Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206131.roa
File: AS206131.roa (raw, json)
Hash identifier: uloefvxseG8rcnF9GOdjn8jxV5a9ys3V4siD14T0aRg=
Subject key identifier: 96:38:6A:08:6E:4F:A5:98:F6:8D:32:53:BE:ED:B1:41:4A:89:51:D3
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 55DC6939C8C4D845EC710FC7866531405819A35D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206131.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 206131
IP address blocks: 2a06:a005:1082::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:dc:69:39:c8:c4:d8:45:ec:71:0f:c7:86:65:31:40:58:19:a3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=96386A086E4FA598F68D3253BEEDB1414A8951D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:b2:b2:ba:71:71:9c:47:81:ac:e7:12:f0:
5e:63:16:3b:29:b8:af:55:61:38:da:6e:dd:22:60:
30:55:96:e6:03:2b:c5:04:03:2d:d1:48:e1:d1:15:
ce:22:6d:9d:bb:73:94:b1:85:8c:c0:28:18:55:76:
62:41:0e:07:ed:67:8d:38:1d:b9:49:8f:63:38:33:
89:32:1a:c6:3d:36:9c:e1:b2:dc:86:84:90:b1:8d:
41:06:e8:c5:ed:43:bf:fa:51:d9:a8:b4:01:a5:4c:
ec:17:d8:c9:9a:d8:09:7f:3e:05:aa:97:71:e3:f8:
5c:d1:d6:1f:a9:66:7e:86:6c:0a:00:84:ce:08:d1:
a6:b4:f6:b1:fc:16:8e:73:55:48:41:6b:7d:f4:6c:
f8:6f:7a:84:28:a9:1b:1e:a3:3e:f5:58:32:fe:d1:
8b:e6:c7:53:9d:bf:e3:25:33:b4:cf:78:d9:90:4d:
a6:8f:27:48:a0:2f:7f:bb:38:86:26:8f:54:a8:24:
c1:0a:b6:0c:65:d0:4d:de:2a:10:cf:8e:68:5c:09:
db:bc:01:0f:dd:a7:64:64:96:53:8c:d4:da:c5:9c:
c9:b1:e7:f8:90:23:2e:8a:61:05:d3:9a:48:c5:31:
9d:9b:a5:2e:a6:ba:7b:dc:e0:6e:2a:9f:24:c2:8c:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:6A:08:6E:4F:A5:98:F6:8D:32:53:BE:ED:B1:41:4A:89:51:D3
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1082::/48
Signature Algorithm: sha256WithRSAEncryption
62:37:27:76:e2:7a:fa:92:71:08:2a:72:9e:30:3e:34:14:ff:
e6:72:36:b5:d7:d6:48:7d:44:4e:25:ee:bd:fd:f1:94:45:46:
1b:c4:8a:51:5e:e0:af:d2:d3:68:73:09:5d:dc:de:19:e2:72:
f5:cf:9d:95:f7:b6:de:22:5b:ad:7a:b0:c1:d3:45:31:19:38:
b5:d0:00:13:d3:89:82:50:91:36:de:c1:98:aa:2e:15:08:b1:
4d:b8:db:31:f7:d2:c6:ae:0a:8b:ab:3a:23:1f:94:a1:0e:bb:
2c:2f:08:71:b9:51:bc:4c:b5:50:db:86:49:00:8a:a9:17:61:
79:9a:e5:5d:96:8b:70:57:7e:76:4e:3f:3d:19:56:54:2e:9f:
b3:02:42:c5:a4:2f:4a:21:7c:30:ff:ee:be:b8:dc:6a:23:10:
1d:18:72:57:63:38:cd:ff:03:9a:2d:c8:f6:72:c0:2c:3e:37:
57:56:17:52:2b:94:22:6c:bd:ca:49:8c:a2:69:71:6a:f3:fb:
57:07:4f:f6:6f:f4:43:e1:56:ae:1f:16:55:71:23:69:32:fa:
ca:4b:f9:81:db:68:83:ce:79:a6:e9:bc:40:a4:b4:99:e6:aa:
eb:13:22:4f:13:c0:f8:ef:1a:3f:1c:4a:00:70:80:a9:6d:e5:
4b:30:84:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVdxpOcjE2EXscQ/HhmUxQFgZo10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTNaFw0yMzEyMzEyMzU5MTNaMDMxMTAvBgNV
BAMTKDk2Mzg2QTA4NkU0RkE1OThGNjhEMzI1M0JFRURCMTQxNEE4OTUxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjbKyunFxnEeBrOcS8F5jFjsp
uK9VYTjabt0iYDBVluYDK8UEAy3RSOHRFc4ibZ27c5SxhYzAKBhVdmJBDgftZ404
HblJj2M4M4kyGsY9NpzhstyGhJCxjUEG6MXtQ7/6UdmotAGlTOwX2Mma2Al/PgWq
l3Hj+FzR1h+pZn6GbAoAhM4I0aa09rH8Fo5zVUhBa330bPhveoQoqRseoz71WDL+
0Yvmx1Odv+MlM7TPeNmQTaaPJ0igL3+7OIYmj1SoJMEKtgxl0E3eKhDPjmhcCdu8
AQ/dp2RkllOM1NrFnMmx5/iQIy6KYQXTmkjFMZ2bpS6munvc4G4qnyTCjHRlAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUljhqCG5PpZj2jTJTvu2xQUqJUdMwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA2MTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BRCCMA0GCSqGSIb3DQEBCwUAA4IBAQBiNyd24nr6knEIKnKeMD40FP/mcja119ZI
fUROJe69/fGURUYbxIpRXuCv0tNocwld3N4Z4nL1z52V97beIluterDB00UxGTi1
0AAT04mCUJE23sGYqi4VCLFNuNsx99LGrgqLqzojH5ShDrssLwhxuVG8TLVQ24ZJ
AIqpF2F5muVdlotwV352Tj89GVZULp+zAkLFpC9KIXww/+6+uNxqIxAdGHJXYzjN
/wOaLcj2csAsPjdXVhdSK5QibL3KSYyiaXFq8/tXB0/2b/RD4VauHxZVcSNpMvrK
S/mB22iDznmm6bxApLSZ5qrrEyJPE8D47xo/HEoAcICpbeVLMIRI
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org