Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209556.roa
File: AS209556.roa (raw, json)
Hash identifier: EsC3foxMZ3ZgUS+Pky7OHFqThfLp8vl6VCp2kcxAWoQ=
Subject key identifier: 80:9A:32:BE:81:B7:16:F3:D6:09:B3:FA:C1:B3:CC:D1:8B:1C:3E:AD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 09A53DC0CDEBFBF6640213EC9C1A74A1713D30C7
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209556.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 209556
IP address blocks: 2a06:a005:a80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a5:3d:c0:cd:eb:fb:f6:64:02:13:ec:9c:1a:74:a1:71:3d:30:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=809A32BE81B716F3D609B3FAC1B3CCD18B1C3EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:df:02:f5:03:31:df:4c:9e:bd:3c:8a:ab:
3b:4a:1a:d4:17:9b:da:ab:7e:dd:a5:02:eb:07:7a:
7e:b5:37:b2:04:2f:7e:5f:c2:4e:93:d7:4a:ff:7a:
72:fa:cc:de:ac:c1:93:b3:d9:43:b9:43:69:4f:43:
9a:fa:de:1a:97:6e:e2:65:86:e2:16:ca:95:0a:85:
d3:1e:0e:53:54:a1:ab:48:9a:e7:6a:95:9f:61:56:
3b:47:76:21:b9:83:57:1e:25:b2:cc:8b:e6:ae:f8:
73:29:75:0a:d0:66:63:ce:54:6d:10:41:6a:78:02:
46:bf:54:b7:54:0b:1b:88:a9:41:ec:37:4c:96:ca:
6e:de:77:ca:4c:4e:c4:7e:dd:10:ab:26:1d:c4:a2:
64:f2:42:2d:73:29:c4:c9:24:a5:09:de:78:bb:88:
29:ab:4e:43:28:a7:2f:49:48:78:bb:9b:b9:c0:51:
34:ec:8d:aa:04:cf:88:70:dc:b0:29:8f:37:56:3f:
5a:a8:19:5d:76:2a:34:f9:f2:bd:11:44:5b:75:a5:
88:3d:2a:d9:dd:fc:a8:26:be:b2:01:64:95:c8:11:
e4:3b:20:ce:ce:63:7a:b8:ef:86:52:f5:1b:58:e4:
75:da:53:1f:0e:2e:c4:35:c5:7d:a3:94:07:0f:65:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:32:BE:81:B7:16:F3:D6:09:B3:FA:C1:B3:CC:D1:8B:1C:3E:AD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a80::/44
Signature Algorithm: sha256WithRSAEncryption
11:1d:14:9a:8e:d3:90:2a:fc:5e:3d:b1:d3:f9:e3:94:6e:fa:
68:fb:ad:2e:63:c5:c8:34:64:8c:4a:77:56:84:bd:7b:4d:ad:
74:39:b6:47:ef:62:a6:78:3c:78:4a:b8:92:5e:58:8d:12:a3:
b3:4e:e9:28:8d:b1:c6:54:ee:13:a4:2d:c8:aa:a3:d8:96:89:
b3:9f:ad:a1:57:f1:15:8b:6a:c3:3c:7e:88:64:7f:d2:40:14:
20:18:8c:03:53:f7:98:92:23:8b:f3:00:c3:5c:07:70:fb:55:
1f:01:2c:3b:46:de:df:e8:f3:e8:fa:fb:5f:b6:b6:74:47:91:
6b:47:d0:7a:1c:e7:dd:47:42:de:93:90:f2:b5:c6:6a:91:1d:
63:b3:c0:09:4c:b6:0c:f8:e3:12:c2:3e:b1:d6:14:06:96:8d:
1b:02:7b:4a:55:3b:71:40:65:d3:58:00:7b:bd:3a:76:1a:b8:
29:2c:23:00:1f:c3:04:d4:4f:32:69:56:d8:a2:04:14:6a:77:
1f:5c:ca:4e:b9:df:78:4a:8f:e0:ed:b9:e0:02:3d:e8:a6:24:
dd:0c:b0:92:e4:0c:4b:bc:d8:e8:a7:3c:60:4f:14:7c:65:53:
42:95:3f:ed:c2:e9:27:42:f0:c2:b7:34:36:d0:92:fb:81:e3:
b1:ef:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org