Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206533.roa
File: AS206533.roa (raw, json)
Hash identifier: 0I6D8dG4G0N1dFlzUbkGHxnS+XrNlV0mzyIOF+hNXME=
Subject key identifier: E7:AE:34:BE:D6:4D:54:C3:75:F3:53:F1:8D:17:8C:0D:2A:61:1B:73
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 09D5472FD7B8225B548FF8438CB7E97E26BE9EF8
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206533.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 206533
IP address blocks: 2a06:a005:855::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d5:47:2f:d7:b8:22:5b:54:8f:f8:43:8c:b7:e9:7e:26:be:9e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=E7AE34BED64D54C375F353F18D178C0D2A611B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:f5:5a:53:d9:27:f1:77:9a:80:bf:50:5b:
90:b1:5e:ae:9d:a0:ec:8f:6b:e2:47:76:9d:06:57:
fe:4f:e9:71:6d:06:1c:8b:fd:d7:b1:47:1a:51:9d:
a5:d5:27:d0:c6:f4:df:99:c0:ac:5e:10:80:1c:d0:
47:f8:5e:f4:c1:4a:7e:00:ef:83:88:b3:52:ba:c6:
1e:7a:ee:8d:eb:14:75:77:da:59:77:2f:14:77:a9:
97:60:d4:f7:66:24:89:eb:40:b5:fa:6a:0c:a8:1b:
8e:ae:92:74:89:2f:2a:3f:2f:4f:59:91:06:26:78:
67:e7:3a:58:27:a6:d8:54:2a:da:e4:1e:1a:28:ba:
95:73:78:f7:67:c5:39:ef:cf:71:43:6b:a4:71:cd:
f6:a0:fb:88:d3:db:00:6a:a2:df:48:af:e1:42:69:
b9:5c:ff:0b:05:0f:9c:9a:5e:fa:f9:f4:54:0c:a1:
78:b6:09:49:ca:6c:35:e3:27:f8:c2:55:15:e4:02:
64:b6:75:3e:ed:ea:a0:fb:3f:47:83:71:08:d3:76:
89:d8:5b:2e:9a:b4:12:5d:99:69:4b:f0:5c:f3:87:
13:9c:db:d8:86:2b:2d:94:21:72:32:ec:1b:f4:69:
a1:32:34:47:d9:ce:11:6c:1e:94:3c:f2:c9:d1:ec:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:34:BE:D6:4D:54:C3:75:F3:53:F1:8D:17:8C:0D:2A:61:1B:73
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:855::/48
Signature Algorithm: sha256WithRSAEncryption
7e:4f:d1:53:55:19:4b:e0:20:bb:00:5f:34:c1:5e:ed:90:9e:
03:64:8d:e2:91:8f:66:1d:7e:39:7f:64:fd:78:fc:a7:50:ec:
12:fc:bf:9f:e1:af:ef:f7:07:bd:b1:a6:f1:83:b5:ca:d0:d6:
d1:df:d5:29:49:6b:68:c3:e2:8a:05:76:6b:66:e9:80:27:85:
03:56:a4:95:ca:e1:e0:18:8b:9b:6c:6c:23:22:f7:52:5f:e5:
89:2e:0a:de:3f:17:8b:b3:8c:03:f6:9a:0c:c7:85:19:5c:8d:
b3:18:f6:38:eb:1a:df:fc:18:5d:f4:79:b8:4c:98:15:41:04:
3f:62:a4:69:f9:38:fa:a9:6b:c7:37:41:c2:e8:84:73:fe:f5:
d2:48:b9:b6:3d:f6:94:d3:3b:61:5e:de:9e:58:91:47:1d:0f:
fd:dc:00:88:a9:ac:9b:d4:38:35:dd:e3:92:2d:de:44:69:dd:
e3:35:7f:73:a9:52:46:54:cd:71:cb:1a:9a:06:6d:d9:43:a7:
bc:11:57:0d:e5:64:47:a3:d1:02:b3:eb:3c:68:ff:93:6d:f0:
c8:c7:b5:23:22:40:ac:c9:3d:2a:85:de:f3:e7:60:11:9f:c1:
83:99:75:3f:08:97:f6:ea:f0:93:dd:1d:14:bb:05:f3:81:40:
5c:e8:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org