Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: CPgBIIbj0LKasFKd6rGreNp/ykuSZ8OFE0XJ/cand2I=
Subject key identifier: 6C:C3:6B:C1:4A:31:64:16:D2:4C:D4:25:5C:F8:CD:73:85:BA:4A:16
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 17C60DE40B80D41B012A9F6659F0FDA82F3F8D2D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208690.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 208690
IP address blocks: 2a06:a005:2050::/44 maxlen: 48
2a06:a005:2060::/44 maxlen: 48
2a06:a005:2070::/44 maxlen: 48
2a06:a005:2080::/44 maxlen: 48
2a06:a005:24e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c6:0d:e4:0b:80:d4:1b:01:2a:9f:66:59:f0:fd:a8:2f:3f:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=6CC36BC14A316416D24CD4255CF8CD7385BA4A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:b9:09:1a:82:8c:28:90:14:88:de:41:e2:
59:69:f0:af:ee:66:7b:f9:02:d3:12:98:58:30:c7:
66:32:75:0d:a8:75:d0:80:8b:d1:a6:a6:68:68:1b:
34:21:7b:be:54:fe:bf:83:6f:65:8e:33:05:a6:7e:
5f:00:10:f6:70:5e:bc:69:2a:fc:5a:b4:55:bc:14:
92:11:8f:df:01:94:c3:bb:fd:2f:61:3a:d8:af:0e:
e3:d4:8d:42:99:15:da:45:b8:50:2c:2f:7a:99:6b:
4a:e8:20:9a:a5:e5:06:30:09:42:63:0e:87:c8:a3:
4d:4d:63:1f:1b:76:7d:b9:0d:a2:1b:2f:34:f6:21:
e7:54:c1:bd:6a:3c:49:e5:57:ca:90:d9:33:c5:94:
e7:46:ed:05:0d:65:1f:70:bf:c8:25:ed:f1:44:be:
14:3f:be:1e:19:1a:ab:9a:ff:6e:9e:22:16:f5:a1:
a9:ad:50:a3:89:b9:6b:2b:68:32:64:e5:9a:aa:9d:
8c:0c:6c:06:b2:d7:e2:7f:d2:58:1a:4a:72:67:85:
95:ca:be:3f:48:61:1c:46:5e:9c:f4:13:8c:17:69:
00:8b:e2:93:8d:1c:3d:5e:f8:50:a3:a2:c3:47:ff:
50:62:b2:2c:13:01:a2:c2:d5:a8:06:e3:6a:85:30:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:6B:C1:4A:31:64:16:D2:4C:D4:25:5C:F8:CD:73:85:BA:4A:16
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2050::-2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
2a06:a005:24e0::/44
Signature Algorithm: sha256WithRSAEncryption
39:09:27:0a:57:2f:ae:0c:44:dd:35:f4:d6:d5:34:9b:d3:72:
4f:b9:56:d3:5a:27:0c:a4:d7:b9:18:f8:2e:f8:82:64:44:9a:
ff:3b:48:6d:54:ad:7b:bb:63:1a:fe:aa:98:94:c4:43:1f:1c:
bd:0e:cf:2a:f9:53:68:1d:9e:ec:00:1a:66:57:61:f0:9e:23:
db:12:ee:7f:7f:f0:b8:5b:4a:83:01:ab:81:51:17:51:64:6f:
c4:1d:7b:03:b2:1a:43:f9:92:ae:1f:f8:15:b6:37:72:cb:10:
b4:6d:51:1f:2e:22:30:4b:1d:10:ca:c0:36:56:59:df:09:b1:
d2:89:16:5e:0a:d3:49:29:ae:54:a4:c5:ab:f3:48:64:74:6a:
80:d7:ff:d4:62:55:2e:14:e6:62:18:1e:1e:f1:14:82:0a:ff:
25:dc:35:d3:87:2d:26:90:0e:45:48:75:3a:ed:54:c0:a9:eb:
c8:95:62:05:29:5f:3d:80:31:cd:f8:61:54:37:8b:66:9b:ce:
b6:1e:d2:b3:22:b0:67:fc:a1:92:b0:2e:6d:16:01:0b:d2:9a:
5c:41:53:07:05:39:0c:1b:45:f7:7e:31:01:2b:c2:48:6e:b6:
f1:88:91:bb:91:3e:01:5c:80:6e:9e:b6:d6:37:7f:c8:a7:4a:
11:b2:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org