Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208584.roa
File: AS208584.roa (raw, json)
Hash identifier: RQ4JMXLCIVO1sA2VUHZEvlgbEV5TYmUVVXc4yIW16r8=
Subject key identifier: B3:50:4D:28:56:81:F8:8E:8D:93:E0:BB:44:A9:56:83:EB:33:AE:A2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 43BBA8138878B4438ED19BCF3D264940417ECDBA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208584.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 208584
IP address blocks: 2a06:a005:460::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bb:a8:13:88:78:b4:43:8e:d1:9b:cf:3d:26:49:40:41:7e:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=B3504D285681F88E8D93E0BB44A95683EB33AEA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:45:ae:42:a9:41:5b:e3:a5:26:94:af:79:
fd:f1:e6:7e:85:1f:52:91:ee:27:27:8c:fb:39:da:
d3:65:3b:39:8e:f4:b1:ff:a3:ef:82:d4:ef:fa:dd:
27:81:43:ac:63:34:59:37:ff:23:19:7e:98:e2:28:
5f:4d:3b:4b:89:0e:7d:4b:2d:58:84:6c:42:eb:e4:
49:b3:90:fa:43:85:1f:1d:2d:a0:b6:07:dc:42:7b:
7c:af:24:41:c4:a3:47:3d:92:e1:ba:34:ba:a2:f7:
da:f6:d3:e7:a7:d2:38:4a:78:48:09:39:89:a9:11:
b4:f0:bf:3d:c3:db:27:ea:70:56:9f:e3:9e:02:d6:
17:e0:3b:3b:d0:00:be:48:b6:27:e9:c5:ec:10:89:
ec:34:59:10:1a:1a:47:c9:ce:66:41:c1:7c:2d:db:
70:2a:fc:f4:e9:41:38:40:4d:e0:0e:d2:13:c5:9f:
db:cf:be:ae:93:bb:e9:c8:ef:1e:b4:ef:8a:28:d4:
ec:86:74:77:70:f6:31:43:7f:70:25:15:4b:b6:97:
3c:ff:c0:71:8f:3f:77:00:34:21:01:07:22:4f:61:
1c:a9:02:9b:da:0c:98:db:03:ba:b8:35:b4:82:3b:
5a:11:71:ca:c8:09:81:0f:37:84:59:75:dd:8c:d9:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:50:4D:28:56:81:F8:8E:8D:93:E0:BB:44:A9:56:83:EB:33:AE:A2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208584.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:460::/44
Signature Algorithm: sha256WithRSAEncryption
0d:43:85:09:bc:af:2e:43:2f:94:96:6e:af:0c:2c:ab:42:bf:
45:98:c0:c7:a4:6f:bd:03:08:03:12:65:4f:3e:b7:14:bd:1d:
00:0d:65:c3:a2:ff:5b:6c:14:c8:19:19:0d:17:cc:5f:fa:e7:
17:cd:90:fe:31:a2:05:07:44:87:8e:50:a3:9b:02:c2:e0:e8:
44:01:be:64:2a:37:a2:ba:89:31:05:fc:95:ec:b9:1c:43:e2:
09:54:59:fd:9f:61:f7:65:89:0b:a9:f0:56:4e:95:14:cb:02:
cd:70:be:1c:bb:2b:ed:ab:7d:27:c6:19:95:93:4f:72:b8:4d:
26:ef:d9:ec:17:f4:44:1b:a5:b1:e0:ce:13:55:63:7b:8a:99:
83:72:f0:ab:a7:fa:00:97:5f:ea:fc:81:a3:a0:4c:a5:42:1f:
c6:bd:51:97:81:1d:fc:4c:0f:9e:57:bd:fe:52:5c:bb:7d:fc:
d7:0e:02:6f:f9:05:30:d3:ae:87:ed:bf:2f:7d:b7:c9:65:42:
c8:66:6a:69:ed:bf:c5:6f:ab:07:49:cf:71:ed:23:fe:fa:1b:
9c:d0:dc:30:0d:18:2b:a9:cc:07:e2:81:6a:31:a4:10:4a:99:
3d:5b:28:df:73:4b:8c:3d:35:83:36:5b:50:23:f6:2d:5f:84:
cb:fb:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:12 2025 by rpki-client