Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209165.roa
File: AS209165.roa (raw, json)
Hash identifier: CohZd/jntCe3/3jfg8NuyqP/4G3ZHAnYA3KUgGrlf5g=
Subject key identifier: BB:B9:88:4B:A0:45:A9:8F:26:9E:69:F6:CB:4F:33:B9:4C:00:DE:BB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1382B7B31C380F69A88724836401E83852BEDC34
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209165.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 209165
IP address blocks: 2a06:a005:26cc::/47 maxlen: 48
2a06:a005:26ce::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:82:b7:b3:1c:38:0f:69:a8:87:24:83:64:01:e8:38:52:be:dc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=BBB9884BA045A98F269E69F6CB4F33B94C00DEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:90:ba:af:30:94:8d:80:0a:13:32:22:b3:
84:07:96:5a:92:c9:bc:96:c4:c0:3d:58:e5:eb:d8:
65:6a:51:21:21:16:3f:8c:47:88:bd:fc:21:92:f4:
14:5b:0b:13:45:9c:e7:2c:b3:cd:d3:e3:dc:8b:1a:
c9:d3:aa:bf:51:af:cd:e5:5a:a3:63:8e:4f:60:48:
f6:77:17:79:a6:84:59:2b:90:db:3e:ca:b7:90:ab:
ac:d2:18:06:98:9f:7d:ec:18:c3:f5:9d:a7:12:8f:
d5:1f:29:ec:25:b0:19:18:3c:18:16:ca:fe:e2:7d:
9a:3a:e7:33:63:50:df:f5:c8:2b:c5:c5:88:0b:a6:
84:74:8a:58:a0:2c:62:42:bd:5b:d6:97:9c:26:d3:
ab:4b:03:59:30:68:c2:29:0b:01:14:3a:53:97:1d:
24:64:7c:14:9f:17:b5:58:e7:cb:b5:ef:0d:e0:65:
cf:7c:91:01:92:1d:00:32:25:b5:28:3e:ea:cd:66:
8c:60:22:92:bd:32:6b:8d:51:79:59:57:71:15:61:
1d:29:3a:12:e7:e3:7d:ce:2c:1a:5d:2f:a2:72:cf:
07:5a:85:f3:48:3c:26:0d:b6:27:58:5b:b9:f7:50:
0f:b1:4e:2f:85:0c:4d:e8:34:6b:83:24:4e:1b:f3:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:88:4B:A0:45:A9:8F:26:9E:69:F6:CB:4F:33:B9:4C:00:DE:BB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26cc::/46
Signature Algorithm: sha256WithRSAEncryption
9b:10:c9:01:73:52:c4:f2:90:36:75:04:21:43:6b:d4:5c:d4:
a9:36:49:f8:f2:2e:92:2a:1c:30:f0:f7:54:5f:8e:bd:13:e0:
b6:24:fe:14:b0:c6:99:9a:0e:8a:f5:56:03:f3:8c:02:fd:9b:
7d:0f:31:1a:8b:8e:c0:ba:2e:cd:f0:b1:d9:dc:20:ea:dd:c4:
d2:d2:9b:84:5f:92:7d:cb:5c:ce:82:51:e0:b5:78:bb:67:25:
8e:5e:5d:88:bb:6d:e6:77:93:18:8b:ba:9a:c8:9b:2f:42:41:
b4:4d:c9:f6:9d:32:fb:4e:53:22:e9:21:08:26:2a:32:0d:55:
21:ad:c5:e6:7f:d1:90:f6:42:f7:96:5b:14:ae:65:20:3a:dd:
f1:49:3f:30:e4:ad:33:93:3d:c8:7a:0c:da:1c:e9:f2:2b:64:
d2:3a:f6:40:89:97:5d:f3:5b:09:19:7e:d2:d8:95:f4:42:e7:
23:bc:51:ac:a3:33:4f:19:5b:4e:aa:fa:30:b7:fb:7e:3a:04:
56:54:3c:0e:87:68:c1:01:7d:bf:da:03:1e:cb:d2:ec:a3:dc:
58:4a:72:42:35:e4:7d:45:74:93:fd:b0:a5:9c:52:a4:7c:02:
78:dc:e4:8b:4a:8c:9b:45:93:2a:90:23:8c:8b:84:36:d1:9d:
af:dd:3b:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUE4K3sxw4D2mohySDZAHoOFK+3DQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTJaFw0yMzEyMzEyMzU5MTJaMDMxMTAvBgNV
BAMTKEJCQjk4ODRCQTA0NUE5OEYyNjlFNjlGNkNCNEYzM0I5NEMwMERFQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8pC6rzCUjYAKEzIis4QHllqS
ybyWxMA9WOXr2GVqUSEhFj+MR4i9/CGS9BRbCxNFnOcss83T49yLGsnTqr9Rr83l
WqNjjk9gSPZ3F3mmhFkrkNs+yreQq6zSGAaYn33sGMP1nacSj9UfKewlsBkYPBgW
yv7ifZo65zNjUN/1yCvFxYgLpoR0iligLGJCvVvWl5wm06tLA1kwaMIpCwEUOlOX
HSRkfBSfF7VY58u17w3gZc98kQGSHQAyJbUoPurNZoxgIpK9MmuNUXlZV3EVYR0p
OhLn433OLBpdL6JyzwdahfNIPCYNtidYW7n3UA+xTi+FDE3oNGuDJE4b87vlAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUu7mIS6BFqY8mnmn2y08zuUwA3rswHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA5MTY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgag
BSbMMA0GCSqGSIb3DQEBCwUAA4IBAQCbEMkBc1LE8pA2dQQhQ2vUXNSpNkn48i6S
Khww8PdUX469E+C2JP4UsMaZmg6K9VYD84wC/Zt9DzEai47Aui7N8LHZ3CDq3cTS
0puEX5J9y1zOglHgtXi7ZyWOXl2Iu23md5MYi7qayJsvQkG0Tcn2nTL7TlMi6SEI
JioyDVUhrcXmf9GQ9kL3llsUrmUgOt3xST8w5K0zkz3IegzaHOnyK2TSOvZAiZdd
81sJGX7S2JX0QucjvFGsozNPGVtOqvowt/t+OgRWVDwOh2jBAX2/2gMey9Lso9xY
SnJCNeR9RXST/bClnFKkfAJ43OSLSoybRZMqkCOMi4Q20Z2v3TuV
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:31 2025 by rpki-client