Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206216.roa
File: AS206216.roa (raw, json)
Hash identifier: Kxc115Alw5UH3/DyyxNgDCTa9xJTZaFRfC4SRV01tQo=
Subject key identifier: 62:0B:7B:B5:08:E1:A5:91:DA:AA:58:D4:EE:08:4A:CB:85:6C:62:EC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 06F1296244736624870F1E6E677E219F3ADD526F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206216.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 206216
IP address blocks: 2a06:a005:4d1::/48 maxlen: 48
2a06:a005:853::/48 maxlen: 48
2a06:a005:1d51::/48 maxlen: 48
2a06:a005:1d53::/48 maxlen: 48
2a06:a005:1d58::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f1:29:62:44:73:66:24:87:0f:1e:6e:67:7e:21:9f:3a:dd:52:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=620B7BB508E1A591DAAA58D4EE084ACB856C62EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:43:e7:3c:25:95:25:cd:bb:b1:85:01:e1:
6a:c1:91:ab:cf:5a:88:cf:ce:6b:cf:6a:a1:2c:23:
2d:ed:bc:17:c1:0c:ef:5b:ee:2a:9d:e6:cb:c6:1a:
f5:e4:91:c3:13:f1:72:a9:ba:73:14:76:c2:cb:8b:
6b:38:10:d1:f5:f1:3b:9f:a6:06:bc:e7:57:fb:ca:
54:e5:51:41:c0:95:b4:41:8e:aa:f6:72:f4:a0:20:
d3:82:7f:98:a5:8a:49:94:af:b6:0b:bf:16:71:ef:
e3:b9:0d:a4:7a:3b:14:c3:77:eb:51:c1:0c:b5:ab:
ee:6a:36:47:21:04:b8:01:a9:53:ed:4a:70:d7:45:
c2:16:74:d2:62:95:9e:d9:07:f3:b8:3c:e6:f9:25:
dd:a0:08:87:43:df:ca:0c:7e:f2:95:78:f1:3e:19:
0a:46:3c:27:f2:42:2a:f2:99:56:f8:dc:ab:dc:41:
66:4c:87:97:69:71:b4:62:1f:fc:6b:3b:5a:9e:48:
76:a8:d8:c5:59:00:43:c9:2d:d1:b9:41:63:dd:d0:
1a:67:02:2d:b2:87:f3:91:32:8f:04:32:aa:45:5e:
68:42:6e:f4:ba:1a:15:3a:a1:c0:e2:09:55:9a:2f:
c2:3e:11:2a:34:95:fa:69:77:ec:43:e4:e0:94:8f:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:7B:B5:08:E1:A5:91:DA:AA:58:D4:EE:08:4A:CB:85:6C:62:EC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4d1::/48
2a06:a005:853::/48
2a06:a005:1d51::/48
2a06:a005:1d53::/48
2a06:a005:1d58::/48
Signature Algorithm: sha256WithRSAEncryption
28:80:db:65:85:d3:8c:94:3f:75:c2:15:5a:bb:7b:33:2a:1f:
41:0e:02:2e:7e:1a:aa:05:1b:a3:1c:08:da:8c:d2:a2:97:6b:
8d:4f:d3:45:9e:59:c6:94:fe:e5:a8:82:0d:ea:8f:40:cf:79:
d6:84:ba:5f:d9:3a:33:39:7f:ff:7a:a8:20:31:7a:fb:c7:89:
e5:74:7a:3d:70:93:4a:37:e5:63:44:1b:f2:e8:df:63:bf:00:
8f:ea:60:3a:d0:31:63:a9:cf:d7:42:24:82:84:79:c6:9c:1b:
ad:26:90:75:ce:27:89:c5:a6:9a:cc:9e:5e:04:15:2f:c2:7f:
c7:48:2c:d0:0e:da:cc:53:89:7f:67:ab:89:b2:2e:15:8a:36:
c7:33:1b:00:8a:29:2f:0f:88:e7:97:40:ab:98:51:c3:36:84:
bc:dd:55:20:7a:76:e6:b9:a7:94:6c:50:ca:c3:75:49:9a:c2:
fa:4c:62:ae:4a:61:bd:44:05:0c:ff:03:c4:ad:64:b5:34:b4:
f0:10:44:e3:5d:d9:1a:ff:cf:5b:05:76:dc:18:3f:2d:06:a3:
42:df:cc:e0:06:5e:37:8a:da:80:c8:95:d6:df:45:1c:cd:05:
4c:33:80:ae:b0:c6:ff:ef:18:bc:75:32:89:f1:9a:e4:d1:43:
69:f9:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org