Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: lJlxZ1GtBTN/jiTDouB15Ge8D0UyXFmKdK9bWUJ7dWQ=
Subject key identifier: EA:BE:44:B8:5F:09:31:3A:96:06:21:13:C9:67:75:A5:AC:5B:BE:AC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6BA42D52B5EBC6C88300CE6E3AE187898C360644
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207941.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
2a06:a005:9b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a4:2d:52:b5:eb:c6:c8:83:00:ce:6e:3a:e1:87:89:8c:36:06:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=EABE44B85F09313A96062113C96775A5AC5BBEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:16:c7:e8:1f:56:e6:6d:e6:f8:4e:16:9d:
0a:5a:45:b6:1c:3d:0e:c0:f0:06:bd:9c:39:46:a6:
99:19:7d:6c:50:fa:f4:1b:54:38:74:37:f0:f5:3f:
f7:a4:8a:35:58:dc:9b:d4:54:4a:a7:bc:1e:52:16:
b1:3a:55:f9:60:d1:f0:5e:4f:a7:36:1e:07:88:ec:
14:89:0e:ce:0a:26:2f:f6:da:e7:58:24:2f:ad:02:
73:78:e8:19:71:c9:09:ff:70:b5:c8:13:77:2f:e8:
e7:15:a9:bb:7f:20:01:22:ae:52:00:71:a7:d9:99:
f0:59:17:24:27:0f:b5:ef:b3:40:ad:e8:91:61:fe:
a5:1a:a9:a2:45:5e:a9:78:69:22:38:51:10:43:e8:
db:94:3d:c8:ca:69:7c:af:48:22:6a:06:85:55:11:
45:f5:05:9d:35:db:c8:7a:4d:e1:8b:86:9b:e1:27:
4b:88:67:82:07:e1:62:95:8a:6c:14:6a:48:c6:bc:
8e:95:70:75:d4:4e:ac:56:5f:fe:1e:43:13:c5:c2:
cc:b4:68:77:c9:40:0a:09:01:c9:28:02:41:d5:2d:
0e:fe:98:48:de:f5:3d:8b:25:6a:66:15:7e:46:5a:
6b:30:f9:4f:b5:14:ad:c8:20:16:a6:89:c9:12:72:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BE:44:B8:5F:09:31:3A:96:06:21:13:C9:67:75:A5:AC:5B:BE:AC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
2a06:a005:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
86:fe:77:55:63:1e:fb:a8:14:1b:50:3a:d7:80:27:d4:53:14:
e3:ac:8d:1c:d6:03:8b:af:19:44:c2:d3:cd:b4:a4:ac:68:1e:
3e:a8:6c:c6:b7:49:a6:48:c6:b5:9b:9f:f5:14:92:96:8c:aa:
99:20:1f:36:69:ef:f7:9a:19:e1:cb:82:16:3f:13:91:fb:32:
27:07:55:c0:9e:ef:a0:92:7e:2c:73:15:0a:0f:9b:24:e8:a9:
0c:71:8d:4c:78:87:79:19:0e:e0:38:77:36:f4:7f:58:05:7b:
9d:de:da:51:cb:3a:bb:3b:97:95:1a:db:a2:d6:d3:2d:23:be:
07:52:1c:31:b9:7f:7c:ab:de:4b:69:2a:05:f3:3a:89:ff:97:
48:77:0c:3f:ed:dd:ab:d0:78:6e:99:10:08:14:89:12:16:b4:
d1:b7:68:ad:79:5a:51:a1:75:97:ae:f4:60:60:48:2d:7d:f5:
61:72:c0:ab:1f:ab:bb:3a:f8:ab:8f:ad:10:00:52:17:f6:64:
82:3f:90:a2:3c:6b:de:63:32:15:31:9c:09:df:ae:f9:7b:4a:
6d:69:f9:1f:36:bb:36:75:9a:a5:a9:a2:3f:32:8a:f3:fc:9d:
dc:15:49:c1:a1:a9:85:e2:0a:78:4a:93:30:c6:b1:4e:b5:a9:
d0:23:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org