Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: j13cM8qbU/Du3O0BIBILfFUj4OjcYuNNtCynO2ltTh4=
Subject key identifier: 6C:CF:EE:E5:2E:D4:6A:E5:C3:01:31:E5:44:B3:1B:23:B7:05:0F:86
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2699EA1C1A563D19EDC73CE8997AE66B76A11608
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205965.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 205965
IP address blocks: 2a06:a005:2240::/44 maxlen: 48
2a06:a005:23a0::/44 maxlen: 48
2a06:a005:2410::/44 maxlen: 48
2a06:a005:2420::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:99:ea:1c:1a:56:3d:19:ed:c7:3c:e8:99:7a:e6:6b:76:a1:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=6CCFEEE52ED46AE5C30131E544B31B23B7050F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:84:1b:63:ff:d5:5d:33:6d:6c:4c:6b:af:
93:5a:fc:2c:87:55:fb:3e:e9:47:ad:a0:a6:18:e0:
eb:c1:aa:77:e2:6d:96:96:9f:2a:2d:74:c9:65:e7:
c3:21:29:3b:24:b7:c8:19:0b:e1:5e:d8:e2:4f:b0:
e9:a0:54:2f:9d:83:95:fa:df:41:d3:a3:23:4d:f6:
bb:86:7f:ce:f7:c8:14:ed:73:47:a6:59:fa:5e:50:
b0:4d:57:3d:04:ba:61:fe:41:99:77:3c:2a:0e:7d:
6f:28:29:b8:7a:e1:b0:5b:1f:d9:d4:ed:11:16:c5:
b0:4a:b9:a7:67:ca:e7:e5:57:d6:ac:51:da:9f:d7:
08:d2:77:44:49:bf:05:92:0a:cb:18:ef:65:c1:0d:
e5:6c:9b:9d:6f:fb:9b:33:3d:e3:c5:8a:99:ea:6e:
5c:97:c6:2d:25:fb:7e:09:c5:09:a7:ca:04:29:f1:
2a:61:34:89:46:63:df:c0:8b:95:12:70:cd:13:2c:
00:e8:a1:78:33:05:53:47:a3:d9:27:a4:e8:69:42:
c4:51:3e:1a:c2:f5:88:1c:71:87:b2:b2:29:1e:02:
3f:f3:fe:5f:17:c3:3f:f7:af:fd:0e:41:21:4a:7f:
81:b0:e7:d1:89:87:ab:bd:a9:02:99:2f:1d:84:c3:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:EE:E5:2E:D4:6A:E5:C3:01:31:E5:44:B3:1B:23:B7:05:0F:86
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2240::/44
2a06:a005:23a0::/44
2a06:a005:2410::-2a06:a005:242f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:42:04:73:3d:c9:67:b4:2d:41:39:55:67:e1:ee:67:4a:4b:
72:fe:1a:b4:b7:9d:77:08:a2:60:bc:e0:21:d1:8c:63:be:94:
fc:d0:46:de:cc:69:b4:06:ba:5a:2f:56:0a:e0:d7:29:59:06:
33:11:06:54:14:b4:b6:f2:2b:eb:ff:38:7b:d0:10:f8:bf:bf:
cb:82:60:b0:ca:5d:6d:e1:07:6b:75:77:ae:59:51:85:43:cb:
90:49:e4:5a:2d:03:36:51:cf:1e:5f:68:bb:5a:97:6f:4a:22:
5f:3a:e0:57:d1:c9:79:a8:d3:6f:23:c0:06:82:64:d3:30:bb:
b0:06:4f:7a:93:7a:5e:00:f8:09:9c:8d:aa:f0:e8:a7:54:b7:
db:d4:4d:7e:8c:01:6c:f0:d5:e0:a5:45:21:34:92:b5:f9:d2:
c2:b2:67:79:5e:55:29:5b:15:aa:d8:8d:eb:05:e4:5d:0f:56:
0b:15:55:ce:cc:c3:06:02:bc:73:ea:82:5e:e2:e8:7e:0f:a4:
fc:b4:79:6e:a3:3c:dc:76:fc:ee:da:5e:36:b2:9f:5d:93:d6:
9d:2f:92:d4:23:31:e5:e3:dc:05:3f:8f:fa:d6:80:5b:d9:d2:
24:1d:e3:32:35:25:7b:94:96:9e:67:57:f8:27:b4:32:9e:d8:
46:99:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org