Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208679.roa
File: AS208679.roa (raw, json)
Hash identifier: w3aL0nb1Dly769aA+qYWCBO1ClA7r+BHspOJ7I42l7E=
Subject key identifier: AB:04:DF:1B:7C:71:24:FA:39:64:DB:FD:A2:A3:4B:F2:9D:D2:B5:A2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 10052288B6B2E2CC354109BEB8C548169BF390EF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208679.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 208679
IP address blocks: 2a06:a005:8d0::/44 maxlen: 48
2a06:a005:9a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:05:22:88:b6:b2:e2:cc:35:41:09:be:b8:c5:48:16:9b:f3:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=AB04DF1B7C7124FA3964DBFDA2A34BF29DD2B5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:be:f8:18:6d:c7:aa:56:b6:d7:eb:a7:ac:
4d:0b:5f:37:1c:92:6e:d2:09:14:5a:6c:d1:8f:71:
a1:2c:58:b4:76:6b:5c:3d:c0:99:a6:9e:44:e1:8f:
dc:07:8b:28:4b:3e:63:37:0f:15:03:6c:bd:fe:a4:
8d:f4:dd:06:f1:98:54:6c:6f:83:c7:75:b8:fb:a6:
a5:d5:cd:af:14:af:03:68:32:2e:7b:29:73:34:3f:
a0:a2:cd:ea:cf:ec:22:bd:fc:b1:42:44:fc:75:d0:
07:d8:b8:48:fd:34:a5:b9:a8:2c:2f:c6:47:4a:ab:
c0:97:d6:e5:7e:59:43:e6:06:a1:31:50:a9:3e:fa:
53:8d:d6:bf:39:f3:4d:ba:21:1f:dc:40:dc:87:18:
d3:e2:32:96:51:cb:17:31:51:08:64:4e:9e:ec:fe:
f8:a8:28:e3:31:e0:ee:63:05:02:bd:33:4b:12:2e:
f0:3b:fa:2a:dd:dd:7f:2b:16:f4:a3:00:7b:ea:16:
7d:cc:c1:63:d4:95:ae:cb:85:92:5d:6b:bb:54:b2:
69:96:69:f9:2a:bf:c0:3c:fa:7b:0f:ba:2f:b6:e2:
bf:06:42:74:78:9a:e0:fd:05:51:a7:0c:08:06:af:
be:f4:0b:11:42:07:40:7a:6b:dc:b9:6f:b0:a6:81:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:04:DF:1B:7C:71:24:FA:39:64:DB:FD:A2:A3:4B:F2:9D:D2:B5:A2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8d0::/44
2a06:a005:9a0::/44
Signature Algorithm: sha256WithRSAEncryption
30:d0:b2:e3:41:28:5b:ab:c7:84:57:92:1b:ca:22:cb:15:b6:
0e:19:a6:55:4b:11:d7:c8:d4:99:73:2d:cc:38:6f:da:5c:41:
97:7c:d9:53:81:57:ad:48:1b:e0:d0:f6:c9:5d:7b:c7:67:21:
ee:8f:14:66:d9:cb:dd:5e:e4:36:53:2d:bc:43:3e:2c:6d:3e:
21:c8:52:35:7d:e2:90:d4:71:f6:00:6a:98:fe:0e:dc:75:27:
80:92:67:2a:b3:67:6e:2a:11:fe:5f:f4:97:25:47:53:63:2f:
39:df:32:b8:3d:bc:31:a4:85:57:ba:c1:c4:c5:39:60:b3:64:
33:54:42:6c:3e:d7:46:12:e4:26:c1:54:31:9f:51:9b:a9:ef:
1b:46:a3:73:1e:97:37:20:51:65:60:c5:03:7d:70:f1:c4:79:
4a:0a:d9:e9:f6:d2:5c:ac:78:71:45:10:5b:5b:2d:74:38:28:
cd:61:30:f7:2c:a6:f0:ca:2b:be:7b:ca:05:bc:1c:2c:7d:ca:
ed:8e:47:10:20:19:90:6f:82:77:e0:19:67:e8:a1:bb:7c:7d:
b4:fd:83:bf:d0:8e:5b:b7:b6:b7:e1:8c:9b:84:c5:7b:1b:3d:
0a:81:fb:10:79:93:f2:03:9d:14:4c:ce:9e:25:fb:3f:09:14:
1a:33:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:30 2025 by rpki-client