Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206016.roa
File: AS206016.roa (raw, json)
Hash identifier: K2retXLrzJRy55/z3oQTy8Q23s08L9Qdr5VY+VrWgEE=
Subject key identifier: 7E:73:80:53:65:E9:A1:DD:87:D8:BE:53:8A:E1:20:F5:B0:15:7D:0D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 32AD011BF66371907CF7EF12FD610625BACF0989
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206016.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 206016
IP address blocks: 2a06:a005:990::/44 maxlen: 48
2a06:a005:db0::/44 maxlen: 48
2a06:a005:1380::/44 maxlen: 48
2a06:a005:1390::/44 maxlen: 48
2a06:a005:27d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ad:01:1b:f6:63:71:90:7c:f7:ef:12:fd:61:06:25:ba:cf:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=7E73805365E9A1DD87D8BE538AE120F5B0157D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:3e:e1:2b:94:9e:58:bf:1d:2a:a0:b7:b7:
53:d2:5e:e9:a2:4a:6c:52:bc:ef:7a:42:0e:fd:c0:
d4:05:56:26:95:97:b3:84:5c:b4:9b:2d:1c:10:d6:
97:df:27:53:1f:6b:30:d1:79:26:5c:fc:76:de:c7:
a5:7c:8e:3d:87:ee:3f:f3:f1:4e:86:bc:01:aa:50:
90:21:99:b1:ba:46:b7:0c:e7:61:a9:c4:1e:1c:44:
83:58:25:8e:6e:d0:df:39:05:78:a5:52:50:e9:42:
4d:c5:08:b1:aa:ab:a3:87:90:b6:5e:95:ce:dc:c9:
83:64:28:23:35:74:50:45:7f:3d:16:6a:55:12:bd:
c2:b9:73:f0:a7:5d:e1:ed:a9:75:7a:59:24:b2:cf:
62:c1:78:57:19:97:1a:81:80:f6:81:5d:49:ae:00:
c5:f6:01:34:f3:57:cd:3f:81:2c:51:7d:e7:69:3b:
9a:e6:c1:bc:f3:ea:ad:0b:e6:da:8f:00:57:3c:e4:
51:b7:01:e7:e0:34:b2:a1:93:0b:5e:88:c6:df:a7:
1f:5e:58:62:15:04:12:39:c8:70:b9:37:f0:1b:70:
b8:0e:31:ab:4f:50:f3:2e:98:1e:82:f5:0a:3b:ce:
9d:12:ad:84:b1:19:ac:b0:70:a7:32:99:97:55:c8:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:80:53:65:E9:A1:DD:87:D8:BE:53:8A:E1:20:F5:B0:15:7D:0D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:990::/44
2a06:a005:db0::/44
2a06:a005:1380::/43
2a06:a005:27d0::/44
Signature Algorithm: sha256WithRSAEncryption
0d:9e:b6:6b:1f:cb:d0:8e:ab:2b:a7:f9:96:3d:6b:93:3d:23:
e6:a1:93:5e:cf:05:ba:b1:68:d2:7c:d5:3b:46:51:a9:7c:35:
40:14:d4:6e:c8:e5:50:1a:69:44:6d:60:5f:63:14:5d:36:d0:
75:14:91:57:09:0b:3f:0c:e1:ac:ef:cc:24:ee:d3:8d:02:82:
b3:d2:c1:ec:d5:6a:f7:f4:e8:3b:b8:79:43:2d:c4:9c:90:d6:
d6:0b:60:c2:15:7b:16:7f:fb:17:ab:72:d0:50:1e:e6:6a:74:
ef:90:2f:33:db:5b:ba:cf:78:27:3f:11:82:ec:5f:83:5d:60:
ac:32:fd:e1:80:91:04:44:a5:13:02:3a:58:d0:cd:e3:75:3c:
f2:95:b7:ac:f9:35:a8:5c:94:2c:b7:8c:62:a5:b9:69:b2:c7:
af:43:48:8b:4f:3a:aa:9c:e5:e3:ed:ba:8c:86:65:44:62:a6:
1e:65:b9:9c:35:84:78:a8:0d:6c:3f:66:7b:4b:5e:f4:bd:b8:
17:c9:7f:36:a5:e7:02:23:8d:4a:e1:c8:03:ef:c1:83:e8:5d:
e5:23:1a:2f:cc:44:f8:6b:2d:1c:1b:b5:eb:ab:0c:2e:5a:ea:
bc:9b:c6:7a:2a:d2:1c:94:9e:f3:01:1d:ec:f2:ac:22:0e:cc:
95:fb:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org