Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208029.roa
File: AS208029.roa (raw, json)
Hash identifier: qGvPK37bs9TXSqZPmcLy5wp0M9QtHlfOq3TxPBGIEpc=
Subject key identifier: FF:86:27:72:13:4B:CD:90:D3:39:B3:76:AA:59:6B:12:CE:E4:F0:42
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5C994D3FC546251E0E6C7D006AD4803A880DB25C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208029.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 208029
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:99:4d:3f:c5:46:25:1e:0e:6c:7d:00:6a:d4:80:3a:88:0d:b2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=FF862772134BCD90D339B376AA596B12CEE4F042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:d6:ef:fa:4a:4f:79:a0:30:10:48:d1:9a:
fa:93:80:e4:70:54:05:d3:10:41:08:18:43:85:57:
8a:6a:f0:e6:29:aa:20:57:1f:2b:15:4d:14:18:74:
e8:12:53:4d:b5:b2:9d:f1:8b:13:a6:cb:e4:b4:a6:
91:00:ec:a1:a4:d9:d4:04:9a:f3:bc:90:a6:84:eb:
20:16:d1:85:4a:34:78:db:fb:36:03:3b:f6:cd:54:
f9:a0:a3:27:34:ad:59:ce:8d:82:50:c5:52:40:b3:
70:5b:09:7a:a5:7b:e2:ae:14:54:50:98:1c:09:10:
80:56:25:3d:80:07:b0:42:fb:5a:04:b5:d7:53:66:
31:ba:b6:66:0b:a9:af:b6:3f:02:07:d2:54:bb:d6:
e9:e6:d9:11:25:0f:f0:e5:35:df:cb:41:8d:f2:9e:
e2:e2:39:07:60:80:2f:48:ee:e3:ac:8f:78:52:c7:
fb:09:a9:44:3d:4f:56:6e:55:32:0e:81:e7:88:42:
8a:bf:e5:3a:2a:51:04:35:c5:2c:bd:b7:8d:af:f6:
02:e4:c7:40:92:9f:a7:6b:33:17:85:b5:ef:e6:02:
a9:33:41:f3:37:ff:d8:34:5c:90:ae:d8:a3:ad:35:
23:d4:a1:b8:6f:c4:71:20:60:84:8e:12:4c:a0:ef:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:27:72:13:4B:CD:90:D3:39:B3:76:AA:59:6B:12:CE:E4:F0:42
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
Signature Algorithm: sha256WithRSAEncryption
24:0b:86:c6:be:9b:39:eb:ce:69:da:42:e0:6b:16:b6:13:3a:
53:fc:ae:7d:c9:b2:6b:d7:98:3c:92:c7:f2:9f:39:1d:ff:b6:
44:8d:8f:e2:cb:a8:60:82:70:93:b2:8a:10:8f:f3:bf:11:f0:
3e:01:db:2a:c9:1d:d8:bd:83:f1:49:13:bc:8a:5e:69:9f:3f:
c9:7d:17:9f:fa:0b:b2:b8:b5:1b:2a:ff:ff:86:3b:e4:41:8f:
5e:93:e1:ae:fa:df:92:ec:38:2d:4c:81:aa:30:65:95:bf:48:
b9:50:42:04:63:e3:98:e5:66:37:73:31:7e:44:f6:10:19:a4:
a7:dd:c5:07:ec:39:f1:dc:2e:86:3a:1a:f8:a6:39:e1:37:0e:
cb:ef:3b:65:00:da:91:de:1f:bb:27:9b:14:6c:0d:57:56:79:
ce:5a:6b:b8:88:fb:f4:ce:f8:f8:19:21:8d:c7:3d:27:88:e3:
a6:00:d5:7a:74:0d:a8:8c:38:67:d0:cb:29:c1:cd:ca:52:7d:
b2:f4:bc:18:dd:b9:6b:0b:3d:48:3e:f9:14:b2:46:c9:c7:df:
50:d0:6e:70:d9:ac:68:a1:bd:ee:a2:90:76:0c:7a:49:9f:44:
60:da:da:a2:de:f6:84:a8:d5:fd:1a:50:8b:55:84:1a:4b:68:
1b:dc:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:08 2025 by rpki-client