Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207466.roa
File: AS207466.roa (raw, json)
Hash identifier: wIOpbPq1KIXbbiiIXwjXZQyFnhHrr0JwzgRoeCSiKfk=
Subject key identifier: 82:AC:E4:D6:B5:D4:6B:3E:E4:FC:2A:EF:BB:7E:DD:E1:AB:18:B1:C9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4B4B3EAB46BCA18075D2B2E829931BD4BC0904C3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207466.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 207466
IP address blocks: 2a06:a001:a080::/44 maxlen: 48
2a06:a005:2380::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4b:3e:ab:46:bc:a1:80:75:d2:b2:e8:29:93:1b:d4:bc:09:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=82ACE4D6B5D46B3EE4FC2AEFBB7EDDE1AB18B1C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:eb:eb:e5:9b:48:89:e8:85:23:02:32:6c:
32:20:08:07:8d:77:22:af:4b:48:1c:75:7d:f6:3b:
bd:2d:e2:91:98:0e:55:e5:ef:e7:1b:fc:fa:ea:94:
51:f5:a2:f5:3d:f3:57:9b:f0:45:5c:c4:b5:54:43:
74:d0:94:2a:e7:c7:34:39:9f:9a:be:49:75:36:46:
5f:fc:0f:36:93:4c:48:72:72:61:ba:f3:d9:76:53:
7b:7b:3b:f1:00:f1:77:6b:d3:5c:35:90:7b:f6:08:
73:bf:7f:5e:c5:22:07:e4:64:6a:b6:75:75:72:71:
2b:8b:ee:f3:7e:80:39:dd:26:91:b2:cd:60:bf:ad:
5e:bf:bb:8a:50:e5:cf:1f:75:4b:8e:c5:12:65:fa:
0c:7f:e5:ef:27:3f:86:70:a4:d3:1b:87:0a:ed:3d:
1b:aa:fe:eb:45:b0:74:ca:4d:e3:72:fa:24:4c:59:
c3:0a:2c:51:89:06:fa:5e:6a:c3:28:3c:46:b5:cc:
5f:32:5e:aa:5d:b5:d5:ef:36:d1:b1:18:52:3f:6d:
cb:45:ea:9d:c1:06:b1:d6:8f:5c:07:04:99:04:8b:
49:5a:68:da:7e:66:ed:d5:f3:9a:25:d6:3f:cc:84:
8f:8d:72:d1:ce:e9:60:69:3b:43:46:b3:69:49:9d:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AC:E4:D6:B5:D4:6B:3E:E4:FC:2A:EF:BB:7E:DD:E1:AB:18:B1:C9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a080::/44
2a06:a005:2380::/44
Signature Algorithm: sha256WithRSAEncryption
60:79:a4:fe:f5:22:f0:94:b2:0a:b8:73:bb:03:63:66:9d:b5:
63:fb:05:da:3b:82:10:53:64:b0:ae:48:69:89:2a:68:a7:86:
30:43:5c:db:45:86:a3:f7:73:16:09:16:6f:ec:53:d1:bb:e6:
11:b5:b0:1f:85:4f:42:82:63:9e:30:dc:e8:3a:6c:5d:19:b8:
a3:4d:d3:b8:a0:a3:16:97:57:ff:fa:4a:3e:5b:3c:d4:02:08:
27:99:5b:a0:aa:e2:c3:97:95:48:04:e3:c4:fb:6b:b9:11:b2:
f9:4f:d0:f2:6a:e9:48:4b:72:0b:0d:c7:67:e8:f9:d7:9b:c7:
cf:30:b6:70:d1:fe:cf:0a:86:77:f9:4d:d6:a7:42:90:e1:2e:
c5:b3:40:8e:19:fd:69:80:58:1f:42:d1:5f:53:84:0b:98:46:
09:b5:c8:e8:5e:8d:bc:cf:fb:b9:2e:89:d7:1c:c9:1f:fd:55:
37:c8:41:44:0b:9b:bf:4a:0e:5a:6a:9b:b0:50:ca:87:99:cc:
fc:f3:c0:65:36:44:ef:e6:5f:fa:4a:16:d5:9d:a8:c4:eb:55:
b6:84:23:15:c0:05:88:54:e1:71:87:b7:53:f6:b7:13:00:23:
70:ad:41:fa:2f:8f:46:33:58:10:ee:ad:16:01:3f:42:fa:24:
f5:36:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org