Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207320.roa
File: AS207320.roa (raw, json)
Hash identifier: F0unTI+OPvJEIgJ4yR59bkDFP4xF73PHI0/r97/6zYw=
Subject key identifier: FE:A3:22:63:5B:24:D7:60:98:E8:8B:C8:56:0F:80:55:2F:87:1A:1A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 246EB49F9A345F9BC56F19104C798556F94FDF4B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207320.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 207320
IP address blocks: 2a06:a005:43d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6e:b4:9f:9a:34:5f:9b:c5:6f:19:10:4c:79:85:56:f9:4f:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=FEA322635B24D76098E88BC8560F80552F871A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:e8:a5:4b:ca:de:58:2d:81:af:b4:b8:c9:
70:49:29:41:b3:e4:9b:ea:e2:04:5d:11:75:5a:18:
16:95:f9:b5:c4:2b:7b:69:31:35:6a:9e:22:2b:09:
3b:5a:8e:c1:3e:53:c6:9a:ed:22:30:63:56:7a:76:
d9:3c:0e:87:0b:d8:25:60:d3:8b:87:e2:ff:bc:16:
1d:f5:b7:bb:52:cd:d9:03:2e:36:f8:70:19:76:db:
7a:d0:3b:0e:06:35:87:4b:8a:4e:be:b8:03:0d:31:
d5:8a:be:b2:93:12:9c:97:97:29:c1:07:0c:77:d1:
ea:46:14:81:07:11:ff:59:9a:8d:d9:12:1c:dc:37:
c5:d4:66:ec:a2:ad:ed:ff:49:7c:17:ea:53:b1:74:
71:ab:51:3e:30:f2:3d:9c:3b:72:c3:cc:4d:92:b8:
08:3f:f0:8d:89:ba:9f:de:f2:19:ba:d1:d3:cb:47:
f3:43:cf:45:40:bb:c0:d3:dd:7c:16:1b:1c:3b:65:
17:7d:08:0a:2e:f9:fa:8b:71:02:9a:54:8c:40:54:
1e:eb:5e:67:cc:1a:a7:45:22:61:4a:6d:ab:34:bd:
d0:40:dd:58:ca:3b:26:f7:9b:a2:cd:7f:58:21:0f:
25:e2:4c:ee:f1:d9:5d:c1:2a:2f:f8:3c:29:8d:94:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A3:22:63:5B:24:D7:60:98:E8:8B:C8:56:0F:80:55:2F:87:1A:1A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:43d::/48
Signature Algorithm: sha256WithRSAEncryption
10:f2:08:0f:99:ce:ad:69:25:a7:7d:15:e1:28:7d:56:9a:f0:
c8:96:a1:24:55:2f:91:cb:7d:85:ab:b6:dd:4e:6d:6f:1f:02:
62:42:fc:82:65:84:26:67:89:2f:15:35:4d:48:91:8b:3b:e2:
4e:44:1c:ed:a2:74:47:dd:34:e5:c3:9a:6d:51:22:e1:32:3c:
0d:4a:c2:62:6a:50:d3:ac:97:7d:c2:5b:58:d4:ad:0f:53:62:
ca:da:52:3c:92:0c:0a:b6:74:4d:ce:e4:4e:da:1e:41:3a:b7:
59:4e:ae:90:88:46:74:5d:cd:46:e5:f5:64:8e:dc:40:a4:24:
46:89:01:97:f0:2c:94:45:f8:0e:81:91:44:29:1a:22:f2:37:
d7:1f:84:fc:53:5c:46:af:ff:25:9a:0d:69:b4:f3:5f:6e:43:
04:36:9d:b5:93:a1:6b:b1:91:33:d3:dc:90:f2:cd:12:2f:c8:
a4:39:63:92:80:69:27:08:be:6d:1b:18:e4:e3:ef:38:43:83:
2e:f5:70:f0:ba:07:d1:75:15:5a:fb:6b:96:df:e5:d1:ca:2f:
09:a3:07:75:97:fd:e6:11:53:02:47:b9:8e:47:45:30:20:2b:
5c:ed:bf:22:15:1c:a2:a2:8e:99:6e:a9:6e:89:74:ad:b1:14:
8c:06:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:58 2025 by rpki-client