Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209294.roa
File: AS209294.roa (raw, json)
Hash identifier: tzuSz+k5bCan96RZFdqlCqWFy05uSk1qZtJkW41r3Zg=
Subject key identifier: B6:8C:6E:BD:00:54:76:F9:78:58:56:CD:AC:09:A9:B5:1B:6B:20:3C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 56513A367656585896C82628E9F482D8A64B58DD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209294.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 209294
IP address blocks: 2a06:a005:17e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:51:3a:36:76:56:58:58:96:c8:26:28:e9:f4:82:d8:a6:4b:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=B68C6EBD005476F9785856CDAC09A9B51B6B203C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:5b:30:ba:af:d4:4f:7f:9b:ee:70:d8:f2:
53:19:b8:8c:ca:9d:b5:d0:5c:48:e6:3c:94:fc:75:
6b:80:8f:e0:08:93:cf:ed:0e:75:ec:bd:c2:67:d1:
1a:e8:d2:2c:15:d0:f4:8c:19:f7:05:ab:2d:40:1f:
4c:b1:09:a4:1a:c5:69:52:38:05:b5:e6:92:a6:5e:
9c:26:e2:f3:17:16:d2:55:a4:ce:aa:53:a1:92:28:
d7:56:73:5a:97:3e:91:59:1c:05:89:7c:ca:7c:43:
c6:eb:8c:1c:3b:4b:99:0a:30:0d:1d:ba:d9:ec:cd:
54:8f:e4:5e:86:c3:ad:eb:06:ba:81:19:62:75:75:
48:64:7a:2e:5e:9d:c9:0c:0a:d0:cf:46:5b:30:84:
2f:79:84:74:21:aa:ee:b5:b3:37:38:1c:d0:ea:8f:
d8:77:3e:e5:11:f6:0c:e0:90:2c:fa:72:bc:f9:98:
ec:73:fa:f3:af:a8:fb:eb:93:ce:1a:04:02:8d:95:
a3:eb:9e:4b:a8:98:f2:c7:fa:1e:0d:1c:d4:cb:2d:
c7:09:72:fc:9f:f6:87:61:a7:af:19:b4:de:7e:3a:
9e:55:47:af:0c:2c:a8:f3:19:2c:ed:38:7d:1d:a1:
da:ee:bd:89:ea:48:0c:e3:de:a3:49:0a:0e:73:23:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:6E:BD:00:54:76:F9:78:58:56:CD:AC:09:A9:B5:1B:6B:20:3C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:b3:50:88:5a:97:7c:37:f6:d6:f7:37:7d:6a:94:6b:b9:66:
44:2e:a2:a9:b6:8c:5f:78:fd:79:fe:23:09:e6:c4:5b:b5:db:
93:23:05:0e:99:50:45:2a:1c:1a:74:3f:41:56:d8:a2:78:cf:
97:ab:1c:b3:b8:dd:a5:5a:35:83:67:3f:c4:3d:c9:cf:c2:ab:
44:9c:09:7e:9f:7a:32:91:68:a9:94:8a:48:9f:ba:45:c6:1a:
ab:21:dc:8c:ad:66:09:9c:ee:03:73:22:ad:d0:32:02:ec:14:
6d:3f:68:bf:5c:86:02:c8:a3:4f:f1:08:51:fd:5a:a1:a5:cc:
4d:7a:3c:b2:90:e6:ef:ee:f4:a5:c4:b0:77:1b:16:41:2f:53:
76:43:72:98:fd:df:a2:5a:f9:d8:c8:1f:b1:39:f8:1d:39:3b:
b5:a4:ba:1a:b5:b2:68:48:d0:20:ef:db:19:0b:4f:d0:a2:f0:
22:73:1e:47:b0:7d:57:32:c7:8d:48:6f:f3:3e:a4:0e:25:f8:
7c:24:f4:60:63:ba:8e:58:e5:21:43:14:df:2a:0b:34:6a:0e:
22:ce:b9:90:10:56:7b:ad:fd:09:45:0c:3a:89:ef:f8:53:ce:
82:70:82:4a:dc:c1:c0:dd:23:03:63:fc:c4:05:bd:25:e7:4c:
54:df:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org