Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208985.roa
File: AS208985.roa (raw, json)
Hash identifier: RTRzsEaParF+nmM+26bTLEdnWK3+Rtityaf5Dsbc6qk=
Subject key identifier: C6:0B:DD:96:7B:F9:2E:11:7E:B9:C5:EF:7C:54:24:CA:49:A1:3E:F7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4AE052D030A14C7EBDD1EAAAE5286885E87F9E7A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208985.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 208985
IP address blocks: 2a06:a005:710::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e0:52:d0:30:a1:4c:7e:bd:d1:ea:aa:e5:28:68:85:e8:7f:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=C60BDD967BF92E117EB9C5EF7C5424CA49A13EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:be:b9:4d:56:7b:a1:85:89:98:8b:96:ca:
55:89:f1:d6:bf:da:d4:a3:2c:87:6c:07:28:f2:f3:
b5:e3:55:d1:82:6d:53:2e:74:f1:2f:53:00:ed:39:
87:a7:13:ff:ae:1f:9f:ab:67:23:f2:0e:f7:22:63:
6c:85:9d:74:4b:24:81:85:42:46:d2:35:ef:f2:0a:
a6:ea:39:93:5b:0a:6c:19:2c:6b:e2:6a:4a:14:ba:
d7:02:1b:31:6b:8b:d2:d2:e8:50:11:03:43:5d:53:
bf:b3:10:27:2b:8e:cb:f5:be:8d:92:35:10:f8:c4:
79:fc:4a:09:cb:0b:0f:a3:2e:34:d8:f0:1a:82:6d:
e6:e6:d4:20:2e:1d:8c:4d:e2:34:ae:0f:b1:41:ca:
0d:74:fd:38:57:9e:64:d3:4c:4a:7e:33:3e:91:bd:
8a:b3:72:37:be:92:d9:4c:4b:f5:1e:d9:8a:b5:d0:
d5:78:26:f7:96:77:e7:69:05:1d:e5:40:16:18:41:
ba:0b:d4:83:63:40:6c:fb:9c:82:9d:49:f6:ff:31:
f9:72:6e:5c:6b:68:8c:00:29:6b:4c:6a:58:6d:7d:
5f:bd:60:26:19:83:0d:86:88:c2:97:a6:b6:b9:82:
0a:87:66:34:e1:ef:7d:49:4c:a3:72:88:44:8f:af:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:DD:96:7B:F9:2E:11:7E:B9:C5:EF:7C:54:24:CA:49:A1:3E:F7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:710::/44
Signature Algorithm: sha256WithRSAEncryption
42:7c:8e:e6:43:e7:29:90:db:f2:1b:02:35:40:2d:a4:1b:26:
a7:08:c0:c3:8c:52:ea:82:ae:68:77:aa:5b:fb:55:34:aa:0d:
0e:76:4b:89:7a:16:38:78:73:8e:63:59:8a:86:b8:87:3a:c3:
d7:1e:22:8e:72:59:af:3b:e2:00:3c:1b:f8:3e:61:09:78:b5:
01:1a:97:08:38:a4:bc:97:09:8a:24:a0:c4:54:ce:41:46:47:
35:74:46:32:4a:7a:a1:b5:1d:a9:af:82:04:a4:50:2d:69:15:
47:18:32:46:70:93:16:8a:26:dd:86:19:24:69:64:b4:d4:7c:
94:bf:4c:26:7c:bd:94:e1:2f:d5:00:90:e0:6e:fd:3d:30:3e:
71:4a:e2:92:1a:71:f7:ba:b4:74:5c:24:c6:cc:b5:33:49:cf:
ae:4c:14:a5:ac:c7:f5:dc:bc:10:7b:7b:59:06:2f:79:87:9e:
48:19:70:c3:e3:ec:75:3e:9e:58:3d:83:8c:01:24:a5:33:d3:
06:8c:03:ad:e0:98:1a:3a:ff:99:78:54:2d:4a:61:71:22:29:
fd:9c:bd:cc:88:ae:7a:c3:56:de:eb:05:f2:53:67:36:f9:46:
da:8e:36:33:b1:fd:f5:cb:9c:0e:2b:44:ab:12:f1:00:b0:e5:
44:7c:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org