Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208680.roa
File: AS208680.roa (raw, json)
Hash identifier: B/v99foddprUu5IaiaTZpZ9ucZjz2jHKj8iVS8E7894=
Subject key identifier: 52:78:0A:FA:0F:20:7E:82:24:22:41:FF:08:99:4B:A1:DA:9B:30:F1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3826F987AE5525F50B2D1BC4D54487749B77F10F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208680.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 208680
IP address blocks: 2a06:a005:2f0::/44 maxlen: 48
2a06:a005:300::/44 maxlen: 48
2a06:a005:310::/44 maxlen: 48
2a06:a005:320::/44 maxlen: 48
2a06:a005:330::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:26:f9:87:ae:55:25:f5:0b:2d:1b:c4:d5:44:87:74:9b:77:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=52780AFA0F207E82242241FF08994BA1DA9B30F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:58:1f:58:09:71:74:a5:38:a4:61:5a:1a:
63:ef:32:3d:7a:1b:6e:27:77:3a:d0:af:a8:84:2b:
84:5a:74:14:cf:7c:bb:5b:b2:5c:85:1f:95:c2:24:
3b:6b:cd:8d:7f:03:86:ab:80:ef:d3:ea:53:1b:3e:
26:b9:8e:04:4e:33:f7:65:ae:40:9f:5a:7c:84:c1:
bb:37:fe:5e:6c:61:60:f7:1c:f1:99:4e:ef:ec:8f:
3d:92:05:e3:fb:fa:ff:0f:e7:3b:47:d7:12:b0:f0:
61:6c:1b:41:bd:9b:fc:68:ae:a7:78:80:ed:5c:ed:
e9:05:56:b4:29:cf:06:50:c2:24:f4:9e:a3:bb:b2:
ac:a4:33:06:64:53:50:5c:5e:0b:fc:f0:5c:d7:f9:
b7:3a:9f:3c:2e:5a:b5:43:38:4e:0f:7a:d4:0e:86:
e2:c5:e3:b8:db:8c:3d:47:3a:00:a9:9d:6f:ab:39:
c7:f0:b0:78:df:4f:0a:b0:8f:ed:59:bf:ba:2a:4b:
4f:26:09:a8:bc:e9:24:cb:57:b0:5a:cc:1f:5f:17:
96:9e:06:a7:d8:39:f4:ed:e8:68:be:15:0f:cb:1d:
b4:3d:84:fc:86:cb:a8:58:ce:2d:f6:6f:62:f0:53:
32:b8:8b:9d:b7:4f:ac:b0:7b:ce:1e:04:e5:d8:30:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:0A:FA:0F:20:7E:82:24:22:41:FF:08:99:4B:A1:DA:9B:30:F1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208680.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2f0::-2a06:a005:33f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:b4:49:28:86:47:ac:79:a9:37:03:56:ed:dd:70:e2:2c:ed:
a7:71:7d:33:58:1f:7b:26:fe:14:88:5c:1c:26:bb:89:32:b3:
72:48:c3:ac:6f:c3:b7:a0:a3:4f:79:b4:a8:74:61:55:6d:04:
82:8c:fc:06:1f:52:eb:b3:74:85:2a:96:6a:2d:95:ea:c5:50:
60:3b:8a:c8:11:9b:1e:95:bc:29:e6:d5:77:dd:ee:10:77:de:
58:aa:8d:a9:0d:cb:81:04:6c:20:5f:f5:a7:6e:19:50:fc:b2:
1c:3e:45:17:4e:32:8d:bb:34:2e:bf:77:59:1d:12:c6:f9:f0:
4c:e8:14:5d:a4:f6:1a:29:90:54:2c:a4:f9:11:24:c1:4a:a9:
a5:da:20:56:14:0a:37:2a:c3:f5:07:cb:b9:fa:f2:5d:67:ee:
f7:b8:d7:cd:55:c3:62:8f:d8:63:c1:37:47:ed:46:c5:3f:ec:
82:36:df:5e:a7:95:ea:55:43:0a:e6:ef:ae:31:ec:89:bc:ff:
98:55:12:79:01:61:8f:33:0a:e4:b3:32:d2:45:fb:25:75:c9:
fc:df:fc:3c:79:80:72:dc:da:63:1b:a9:65:96:38:08:63:10:
69:88:d0:8b:f1:5a:49:74:b3:2e:2a:f2:e1:8b:17:36:df:7b:
bf:4f:24:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUOCb5h65VJfULLRvE1USHdJt38Q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjRaFw0yMzEyMzEyMzU5MjRaMDMxMTAvBgNV
BAMTKDUyNzgwQUZBMEYyMDdFODIyNDIyNDFGRjA4OTk0QkExREE5QjMwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNlgfWAlxdKU4pGFaGmPvMj16
G24ndzrQr6iEK4RadBTPfLtbslyFH5XCJDtrzY1/A4argO/T6lMbPia5jgROM/dl
rkCfWnyEwbs3/l5sYWD3HPGZTu/sjz2SBeP7+v8P5ztH1xKw8GFsG0G9m/xorqd4
gO1c7ekFVrQpzwZQwiT0nqO7sqykMwZkU1BcXgv88FzX+bc6nzwuWrVDOE4PetQO
huLF47jbjD1HOgCpnW+rOcfwsHjfTwqwj+1Zv7oqS08mCai86STLV7BazB9fF5ae
BqfYOfTt6Gi+FQ/LHbQ9hPyGy6hYzi32b2LwUzK4i523T6ywe84eBOXYMPY/AgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUUngK+g8gfoIkIkH/CJlLodqbMPEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA4NjgwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQq
BqAFAvADBwYqBqAFAwAwDQYJKoZIhvcNAQELBQADggEBABy0SSiGR6x5qTcDVu3d
cOIs7adxfTNYH3sm/hSIXBwmu4kys3JIw6xvw7ego095tKh0YVVtBIKM/AYfUuuz
dIUqlmotlerFUGA7isgRmx6VvCnm1Xfd7hB33liqjakNy4EEbCBf9aduGVD8shw+
RRdOMo27NC6/d1kdEsb58EzoFF2k9hopkFQspPkRJMFKqaXaIFYUCjcqw/UHy7n6
8l1n7ve4181Vw2KP2GPBN0ftRsU/7II2316nlepVQwrm764x7Im8/5hVEnkBYY8z
CuSzMtJF+yV1yfzf/Dx5gHLc2mMbqWWWOAhjEGmI0IvxWkl0sy4q8uGLFzbfe79P
JBM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org