Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207556.roa
File: AS207556.roa (raw, json)
Hash identifier: Gbu7P3q4s3+YDJwUVsoPAHH6QcDiv2OKY2tisjgCW+8=
Subject key identifier: 09:1B:3D:0E:68:26:C2:F7:36:9F:F9:F8:05:56:7C:BB:12:1B:01:BB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 34A6FD6F889AA5F5056519493EFCBCA9E5218B49
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207556.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 207556
IP address blocks: 2a06:a005:720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a6:fd:6f:88:9a:a5:f5:05:65:19:49:3e:fc:bc:a9:e5:21:8b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=091B3D0E6826C2F7369FF9F805567CBB121B01BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:83:45:b3:cb:a7:cd:07:20:80:70:01:e0:
be:73:bd:f8:7f:b4:66:f5:fa:64:6b:7c:f6:28:85:
99:7b:da:af:21:9a:b2:bf:ce:98:d9:49:f6:5b:16:
1f:d8:6f:5a:a3:f9:3f:ab:44:74:2f:44:70:99:e7:
1b:c9:08:99:16:c3:6f:7f:26:57:fd:dd:e1:30:27:
41:f9:aa:6a:2b:76:f2:99:25:7c:5a:be:81:46:dd:
5f:3c:58:f9:bc:c1:d2:c0:75:77:8d:cc:a9:3e:c3:
ac:af:89:e0:38:d7:6e:a5:2c:bf:3f:4d:a2:0d:7c:
ae:8b:8e:2a:c9:b9:03:7d:f3:b8:c8:77:cc:02:52:
76:92:4c:df:b6:87:bf:36:cf:72:10:ab:56:31:06:
a8:5c:9b:65:16:44:c5:44:e1:f9:2a:f9:09:c8:66:
44:12:59:1e:ce:f4:06:f8:41:9f:6b:81:a2:57:b9:
e6:0a:29:c3:7f:a9:76:f5:75:a1:4b:2e:c7:16:ee:
55:cc:16:ec:71:e5:dd:bd:63:b3:6b:55:64:d1:08:
b6:c2:44:04:d4:c4:90:d4:07:6f:fc:0e:df:59:5d:
a3:10:81:17:6e:1b:00:31:d1:f7:25:e0:e5:44:5e:
52:e0:34:72:50:da:c9:b0:9f:c9:d6:8f:4d:d9:43:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:3D:0E:68:26:C2:F7:36:9F:F9:F8:05:56:7C:BB:12:1B:01:BB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:720::/44
Signature Algorithm: sha256WithRSAEncryption
70:bd:5e:06:8f:b4:c3:9f:5a:c8:fe:46:06:56:a0:6e:81:d6:
a0:f7:bb:96:21:ad:3b:df:bc:27:a1:b8:80:f0:da:35:c6:03:
d2:44:66:16:0e:35:fe:57:b1:3f:a3:a4:01:1c:21:3a:fc:68:
d5:71:c0:64:83:9a:05:ec:40:9a:02:e7:30:9f:3f:82:a1:c4:
e2:bd:cb:b2:6f:6c:7c:ff:55:44:0a:11:56:ed:7a:6b:9b:c8:
5f:9e:b9:ce:e8:23:80:b6:4a:e1:cc:f0:b0:88:db:f7:cb:a9:
1e:16:6e:5b:9c:5e:76:02:53:76:26:b2:e2:09:e6:e3:0d:f5:
d0:8e:93:28:f8:4a:17:eb:c9:e0:26:26:e2:f1:47:46:00:a5:
b9:fc:8a:f4:53:bb:24:21:35:9e:13:45:95:9a:ea:53:81:19:
0e:21:6f:9f:84:fe:d3:91:ff:40:f3:d5:84:c1:f1:92:96:58:
d2:6c:88:a6:11:66:43:c8:45:f5:65:01:bc:f8:e1:72:7d:e2:
6d:0b:e5:f0:93:0c:f1:e2:18:55:d5:aa:9a:eb:77:26:3d:70:
81:e9:b2:02:8b:8a:f7:3b:cb:be:fc:c4:27:21:46:c1:a4:cd:
47:55:ef:d4:93:3b:bd:ae:8e:68:67:40:48:7b:d1:ab:75:37:
b2:5b:9d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:46 2025 by rpki-client