Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206125.roa
File: AS206125.roa (raw, json)
Hash identifier: 9uTwHBR+SGR4Z8qqy+uwxjJYDwCYkzsVHIJtGuLK478=
Subject key identifier: A8:68:9C:43:8F:F7:66:93:13:82:D6:82:A0:82:B7:7F:E9:34:65:FF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 636E18F650907D80EA212E640A49745AD45A70
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206125.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 206125
IP address blocks: 2a06:a005:15c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6e:18:f6:50:90:7d:80:ea:21:2e:64:0a:49:74:5a:d4:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=A8689C438FF766931382D682A082B77FE93465FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:50:25:6d:a0:e2:33:20:b8:77:87:cd:0b:
b2:2f:0f:6d:91:55:d8:6a:a4:16:d7:f1:69:fa:bb:
17:48:ba:3c:2b:30:43:56:5f:a7:05:b4:7e:15:80:
2e:f5:01:ca:85:53:44:40:af:59:56:24:14:d4:29:
b5:a1:75:1d:f9:f2:3e:89:f4:82:b4:fe:00:86:8e:
28:9b:f1:a2:8b:be:c6:cf:55:cb:aa:f2:ba:f9:80:
2e:dc:c1:02:5b:95:49:8b:e0:38:80:62:25:15:3b:
83:fc:b1:e1:12:2f:25:ea:5c:28:48:16:28:42:fd:
4a:d6:9e:06:03:0d:67:4a:8e:c6:98:7b:f1:6f:25:
c1:2a:2f:93:3e:84:4b:9e:55:cc:40:4b:c6:1a:e7:
0e:fa:df:15:39:54:d1:ce:58:91:1e:13:36:ff:7d:
03:39:ab:db:43:9c:5a:39:cf:0d:36:b4:c7:bb:2e:
fd:ee:da:63:f8:7d:6f:3b:7a:62:1e:1e:c0:04:29:
52:17:80:d4:2f:0d:66:7f:f8:1a:99:f2:8e:96:25:
9b:8a:bc:f0:f6:1f:99:da:86:5d:04:48:1b:7f:40:
6b:80:c7:c9:31:fb:a7:90:68:91:06:26:a4:80:1b:
5b:59:bb:43:34:97:9a:0d:f0:2d:bb:2d:7c:e4:7e:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:9C:43:8F:F7:66:93:13:82:D6:82:A0:82:B7:7F:E9:34:65:FF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15c0::/44
Signature Algorithm: sha256WithRSAEncryption
61:83:da:f8:01:e8:ea:08:6d:2a:01:91:47:d5:ff:ae:33:2a:
17:c8:9a:18:f0:f4:d6:ee:2c:e4:c2:a5:e9:ea:67:5f:1e:a2:
99:00:97:94:d9:8d:cd:fe:ef:3a:41:1d:56:4d:1c:58:bd:5e:
77:a9:13:c7:53:5b:3e:e7:a4:42:ea:5f:60:7c:84:fe:72:b6:
e9:6a:7c:a9:75:05:95:33:69:1e:7c:d3:e1:cb:47:12:bd:49:
2f:d7:5d:62:9f:b8:76:8b:d0:b9:56:8a:34:2c:ca:0e:1d:6f:
43:f3:fb:65:8e:fa:18:31:17:3d:ee:c7:44:c6:e5:d1:e4:92:
6e:ef:45:a1:2e:61:f3:f8:b6:c5:7e:92:91:7c:e6:15:a8:03:
36:d2:66:d5:8d:1e:aa:7b:72:14:48:8a:9c:35:d5:97:b2:eb:
87:dd:2c:1f:cb:93:a6:6d:e6:5b:23:c8:50:fa:0b:e5:5e:a6:
40:54:2e:cb:29:24:49:ef:4c:ef:29:a2:9b:a0:4b:9e:38:59:
07:5f:da:6d:86:4e:65:55:42:d1:8d:25:3e:d3:04:b6:26:e3:
fe:11:ac:3e:8a:55:21:b2:9b:49:ab:64:69:cf:5f:cc:b9:3a:
58:bf:b2:e5:42:6d:1c:c2:f3:10:bf:a8:a5:72:0e:96:ce:46:
21:dc:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org