Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206804.roa
File: AS206804.roa (raw, json)
Hash identifier: H0BI2VqDn+vnYqss/N5kebtujV/tuOU/tngPZ7tAxHA=
Subject key identifier: A9:9B:09:24:54:91:39:88:86:AF:1F:4D:C4:27:96:B3:3B:F8:E8:56
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 20D12665711FD6EBF53042DA1C5C0CF2B2034CA5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206804.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 206804
IP address blocks: 185.90.60.0/24 maxlen: 24
185.195.236.0/24 maxlen: 24
185.195.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:26:65:71:1f:d6:eb:f5:30:42:da:1c:5c:0c:f2:b2:03:4c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=A99B09245491398886AF1F4DC42796B33BF8E856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:f0:0b:97:9a:83:06:68:38:ae:58:05:1d:
49:0c:09:bc:29:6a:51:64:85:df:a2:54:a8:5f:9a:
b7:27:3c:7a:6f:cb:fa:4a:15:5b:4c:38:c9:94:4c:
72:50:f6:55:7d:1d:26:48:0a:ce:71:40:b4:c5:33:
a5:dc:9e:e4:ae:3c:65:32:07:1b:c2:e8:05:49:3d:
22:a4:6a:75:37:b4:42:9c:70:5e:5d:bd:54:c2:f1:
0c:b5:87:03:40:d1:d6:7e:71:a3:4e:6b:cf:e3:64:
59:09:e9:d3:e8:d6:c9:d9:63:61:74:89:26:2d:80:
c0:e4:9d:bf:37:07:df:e5:dd:09:85:44:0c:6c:40:
72:bb:40:c9:da:64:0d:28:8d:99:b8:a6:a3:bd:f6:
3d:96:f3:cc:df:fb:d0:03:7a:db:bf:cc:3f:60:bb:
4c:aa:3e:08:61:e9:8a:6e:7e:8f:27:eb:da:34:a1:
28:b6:d0:a6:19:bc:ef:3b:cc:0a:fd:20:86:6a:88:
53:da:32:c8:67:77:c8:08:5e:1c:c9:a0:c1:c2:54:
3a:a8:b6:80:dd:52:38:07:cd:c7:8e:16:b1:18:63:
96:4f:40:0f:cf:14:bc:5e:45:3e:c0:8c:1d:1c:7c:
89:e4:a6:36:a7:59:a4:ca:01:f9:80:00:9f:52:3c:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:09:24:54:91:39:88:86:AF:1F:4D:C4:27:96:B3:3B:F8:E8:56
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS206804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
185.195.236.0/23
Signature Algorithm: sha256WithRSAEncryption
46:fc:a3:30:7e:ba:af:cc:7d:3e:61:a8:de:32:3c:14:86:e5:
d3:af:4a:e3:14:20:18:94:97:19:d8:70:b4:aa:99:1a:0c:12:
58:9f:3d:3a:a8:71:32:14:92:5b:ff:5f:da:aa:51:af:33:34:
7f:18:c8:ba:17:ae:6f:ab:7c:aa:a3:aa:92:98:76:06:ff:b5:
32:71:d6:a2:88:2c:d7:e2:a7:95:bc:7b:a6:5e:a9:53:ce:5d:
82:4a:06:22:e2:93:c0:8d:92:eb:55:cf:96:7d:0b:77:a4:a2:
fb:4c:4a:8b:ee:e0:d4:ad:b1:1e:25:a8:f4:c2:f5:8b:4e:39:
4c:ff:fb:df:25:ae:54:2f:ac:fc:3a:1a:ce:a3:fc:da:8c:9b:
f3:41:e7:61:32:cd:2c:10:ee:d7:9d:18:7c:fe:74:2a:40:60:
de:d2:57:4a:fb:9b:be:23:18:05:bb:c9:9e:b3:b1:10:12:27:
b6:56:3a:f2:f1:10:95:30:0f:79:d6:34:7a:d8:36:06:fd:73:
a9:f7:cf:78:c4:16:6e:b5:b4:30:e9:11:0a:3a:58:bb:a6:c6:
94:92:3b:09:4c:9d:4b:18:d4:25:7e:1b:bd:08:7d:35:aa:1d:
b3:68:33:81:31:24:9e:38:b2:ba:d1:c5:11:bd:38:52:42:ca:
95:93:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:43 2025 by rpki-client