Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205980.roa
File: AS205980.roa (raw, json)
Hash identifier: 11TBpoSW1a1szI3ILstno9bLYw770cBqBpmxExM5V68=
Subject key identifier: 80:32:E3:0D:6D:F3:A9:EF:6D:0F:20:B8:22:FB:0C:DF:74:C6:F9:2B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5B379C8ACD9B10F8E2096BDF0EAD14C9CEBA43DF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205980.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 205980
IP address blocks: 2a06:a005:5f0::/47 maxlen: 48
2a06:a005:fa0::/44 maxlen: 48
2a06:a005:1360::/44 maxlen: 48
2a06:a005:1370::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:37:9c:8a:cd:9b:10:f8:e2:09:6b:df:0e:ad:14:c9:ce:ba:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=8032E30D6DF3A9EF6D0F20B822FB0CDF74C6F92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:22:7c:ea:ba:d1:5d:2f:e9:db:b5:50:1c:
56:b8:59:9f:36:3e:ac:27:9f:2a:dc:04:e5:0c:c9:
8e:4a:24:00:22:06:50:c3:50:00:fd:93:34:91:d9:
45:a2:66:29:92:5f:fc:71:e7:ed:f6:72:bb:77:27:
a3:8d:43:78:8a:e6:35:ca:df:a3:ef:d4:89:2b:33:
78:cd:e0:90:f6:c1:e2:e6:cd:28:4d:03:95:d3:38:
a8:8b:18:bc:3d:c3:ac:fa:40:f8:05:53:0f:32:2e:
46:33:ed:33:4f:1f:ca:7a:77:a2:8e:fc:98:61:fb:
a8:92:9f:f5:b4:0a:a3:d8:d4:10:3f:c0:c7:ac:73:
86:26:a0:ec:06:57:b5:9c:18:ec:96:88:2d:ab:3b:
39:d6:3f:1f:5f:80:0b:b1:49:7c:0e:52:6d:30:9c:
a3:85:6b:74:21:56:ef:bf:26:b2:2c:9a:4f:b8:4b:
cc:bd:7c:d9:48:f7:73:5f:5a:57:d2:bb:1a:4f:ca:
4c:87:83:7d:eb:57:eb:93:d0:53:dd:e7:4f:0d:d4:
64:20:26:21:10:e3:24:80:f9:8d:13:ad:ae:cb:12:
dc:ac:63:bd:da:ac:50:b4:5b:de:30:52:04:2f:04:
b4:42:32:c6:04:c2:ad:eb:30:63:9a:90:e2:66:27:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:E3:0D:6D:F3:A9:EF:6D:0F:20:B8:22:FB:0C:DF:74:C6:F9:2B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS205980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f0::/47
2a06:a005:fa0::/44
2a06:a005:1360::/43
Signature Algorithm: sha256WithRSAEncryption
90:1a:cb:a1:e0:5e:57:a8:60:b2:40:2c:75:25:ea:63:cb:10:
83:61:46:f3:79:97:41:40:a4:e8:cc:34:e2:44:f1:fc:4c:4c:
cb:d1:0e:db:59:2d:c8:80:e1:fd:cb:c9:ef:00:60:c6:ba:ab:
ba:4d:cf:da:ea:c8:75:8a:fe:85:d5:36:b8:d0:00:ae:f7:00:
2d:6e:a5:a3:f8:aa:b3:89:1f:67:f0:ec:81:fc:bd:8e:f2:7e:
48:8b:c7:52:1d:d6:72:0c:1f:cd:34:72:ee:69:62:c7:21:eb:
e2:06:c5:e9:15:cd:52:e3:f3:e7:5c:ee:56:9e:94:f5:b6:3d:
c0:5c:3b:90:39:2a:c2:bc:e6:e5:a8:af:16:38:eb:a2:c2:f0:
60:d3:a0:e2:59:4d:3c:56:3a:d6:da:7c:0a:fd:b4:38:a3:67:
cc:e5:44:0b:3a:46:10:13:a0:e0:31:32:12:f1:12:6f:b3:b6:
6b:30:53:50:ba:f5:e9:a1:b8:53:6d:82:47:47:be:5e:83:cd:
d2:00:66:d4:f6:a4:b8:cd:05:c0:b8:87:52:17:cd:52:6e:71:
5a:11:ab:7b:b2:cb:dc:74:6d:57:97:7c:a9:74:ea:89:17:d2:
f3:e0:e3:68:cf:77:3e:34:a4:97:21:5c:39:75:07:ed:1f:26:
4b:54:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org