Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207740.roa
File: AS207740.roa (raw, json)
Hash identifier: dtkiqDKcLiysqQzuZDS+GEY4sa/siWGeVacSmhOANsU=
Subject key identifier: A7:84:7E:A2:43:5F:A9:5E:FB:6C:0E:B3:57:17:73:B7:C8:F0:DD:3F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 43DE70838A02428D526B8E10C27D48ACEB59AB14
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207740.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 207740
IP address blocks: 2a06:a005:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:de:70:83:8a:02:42:8d:52:6b:8e:10:c2:7d:48:ac:eb:59:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=A7847EA2435FA95EFB6C0EB3571773B7C8F0DD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:15:4a:43:d4:1d:45:f8:30:20:3a:57:61:
77:70:76:df:28:23:b5:d3:da:7c:87:67:3d:5c:53:
c6:ee:ed:e4:60:70:a6:3b:f3:3b:6e:10:b9:1b:88:
95:28:8c:c2:c3:3b:3e:13:50:9b:79:42:b2:95:e5:
4c:c3:6b:03:bf:c6:77:e1:97:97:ee:42:35:9a:54:
16:16:d5:1a:b0:f0:0e:03:b0:f1:74:f6:6f:01:17:
10:c6:22:05:89:53:72:7e:b0:01:11:86:7d:11:83:
aa:0b:10:35:a7:c1:dc:c9:fc:01:90:f5:16:fa:87:
d3:8f:85:61:b3:05:26:50:59:66:05:ea:f1:a2:a5:
49:d2:6d:0b:ea:4c:dd:9e:73:b6:f1:b0:9e:c7:85:
06:dd:92:c7:50:49:0f:c5:9a:4c:cc:39:cf:c7:ed:
0a:68:3e:26:78:1d:f7:98:6c:64:67:7a:05:db:a1:
2e:01:3d:07:7e:65:cb:30:c1:97:be:1e:55:92:98:
fb:2b:69:ae:a9:9d:08:86:eb:f6:c4:c1:4d:08:59:
07:f4:f7:8e:20:57:f7:e3:28:54:c5:54:f0:6a:90:
8f:11:a6:da:20:cd:9f:1a:bf:30:f6:09:e2:85:40:
a9:8a:af:9e:53:1f:9a:92:79:21:26:43:4e:1b:44:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:84:7E:A2:43:5F:A9:5E:FB:6C:0E:B3:57:17:73:B7:C8:F0:DD:3F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7::/48
Signature Algorithm: sha256WithRSAEncryption
7a:cd:91:93:80:26:82:7f:dd:84:9c:ce:ac:36:7f:4b:4e:7d:
18:b3:52:f8:93:c5:05:aa:48:a5:5a:cf:1d:8b:1a:16:a6:85:
89:3c:54:62:77:ae:46:a1:15:bd:53:75:16:22:1f:3e:16:af:
59:69:00:a6:ab:33:e1:d0:ed:66:17:79:a5:15:32:1d:0b:c9:
36:e7:26:76:5f:a0:69:20:0e:87:e9:e9:08:14:66:43:69:03:
e9:eb:f2:ab:eb:96:cc:5d:3f:ac:ee:bd:45:a7:97:41:eb:92:
91:ca:b7:d4:45:03:5f:94:a8:b5:53:cc:bb:5f:6f:4f:33:34:
d3:ce:fc:e4:67:14:47:52:3e:26:4d:8a:94:1d:d5:b4:e0:56:
c0:88:c6:a6:32:1d:06:d9:ac:3c:e6:80:43:b8:cf:7a:a6:74:
5a:0b:ee:c0:25:c8:0e:98:1f:c6:5a:cd:9e:f6:2f:b2:a9:ae:
c0:5c:87:40:13:8a:17:cf:29:b5:13:8d:3f:6a:51:27:b5:b7:
27:80:45:fb:d2:5f:36:23:59:be:cb:89:83:9c:be:b6:0c:95:
9a:0e:21:d8:de:15:3d:37:b9:82:d7:0f:76:54:bd:8a:53:a3:
5f:83:c7:cc:67:bf:1f:86:52:0c:00:8f:64:e5:93:f7:fa:aa:
f5:a4:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:02 2025 by rpki-client