Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208223.roa
File: AS208223.roa (raw, json)
Hash identifier: X1fDMpN1z8QJ/Y1FNnZxj4jiHJeFGE8g4RNcVLLIvsw=
Subject key identifier: 99:7A:0D:F8:46:60:CB:3E:98:8C:80:20:55:17:1F:36:30:A8:46:26
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7C7891A1FF09655C28BA4C5AEF94F909FE26D1DF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208223.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 208223
IP address blocks: 2a06:a005:4de::/48 maxlen: 48
2a06:a005:770::/44 maxlen: 48
2a06:a005:890::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:78:91:a1:ff:09:65:5c:28:ba:4c:5a:ef:94:f9:09:fe:26:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=997A0DF84660CB3E988C802055171F3630A84626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:33:6d:a7:a6:bc:dc:56:2d:32:fd:dd:ab:
cf:c2:a0:10:b4:2e:ea:02:1c:4b:82:6c:e8:a5:f3:
fd:7d:38:0a:d4:36:9e:c2:dd:1c:51:47:b5:ce:4a:
af:89:0f:cc:37:75:a9:2f:8a:62:59:e4:b0:92:74:
30:59:61:8e:10:5f:d8:b0:0c:f3:7e:96:01:97:10:
15:c1:09:37:17:f5:26:f8:70:0e:7c:19:cf:33:ed:
d4:f1:31:01:3f:72:a0:2c:11:e8:cf:5a:c7:c3:42:
41:5d:7a:fa:d8:d4:8f:e1:64:eb:79:e2:6e:18:aa:
79:be:db:d5:6f:52:93:b3:46:a5:49:09:98:b4:16:
82:79:10:1a:91:a3:90:60:18:42:98:54:33:b8:31:
63:87:ca:ec:95:58:72:d6:3c:9b:3a:e1:d0:6f:63:
39:74:1e:16:f9:a0:db:fe:6f:6e:53:20:30:1d:ad:
d0:f1:da:a0:c8:c5:8b:f5:27:a6:17:d5:ec:77:a8:
f0:3a:67:25:b4:c8:07:6e:43:2a:a8:66:de:c3:05:
95:37:1c:1b:fd:ef:92:c4:8e:3a:ce:5b:4e:b8:76:
28:e5:e9:c6:72:c9:8f:36:3e:6a:b0:e1:fb:7a:dc:
e4:25:04:8d:7c:ba:97:d4:99:e7:41:86:c1:e4:f3:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:0D:F8:46:60:CB:3E:98:8C:80:20:55:17:1F:36:30:A8:46:26
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS208223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4de::/48
2a06:a005:770::/44
2a06:a005:890::/44
Signature Algorithm: sha256WithRSAEncryption
6f:9a:ea:c8:5b:c4:48:72:73:41:b3:dc:96:3f:e2:94:b4:da:
e7:15:b1:eb:9e:ba:01:8b:a7:cf:a0:66:42:72:25:8b:79:5e:
7f:b6:a1:f9:7f:80:6c:65:16:bd:ae:b2:18:7c:0c:36:46:52:
ea:b4:70:ae:fd:ec:02:12:41:f4:31:bb:ec:ab:96:91:df:99:
a3:f8:3c:38:a5:ab:39:dd:38:7b:eb:89:bf:db:7a:63:fb:50:
e6:40:ee:15:60:08:a7:ce:00:a8:d7:f4:a0:f1:31:76:ef:e6:
fb:be:64:4f:70:16:0f:10:e4:ea:29:0e:cb:3a:a4:bf:8b:2e:
59:cf:ff:7d:a3:42:3c:a7:05:6a:51:0a:59:0b:12:a9:4f:83:
33:64:43:c2:ea:69:0f:49:84:e0:ad:ed:42:8b:fa:4b:16:12:
a2:6a:0e:1f:ad:c9:76:61:fd:4a:1f:54:5a:80:55:53:ba:65:
57:82:4e:e9:41:d7:76:4b:2f:eb:a5:96:e2:c8:16:21:bc:06:
ab:60:99:ad:4c:41:5a:4f:d0:f4:67:d8:1a:66:51:1f:22:18:
07:5f:f9:66:af:8b:79:fa:9a:32:21:3f:ac:ed:50:41:68:77:
ea:5d:f1:a8:5b:55:ed:bd:9f:7d:e6:e6:99:c7:6b:27:70:1e:
a8:5b:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:46:27 2025 by rpki-client