Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208046.roa
File: AS208046.roa (raw, json)
Hash identifier: UqL419+XVYgNMVA1ytOXdGafQ/vCoMSkLqzeMnscP9s=
Subject key identifier: C3:00:AE:52:E8:25:3A:FE:28:14:61:C9:46:97:43:08:C9:BD:72:37
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4DAD40D7BFB6ABA57ADB3EE2D773821E31E196AF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208046.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 208046
IP address blocks: 5.253.84.0/24 maxlen: 24
5.253.86.0/24 maxlen: 24
185.99.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ad:40:d7:bf:b6:ab:a5:7a:db:3e:e2:d7:73:82:1e:31:e1:96:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=C300AE52E8253AFE281461C946974308C9BD7237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:f0:bb:41:f5:12:64:81:3c:2b:f1:e3:0a:
9f:07:54:b6:bc:0c:94:c3:1b:a3:c7:4c:e6:d9:4d:
23:09:28:68:28:f0:e1:ff:21:9f:bc:5e:bb:89:7c:
56:07:a0:5a:c7:df:97:7a:8c:e3:c3:3c:21:d7:a4:
ed:bb:78:3e:9a:fc:32:a7:47:6b:b4:b3:b0:2a:80:
6b:b8:b4:e3:d8:91:7c:8e:4c:4f:a7:54:56:71:33:
f2:95:d2:92:02:5b:c1:b1:96:64:76:50:2d:6b:10:
37:9d:68:21:2a:38:8b:09:2e:11:c6:f4:8d:ce:1f:
2b:68:c0:8a:d1:0a:9b:c7:56:4a:92:f9:72:f2:ce:
99:fa:8a:7d:d2:49:ae:78:40:6f:2e:32:19:3a:2a:
47:36:0b:76:75:cf:16:ba:57:d1:a7:63:de:1e:09:
a3:2a:4b:5c:4c:58:c2:5a:71:9f:1f:ad:63:2f:89:
57:95:3f:a8:af:a8:22:41:29:72:bd:b5:dd:67:84:
f3:59:f3:2b:0a:de:7f:28:80:3a:ce:c9:c6:83:f0:
29:3f:05:d9:7e:26:54:03:93:73:84:b6:b3:77:99:
e1:98:52:25:04:db:82:a2:9a:8d:e9:58:6f:79:00:
c5:be:38:e8:17:d5:5b:6d:eb:33:6a:d4:45:d9:1e:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:AE:52:E8:25:3A:FE:28:14:61:C9:46:97:43:08:C9:BD:72:37
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
5.253.86.0/24
185.99.135.0/24
Signature Algorithm: sha256WithRSAEncryption
78:29:50:6d:70:8f:4c:f1:6f:05:ad:9f:2e:9b:f8:09:83:82:
25:a4:b7:0b:5a:80:9c:ac:84:12:e3:97:8e:c4:9f:2f:d9:0a:
90:00:e6:77:a3:63:51:fd:04:5f:d4:32:e6:48:1d:81:60:49:
81:16:c3:16:0b:f1:03:a9:5d:a5:27:a0:03:aa:00:b8:fb:ca:
a1:5c:10:f5:4d:6d:21:02:ee:d3:c2:af:e5:13:22:7b:3b:a5:
a1:a4:11:a3:4e:d9:fa:43:93:e3:3a:de:f5:f2:28:20:30:91:
6e:36:a3:be:86:0d:ff:ba:a5:01:b9:0e:f4:36:6a:1a:5c:81:
ae:36:7c:7a:00:d9:22:51:3b:41:f9:15:2f:44:d0:cc:53:6f:
cc:4b:81:a9:12:24:a2:0b:1b:dd:01:32:70:4f:e3:3d:fd:a3:
fc:bb:5f:d8:79:be:ec:69:93:56:62:25:72:f7:47:c5:f6:55:
62:b5:22:20:16:74:1e:12:c2:c3:dd:9a:96:09:60:4b:a1:19:
87:ea:79:c6:5d:8f:e6:6b:57:36:44:e2:4f:45:32:1d:0f:f8:
79:f6:48:bd:ca:be:a8:19:ff:0e:3b:7e:f3:e3:49:37:33:93:
6a:02:1b:08:85:ee:ac:f0:40:72:50:82:b5:cd:ec:e4:87:6b:
f3:ea:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org