Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208385.roa
File: AS208385.roa (raw, json)
Hash identifier: QyDyvX59fABeKnZwV9WRnOoOCBpfMtewqaJc/bvRVOA=
Subject key identifier: 74:C1:84:85:0A:44:31:78:7A:A4:B8:4D:C1:E6:71:0F:5E:43:F7:35
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5C9F837AE328D414F0130DAD6F76B92145BF5443
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208385.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 208385
IP address blocks: 2a06:a005:854::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9f:83:7a:e3:28:d4:14:f0:13:0d:ad:6f:76:b9:21:45:bf:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=74C184850A4431787AA4B84DC1E6710F5E43F735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:33:4a:9e:fa:12:b4:c7:ee:dd:43:e6:09:
cf:08:84:f5:5d:5a:25:bd:28:30:f6:7a:68:da:4a:
e9:e3:ba:fc:8a:51:f4:c1:9f:6d:83:32:23:bf:65:
5c:84:93:52:59:d2:ab:e3:e4:d3:67:97:76:0f:36:
c7:14:fe:1b:93:1e:5b:bc:8e:c3:63:3f:40:1e:25:
2e:dc:c8:29:73:12:2f:90:08:7c:d6:68:97:10:fa:
c5:a7:3c:c7:43:31:84:7c:f1:0e:ad:6b:e6:8e:07:
53:fe:0d:04:64:3f:ec:c3:0e:63:4c:2b:de:d1:ed:
07:13:ad:85:b8:4b:ad:58:37:a4:43:b5:7b:d1:11:
4e:c0:ea:a2:1a:57:22:4e:5e:90:ba:4b:1c:87:b9:
c7:8f:27:4d:33:fa:3a:98:96:11:2d:42:96:c6:f3:
c8:34:d6:4b:90:35:39:3d:50:e2:df:75:d8:bb:76:
3e:71:c3:cf:06:f1:d3:18:7d:9d:f0:08:e6:d7:b4:
8e:22:7f:a1:ac:7a:1a:ed:3f:51:e4:2b:c6:a7:fb:
af:4d:b0:72:b9:f2:75:e7:dd:bf:ac:6d:a3:32:0e:
16:48:ce:d2:2d:42:3c:ee:3a:65:68:5c:6b:f5:b7:
bd:53:89:98:16:22:e3:55:b7:5e:f3:4a:2f:3c:91:
6d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:84:85:0A:44:31:78:7A:A4:B8:4D:C1:E6:71:0F:5E:43:F7:35
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:854::/48
Signature Algorithm: sha256WithRSAEncryption
43:b6:15:0c:a3:36:f1:b9:e6:e3:6f:04:a6:0e:fe:73:ca:8f:
6f:83:8c:ff:d6:15:7d:ed:a6:f8:dd:36:d6:87:cd:35:6d:5a:
62:1e:98:40:0c:84:ba:02:84:16:85:cd:d8:c0:60:4e:90:2e:
09:3a:9c:68:33:b0:87:3e:f0:c8:b5:87:56:ff:22:dc:98:a1:
dc:8b:26:bb:40:13:1b:57:e2:ed:0b:84:02:95:54:b3:19:d9:
21:1b:0f:3e:17:5e:29:31:92:9d:cd:93:e9:96:cb:0b:42:98:
25:b6:f0:1e:4c:b8:3a:71:92:c9:f5:31:c6:83:96:1d:18:e6:
45:72:77:f8:91:5b:28:63:84:e7:c6:e4:9f:9d:8f:55:14:e6:
16:b3:0a:f3:e8:ad:f7:b6:ce:09:3c:18:62:e1:7c:92:0e:30:
62:fc:11:6c:ce:bb:9f:f9:23:37:54:c6:70:ea:f1:38:3f:ed:
bc:3b:df:6b:51:16:4b:40:4a:7a:60:8d:67:69:5e:a3:1e:67:
f6:a3:4c:fb:01:34:0c:8f:66:0a:d1:1b:10:8c:db:33:5b:37:
68:a5:9f:5a:79:89:45:57:43:8d:5c:aa:69:86:5b:38:85:2c:
51:49:57:e7:71:43:75:6b:a3:c2:ca:a3:0b:85:54:ab:f5:65:
85:b1:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org