Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205848.roa
File: AS205848.roa (raw, json)
Hash identifier: jw0nVrjV2fcLl2AyVcsZLwfGVHraNyP1TkM5UB2qSfg=
Subject key identifier: 06:71:AE:BC:D0:51:6D:B6:70:F4:08:7D:0E:21:57:73:1A:BA:4D:E2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 794029EA88499E99D11A0496A3F769152E6A6AFC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205848.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 205848
IP address blocks: 2a06:a005:cf0::/44 maxlen: 48
2a06:a005:1271::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:40:29:ea:88:49:9e:99:d1:1a:04:96:a3:f7:69:15:2e:6a:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=0671AEBCD0516DB670F4087D0E2157731ABA4DE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:b3:42:dc:fb:67:f0:e8:75:fa:c4:aa:8d:
ae:f8:36:2b:b7:84:81:7f:71:3c:20:c5:ac:a4:02:
63:ff:ab:bf:80:ae:5e:32:49:c5:c4:30:00:93:be:
56:b2:29:e9:d4:8d:a4:9b:d9:7e:a8:25:8f:49:8c:
e2:37:26:ba:4a:68:ef:0e:3b:a8:78:16:44:03:f9:
63:14:60:b1:91:b9:df:83:5e:91:65:62:db:3f:50:
28:dd:6f:91:8e:40:4a:75:5e:ba:ae:5c:4f:4f:44:
5d:35:0e:e1:dc:dd:30:9e:a2:cc:f3:29:0a:f1:2a:
3d:85:dc:90:f1:cb:15:5d:42:a5:5f:34:bb:9e:16:
c7:d5:31:98:7f:53:19:e3:c5:12:79:5f:b6:e2:02:
b1:7b:9f:a3:c9:dd:63:56:dd:72:a6:93:12:f3:dc:
93:d1:37:0c:a4:cc:db:4f:6e:07:84:d4:17:18:03:
8c:e6:28:c9:15:f5:39:c8:73:2a:4d:89:07:a6:02:
a7:67:af:11:69:3e:13:bd:b6:77:44:b6:51:42:96:
b3:4a:40:2d:7b:6b:6e:e0:82:4e:94:f1:f8:f4:7d:
ac:78:9e:2f:c8:c4:6b:2d:e1:43:d9:99:99:38:88:
fa:13:67:66:a9:a7:4b:2d:04:95:26:2e:a8:79:c9:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:AE:BC:D0:51:6D:B6:70:F4:08:7D:0E:21:57:73:1A:BA:4D:E2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:cf0::/44
2a06:a005:1271::/48
Signature Algorithm: sha256WithRSAEncryption
4d:15:c1:fd:cf:cd:8a:8b:b9:d3:e9:62:d5:b6:a7:8a:e3:e2:
bb:06:38:d9:cd:78:92:1b:07:f0:58:29:18:f2:3b:4d:ec:86:
ef:26:f9:7b:42:63:e5:84:49:9e:97:4e:25:b8:a0:b9:6d:5d:
45:e1:a1:94:9a:3e:6b:52:fd:1e:86:75:9f:91:3e:34:e6:3f:
4e:d2:b2:d1:2b:26:70:53:91:c2:e0:e4:9b:c6:c1:b6:d4:be:
de:c0:e3:0b:8f:d2:3c:04:b3:ea:7e:c1:ff:44:44:c9:01:05:
d3:d2:36:8a:25:a5:53:81:c6:ad:56:fc:66:a4:8f:1d:6d:94:
50:4f:80:a8:dd:a8:27:a4:a1:d3:68:47:fa:53:b7:28:b0:87:
35:62:d0:b9:9a:56:57:42:c7:7c:40:99:d5:0c:1f:0c:60:2f:
c8:76:07:4a:a8:03:55:dd:6f:3b:07:ca:c1:c2:0b:82:04:d4:
68:64:b6:20:61:3c:07:e7:67:bf:de:9c:c8:50:c3:d8:65:a2:
b2:5f:7b:c0:f2:39:18:ee:76:04:e4:8a:bc:c0:b7:26:53:b0:
98:c2:ea:2d:f7:ae:ed:74:de:f8:a0:c1:38:03:98:30:1d:73:
78:bb:2f:76:0f:58:25:6a:39:98:e9:0e:a1:c2:b5:d7:fd:21:
01:eb:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:49 2025 by rpki-client