Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206592.roa
File: AS206592.roa (raw, json)
Hash identifier: dRmV1wSPQ28dMtqp6ArfUGde+cWj7omnA0fzuVcqzfA=
Subject key identifier: 7F:E1:EC:3A:53:C1:74:91:77:5E:77:4F:A8:5A:33:FE:5B:FF:07:92
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 279CF0609C649237673E2C0E2FA328E9D917072D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206592.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 206592
IP address blocks: 2a06:a005:26a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:9c:f0:60:9c:64:92:37:67:3e:2c:0e:2f:a3:28:e9:d9:17:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=7FE1EC3A53C17491775E774FA85A33FE5BFF0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:74:8a:48:cb:a8:98:f1:19:78:48:b4:eb:
ea:2d:57:e6:f0:c6:2a:4a:4c:2f:d0:7e:9e:c2:39:
1c:2a:e5:1f:01:f5:6e:ce:99:b6:cf:1f:87:de:11:
6d:06:83:06:e5:57:92:1c:69:e1:94:b2:0a:f2:6f:
ae:cf:ce:df:8e:ab:53:66:1f:d1:87:bb:4b:2f:8e:
b2:8d:64:95:3e:43:c5:70:57:cd:ce:14:3c:e3:6f:
14:c8:63:8b:da:6b:ef:53:40:26:39:7f:49:bd:cc:
34:cc:98:a2:c8:da:4f:fe:a2:90:97:ee:90:0b:79:
77:b3:84:91:70:e6:c9:d0:06:10:76:9c:cc:3d:7e:
6f:87:c2:c8:fe:40:47:f8:b0:61:1c:5a:9a:7d:df:
e2:e4:d9:4a:f2:ab:c5:e9:4a:4a:bc:9e:3b:ee:a5:
be:3a:a7:e3:b0:10:39:d6:c8:60:b9:61:4c:de:e3:
25:3c:8d:15:ad:5d:11:ae:cc:03:4d:98:8b:bc:a1:
00:15:32:6c:40:8a:69:a3:90:78:a7:bc:6b:14:9b:
be:cc:55:91:14:81:d7:4a:b4:57:6b:55:78:76:55:
3b:84:6a:f6:bb:3b:73:f7:de:0a:ce:c9:91:ec:62:
d0:87:75:e5:8e:9f:6c:f2:df:76:03:c7:63:8a:34:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:EC:3A:53:C1:74:91:77:5E:77:4F:A8:5A:33:FE:5B:FF:07:92
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26a0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:bb:a1:0b:05:51:55:da:0e:9d:75:85:88:5b:a2:96:a9:8a:
ea:47:de:b5:fb:28:fa:9d:02:b2:c9:77:d4:73:ec:1c:b9:80:
c2:73:17:89:21:d1:47:f9:7a:1b:56:9e:d5:df:dd:c7:69:89:
e5:0c:73:78:af:0b:73:8b:35:86:88:6d:df:b9:91:8b:ab:03:
28:f9:13:e6:36:d4:27:e6:bc:3b:f4:f3:5f:ac:88:71:ee:4b:
f7:11:14:01:6e:21:19:49:07:fd:08:24:79:cf:26:16:bb:84:
45:25:5e:aa:03:3f:95:f2:42:24:8a:f0:e9:6f:fa:43:df:06:
50:0a:5f:63:b6:47:93:66:fd:2a:74:cd:4b:e8:7f:10:d3:5e:
2d:5d:d7:7f:b9:57:a7:31:62:a9:ed:cb:c7:6b:48:68:e4:d6:
fb:7d:0a:f2:da:79:0d:5f:5e:8c:4e:d6:cf:95:94:5f:c8:f7:
c3:33:6f:d9:94:32:cf:d5:97:6d:2c:39:a5:fa:82:c6:a4:07:
7e:fa:ef:31:72:d4:b6:38:99:ef:0c:7e:ad:c1:fd:7b:8a:ef:
96:46:b3:a8:f7:28:c1:08:d9:40:bb:08:8c:75:0e:fd:cf:fd:
43:2a:81:8c:9c:ef:5d:d1:5e:12:de:ff:8d:12:75:ba:1d:63:
96:59:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:28 2025 by rpki-client