Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206633.roa
File: AS206633.roa (raw, json)
Hash identifier: Ek9z0aFwpe7TH8pCns6l6M2NdgY3DrCYbsogvSNq3Uo=
Subject key identifier: CF:20:55:14:0A:92:E4:BE:4F:65:4D:8A:3C:4A:2F:71:84:11:0E:2E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 44DD5097EC6F55C42254BAC94E3D6AA7D5EFE4A0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206633.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 206633
IP address blocks: 2a06:a005:150b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:dd:50:97:ec:6f:55:c4:22:54:ba:c9:4e:3d:6a:a7:d5:ef:e4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=CF2055140A92E4BE4F654D8A3C4A2F7184110E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:74:6b:d7:91:b1:d4:da:62:c7:f0:a0:27:
a6:99:e1:48:e4:be:89:6c:10:67:54:57:5d:64:b8:
fe:58:6f:a6:8d:25:82:f6:14:de:1d:d0:2a:68:8c:
7c:e3:44:79:98:0a:dc:0b:4f:ad:c0:9d:34:53:ff:
83:f0:d0:eb:98:38:72:92:27:56:59:36:d4:68:f1:
d4:bf:c1:39:b7:2f:47:c4:16:68:5b:45:5b:92:f0:
03:00:1e:2b:96:d4:4a:2c:e3:fe:4e:18:3c:f5:91:
eb:00:0b:c4:30:33:22:75:45:14:fa:ab:6c:e6:56:
13:1f:6a:eb:e9:9c:29:61:b3:7c:a0:97:5f:de:1f:
f4:30:de:ad:d2:a9:13:39:a2:07:0b:7b:8f:46:3f:
95:06:aa:07:64:ad:51:75:c1:43:11:72:41:d5:54:
ee:0e:be:45:67:43:62:64:07:9e:51:a0:06:28:2a:
7e:a6:d8:42:be:d0:7f:bf:28:b5:c9:0e:30:a2:ea:
17:77:e8:46:96:a6:e6:1c:5c:1e:f3:a6:7b:42:1f:
51:d4:2a:65:7c:67:98:b8:90:a4:45:73:87:98:42:
bc:4f:3b:00:79:e4:3f:9d:83:44:c9:63:16:19:64:
a1:d7:a9:30:41:78:0a:dd:66:13:79:4e:81:0d:34:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:55:14:0A:92:E4:BE:4F:65:4D:8A:3C:4A:2F:71:84:11:0E:2E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150b::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d3:da:0d:c3:5e:0e:e6:c7:43:17:cd:e9:ca:f6:dc:28:de:
f8:83:37:a8:1c:5b:d2:4f:99:89:c2:ca:6b:9d:8d:3e:e0:49:
5c:97:78:09:07:f2:62:c2:a5:c3:58:87:cc:35:0f:2b:a1:d7:
4d:b7:0a:d1:81:14:1e:2d:15:4a:b7:10:ba:a3:95:5d:cc:1a:
ef:c2:84:c3:c1:f6:d7:19:e5:e5:02:a3:6b:25:60:32:b3:3a:
6c:a8:ec:fd:87:ce:72:8e:b2:08:c1:bd:91:c4:ce:fb:35:a8:
88:67:b5:86:e3:35:03:25:a7:61:4e:43:db:3e:87:d4:6e:26:
13:1a:4c:62:89:b4:b7:c4:48:fb:88:64:a3:46:01:6b:15:fc:
4f:91:c5:14:8f:56:a2:6c:66:1b:64:3a:b7:45:2c:c0:9b:03:
e0:6b:bc:62:53:c9:bc:a4:cd:48:c9:58:8a:01:0a:a2:8b:3f:
f3:8a:c2:19:39:0a:0b:be:42:05:c2:1c:b9:77:d5:75:bf:b9:
6d:66:e5:3c:44:7c:25:17:4d:f1:ba:08:cb:89:90:72:3c:5a:
03:9f:9a:69:a9:ec:9e:b5:bb:91:ae:13:7b:4d:02:c8:62:fa:
d2:a8:84:f7:fd:e2:b8:cc:c6:f3:d4:e3:b0:2a:dd:7e:fa:45:
39:88:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org