Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206023.roa
File: AS206023.roa (raw, json)
Hash identifier: 6Gq4esTOgfhbf9dx+5Z7O7p3h/GOJ/WiW9RLuuEMtyc=
Subject key identifier: A8:98:88:72:E8:2C:F6:69:C1:15:62:24:84:9C:6D:51:81:D5:78:EA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 58B6C9E92293AD9C30C79BCAB5CEDFF6178F9147
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206023.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 206023
IP address blocks: 2a06:a005:5e6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b6:c9:e9:22:93:ad:9c:30:c7:9b:ca:b5:ce:df:f6:17:8f:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=A8988872E82CF669C1156224849C6D5181D578EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:f8:f4:4a:ec:03:3f:7f:e2:9e:1b:cc:2c:
06:91:d0:ab:8b:5b:03:05:12:98:8b:41:19:22:56:
e9:8d:26:a3:35:1a:0b:7b:06:7f:0f:10:6f:46:1a:
89:f8:39:d0:cc:3f:e0:5a:6c:c6:d9:19:81:e2:6c:
6a:34:d0:40:d1:fc:51:ce:81:1d:b0:7c:e5:9c:41:
1b:44:db:6c:e9:3b:7e:ba:3b:b3:0d:e4:a9:e6:ca:
03:cd:d4:00:e8:ba:9b:d8:0d:51:f3:e1:02:29:e1:
5f:1e:f6:5b:8f:1a:5c:07:f6:87:5a:67:6b:93:a7:
39:e8:d7:19:52:04:2b:05:93:55:8b:ee:a9:6c:9c:
b6:87:df:d5:c2:b4:3a:70:8f:72:0b:b8:dd:ff:19:
ce:02:99:ea:3d:c0:11:8c:fb:fa:7e:1e:4d:7e:66:
6a:3a:d3:bf:ea:bb:43:69:40:c4:d6:0c:43:e3:d7:
1c:05:15:45:f5:19:49:12:2b:07:db:5c:94:94:29:
18:a5:0c:0f:c9:9c:dc:51:3b:47:4e:84:bd:54:65:
4b:a7:ad:9f:5f:9a:99:9b:b0:46:42:99:dd:a1:c3:
58:9b:88:25:97:fe:ba:16:b7:f4:1d:9a:c4:62:ab:
a5:03:74:17:ec:32:26:5e:c8:83:ea:13:88:5b:a5:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:88:72:E8:2C:F6:69:C1:15:62:24:84:9C:6D:51:81:D5:78:EA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e6::/48
Signature Algorithm: sha256WithRSAEncryption
10:d7:ca:45:02:c4:f0:d9:36:cc:64:13:a4:b2:f0:f4:52:99:
9a:c2:1f:5e:6e:0c:41:51:e4:b7:66:f4:a1:3d:2d:47:cb:61:
7a:80:64:f1:80:1f:1c:53:38:91:50:dc:c2:91:73:6f:30:d3:
30:ca:d5:9c:a3:b7:ad:1d:9f:e3:a4:7d:d0:f7:00:77:ba:30:
54:28:22:f5:be:9d:00:75:d4:df:16:45:2e:eb:6c:fa:c0:fd:
0d:5e:45:f0:1c:b3:d9:95:f0:7a:5c:d7:c4:94:81:65:ca:89:
80:5f:27:e2:ca:3a:39:b8:1f:4d:ba:4f:6f:a1:f0:13:73:89:
ea:37:ee:5e:1f:1f:81:ff:16:95:ca:24:c4:31:8f:1f:d3:43:
41:fe:27:39:a9:65:9a:57:52:4d:5d:3c:ee:62:10:8c:2c:47:
05:14:9a:ac:08:04:45:87:b3:44:5e:ce:cc:26:f0:87:b0:c9:
61:a3:bc:84:91:65:8f:02:15:b2:3c:60:ea:62:85:7d:bd:cf:
ef:7e:9a:4f:3a:8f:cb:ac:f9:bb:59:d6:4b:21:65:c0:48:8c:
9a:72:03:0f:b8:82:78:69:88:42:b1:85:1a:9e:e2:64:28:99:
ed:27:41:54:1f:8f:56:68:0c:ac:6c:73:32:7d:b9:ea:4c:fa:
aa:5c:c0:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWLbJ6SKTrZwwx5vKtc7f9hePkUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTJaFw0yMzEyMzEyMzU5MTJaMDMxMTAvBgNV
BAMTKEE4OTg4ODcyRTgyQ0Y2NjlDMTE1NjIyNDg0OUM2RDUxODFENTc4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlfj0SuwDP3/inhvMLAaR0KuL
WwMFEpiLQRkiVumNJqM1Ggt7Bn8PEG9GGon4OdDMP+BabMbZGYHibGo00EDR/FHO
gR2wfOWcQRtE22zpO366O7MN5KnmygPN1ADoupvYDVHz4QIp4V8e9luPGlwH9oda
Z2uTpzno1xlSBCsFk1WL7qlsnLaH39XCtDpwj3ILuN3/Gc4Cmeo9wBGM+/p+Hk1+
Zmo607/qu0NpQMTWDEPj1xwFFUX1GUkSKwfbXJSUKRilDA/JnNxRO0dOhL1UZUun
rZ9fmpmbsEZCmd2hw1ibiCWX/roWt/QdmsRiq6UDdBfsMiZeyIPqE4hbpUkhAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUqJiIcugs9mnBFWIkhJxtUYHVeOowHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA2MDIzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQXmMA0GCSqGSIb3DQEBCwUAA4IBAQAQ18pFAsTw2TbMZBOksvD0Upmawh9ebgxB
UeS3ZvShPS1Hy2F6gGTxgB8cUziRUNzCkXNvMNMwytWco7etHZ/jpH3Q9wB3ujBU
KCL1vp0AddTfFkUu62z6wP0NXkXwHLPZlfB6XNfElIFlyomAXyfiyjo5uB9Nuk9v
ofATc4nqN+5eHx+B/xaVyiTEMY8f00NB/ic5qWWaV1JNXTzuYhCMLEcFFJqsCARF
h7NEXs7MJvCHsMlho7yEkWWPAhWyPGDqYoV9vc/vfppPOo/LrPm7WdZLIWXASIya
cgMPuIJ4aYhCsYUanuJkKJntJ0FUH49WaAysbHMyfbnqTPqqXMBn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org