08:6e:00:cf:ce:
32:f3:09:27:97:d5:39:32:18:9f:6e:56:91:0f:2a:35:90:15:
aa:51:b7:e8:fb:7b:a6:d9:92:10:c7:3f:39:52:15:bd:f1:d2:
92:89:e5:06:79:35:39:68:3d:71:a4:cb:31:08:08:ba:8f:d0:
2a:3f:15:0c:b6:e8:84:18:49:e9:ac:ad:36:b7:be:48:5d:00:
ca:9d:58:0d:88:7c:55:7e:ae:aa:c8:00:8c:eb:fa:f4:18:ea:
69:8a:b0:34:60:3a:e6:58:f9:3c:0a:cc:a1:40:c5:97:b9:1e:
3e:d8:d9:36:f7:00:bd:4c:35:5b:d6:e8:1f:7d:c0:d9:f5:88:
73:30:f8:1c:a2:94:ab:5e:42:c2:12:47:0f:61:c4:29:76:15:
7b:0b:98:95:8b:b8:28:8e:24:70:70:72:21:56:b7:f7:eb:71:
e1:f3:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org