Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204902.roa
File: AS204902.roa (raw, json)
Hash identifier: f0J1AvCcrWsCAfTZmRoHvjC2pV85ChnwM8CBxRUuscg=
Subject key identifier: 6E:4F:FC:A2:AA:69:47:0F:9C:01:26:95:9E:D0:8D:D3:94:48:98:60
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 1DC76628816A27731E7D46D8CCEFCA42321C1A99
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204902.roa
Signing time: Wed 10 Jul 2024 17:49:25 +0000
ROA not before: Wed 10 Jul 2024 17:44:25 +0000
ROA not after: Wed 09 Jul 2025 17:49:25 +0000
asID: 204902
IP address blocks: 2a0f:85c1:900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c7:66:28:81:6a:27:73:1e:7d:46:d8:cc:ef:ca:42:32:1c:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jul 10 17:44:25 2024 GMT
Not After : Jul 9 17:49:25 2025 GMT
Subject: CN=6E4FFCA2AA69470F9C0126959ED08DD394489860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:66:ac:b3:8e:3b:76:ab:f7:17:11:30:b5:
2e:a8:7a:eb:29:9c:16:bb:42:46:86:5b:58:2a:3c:
3b:e9:51:92:ae:22:06:50:40:e4:db:18:1d:38:79:
34:99:ca:a5:a8:a1:06:07:92:e7:7f:be:46:d7:ee:
07:11:4e:4f:22:99:e0:1f:f5:4a:b0:fd:00:04:3f:
60:63:ae:b7:a3:43:f8:81:37:69:5a:0e:b5:07:88:
14:6f:60:d7:2f:9d:c6:f9:62:e0:30:a5:5e:63:28:
94:68:cb:b9:8f:b5:b8:27:a8:72:4b:43:09:e4:c5:
62:19:3d:d9:62:fd:56:6f:b9:ef:52:b0:d3:b5:ac:
39:15:e2:74:58:00:3e:c4:8b:d5:a5:77:76:75:24:
d5:9c:68:8a:a8:2c:7a:28:31:a9:de:9e:16:de:cb:
bf:74:6d:b6:03:51:03:94:f6:95:75:67:a9:14:f5:
5b:e7:a3:d0:6d:2a:d0:24:57:8d:21:f6:26:62:e7:
82:d6:59:a8:1d:d7:79:e5:41:31:db:a4:c5:cb:68:
dc:0a:6c:40:c1:22:85:3b:08:03:67:74:6f:c7:41:
fc:76:a1:6a:15:28:12:26:bc:c9:3d:ea:92:1e:b7:
02:3f:d6:72:b9:b0:6a:8a:f8:59:ae:4e:cf:1d:67:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:FC:A2:AA:69:47:0F:9C:01:26:95:9E:D0:8D:D3:94:48:98:60
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS204902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:900::/40
Signature Algorithm: sha256WithRSAEncryption
39:ec:74:ca:d0:39:25:14:c2:55:a1:cc:24:ea:70:7e:b9:d1:
cb:5a:18:f6:31:38:26:78:12:0f:a3:b9:bb:1f:e7:14:19:73:
6d:de:c3:cc:a5:b6:30:d8:33:c4:73:02:91:95:8f:cd:be:b8:
06:f4:de:3b:a9:07:e7:2f:4b:e4:4a:c1:b5:3a:95:e7:ff:41:
c6:95:59:b8:c1:0b:b0:87:fa:23:69:40:38:cb:96:16:ba:d0:
43:e0:2b:f3:92:9d:ed:9c:0f:f2:94:76:70:d0:35:45:ca:e5:
a1:40:8b:6b:ab:a0:d3:f1:17:09:8b:1b:b3:80:41:e6:5e:b1:
8c:42:6f:a3:45:1c:40:2f:8d:0a:e1:f8:3b:52:d4:a5:37:2f:
d1:d9:91:e5:12:54:a9:b4:4e:1c:31:c7:3c:d5:24:e5:d8:90:
49:a7:2d:89:b8:fa:3b:bd:54:3e:51:53:87:a9:b0:44:e6:d7:
6f:80:d1:21:d9:e1:20:04:3d:67:f7:af:d2:c4:42:c2:13:3f:
54:95:07:81:04:67:5f:e6:7a:41:16:60:d3:41:03:d0:5b:fc:
3f:f7:25:4a:af:19:21:f7:df:f9:60:85:f4:d1:0c:12:2e:d6:
4d:a9:8f:54:aa:a8:e3:ea:19:3a:aa:b4:01:80:ed:63:cc:94:
a8:1d:de:02
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUHcdmKIFqJ3MefUbYzO/KQjIcGpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA3MTAxNzQ0MjVaFw0yNTA3MDkxNzQ5MjVaMDMxMTAvBgNV
BAMTKDZFNEZGQ0EyQUE2OTQ3MEY5QzAxMjY5NTlFRDA4REQzOTQ0ODk4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlS2ass447dqv3FxEwtS6oeusp
nBa7QkaGW1gqPDvpUZKuIgZQQOTbGB04eTSZyqWooQYHkud/vkbX7gcRTk8imeAf
9Uqw/QAEP2BjrrejQ/iBN2laDrUHiBRvYNcvncb5YuAwpV5jKJRoy7mPtbgnqHJL
QwnkxWIZPdli/VZvue9SsNO1rDkV4nRYAD7Ei9Wld3Z1JNWcaIqoLHooManenhbe
y790bbYDUQOU9pV1Z6kU9Vvno9BtKtAkV40h9iZi54LWWagd13nlQTHbpMXLaNwK
bEDBIoU7CANndG/HQfx2oWoVKBImvMk96pIetwI/1nK5sGqK+FmuTs8dZyGBAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUbk/8oqppRw+cASaVntCN05RImGAwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMjA0OTAyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+F
wQkwDQYJKoZIhvcNAQELBQADggEBADnsdMrQOSUUwlWhzCTqcH650ctaGPYxOCZ4
Eg+jubsf5xQZc23ew8yltjDYM8RzApGVj82+uAb03jupB+cvS+RKwbU6lef/QcaV
WbjBC7CH+iNpQDjLlha60EPgK/OSne2cD/KUdnDQNUXK5aFAi2uroNPxFwmLG7OA
QeZesYxCb6NFHEAvjQrh+DtS1KU3L9HZkeUSVKm0ThwxxzzVJOXYkEmnLYm4+ju9
VD5RU4epsETm12+A0SHZ4SAEPWf3r9LEQsITP1SVB4EEZ1/mekEWYNNBA9Bb/D/3
JUqvGSH33/lghfTRDBIu1k2pj1SqqOPqGTqqtAGA7WPMlKgd3gI=
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:04 2024 by rpki-client on console-ams.rpki-client.org