Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207705.roa
File: AS207705.roa (raw, json)
Hash identifier: 7AUHyRyHzWWFQgvNkGOdVMA5Rjt0+7wgIOQqD/tEHe0=
Subject key identifier: 1A:58:F9:BB:62:83:25:08:6A:F1:93:DD:FA:A5:11:97:6F:6B:03:12
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 605E15C59CC617FC01D7C9223F3DC56CD352CD7A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207705.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 207705
IP address blocks: 2a06:a005:210::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5e:15:c5:9c:c6:17:fc:01:d7:c9:22:3f:3d:c5:6c:d3:52:cd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=1A58F9BB628325086AF193DDFAA511976F6B0312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:53:92:f9:46:ff:fc:71:c8:e3:79:9a:b8:
6c:16:b1:8e:f7:9e:3a:1e:ec:08:68:53:c7:93:2b:
82:42:8d:d7:44:43:68:08:bb:a1:38:86:9d:65:9c:
e5:ef:71:8d:06:fd:c7:f1:d7:a1:2d:8c:3a:c7:68:
2b:92:8a:4f:7c:99:b3:b7:ba:0d:43:31:0d:06:67:
35:67:ab:1d:14:ad:d3:72:c0:7c:30:d1:11:d5:16:
86:26:7a:e5:77:2d:b0:fc:28:80:4e:55:85:6a:26:
30:29:dd:df:dd:55:3d:24:01:de:bd:54:f5:95:3d:
a5:d5:c7:97:0e:68:35:b1:fc:03:35:d0:76:b5:56:
64:cb:78:c3:29:18:5d:4c:03:3a:b4:ac:d1:45:fc:
49:12:57:38:9f:f2:2d:e2:65:22:b9:5c:f6:73:ff:
75:e7:9b:6d:0a:d3:1c:62:20:61:13:bb:8a:cd:f3:
18:32:71:ee:3e:a0:3e:d9:5b:67:ec:3a:68:48:43:
b6:02:8a:7c:6a:f5:01:b0:c0:b5:e6:81:ef:70:4d:
c0:f2:8d:80:f9:b9:9a:6b:ba:a3:04:e2:1a:e0:07:
57:45:cd:cd:ad:64:a1:70:58:cc:2f:48:4c:f8:5b:
e4:a7:5e:f3:0e:70:e9:d7:11:5e:1b:d5:4b:e8:0d:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:F9:BB:62:83:25:08:6A:F1:93:DD:FA:A5:11:97:6F:6B:03:12
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:210::/44
Signature Algorithm: sha256WithRSAEncryption
6f:6e:79:f6:34:6d:46:5b:1d:ce:3a:6a:db:0e:41:2e:75:99:
25:de:ba:2b:82:49:48:44:56:db:42:49:c9:c2:4a:87:4e:f9:
ce:00:4c:89:49:16:a3:21:0c:d8:25:0f:a5:73:24:c6:b8:04:
86:38:76:b1:d6:97:7a:01:9c:f3:7d:5f:36:3a:be:35:95:30:
a7:ec:f8:82:7d:7f:15:3f:3a:1c:b4:63:aa:c2:32:8c:d8:e9:
a0:ff:a0:71:a9:f1:54:be:a5:13:60:0e:e1:86:57:07:0e:b3:
fa:39:cf:03:c3:97:14:74:d6:1a:af:07:7b:6e:ac:68:86:39:
eb:06:c0:95:31:b0:47:1a:7b:3f:34:f5:54:92:f8:45:63:e8:
03:ae:cf:1c:b8:cc:d6:e5:a0:45:7d:6a:be:f2:79:87:88:3c:
95:68:f5:a4:61:32:05:6f:ff:d1:77:78:70:7a:a7:f1:42:da:
2d:66:5d:09:9d:73:3b:fd:6f:9f:52:83:1c:ef:a0:68:69:b5:
29:52:4a:10:cd:05:76:2f:b3:e6:33:d2:d2:a3:c2:a7:55:66:
f3:a3:3f:e4:ac:9e:de:4b:b9:98:1f:e4:40:53:07:4e:eb:2d:
aa:d0:9c:b2:b6:9c:d8:81:85:48:f6:0f:f0:5d:2f:6e:da:0a:
e3:36:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org