Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa
File: AS205848.roa (raw, json)
Hash identifier: y52LjfiIVxbSR/O/TM0ftCK3/oMECunU6TKstDGTA0E=
Subject key identifier: 80:B2:1B:65:CB:50:37:B2:1D:1D:83:BF:40:12:2C:F0:AC:4F:D5:C7
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 19926F707CB0B0B638DF6DB959E84A03282623D4
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa
Signing time: Tue 20 Aug 2024 02:31:57 +0000
ROA not before: Tue 20 Aug 2024 02:26:57 +0000
ROA not after: Tue 19 Aug 2025 02:31:57 +0000
asID: 205848
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:92:6f:70:7c:b0:b0:b6:38:df:6d:b9:59:e8:4a:03:28:26:23:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Aug 20 02:26:57 2024 GMT
Not After : Aug 19 02:31:57 2025 GMT
Subject: CN=80B21B65CB5037B21D1D83BF40122CF0AC4FD5C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:cf:16:77:99:3f:0d:95:eb:fc:89:fa:ce:
49:03:ea:38:d1:21:87:aa:6a:96:8d:a7:7e:bc:c2:
60:e2:c4:69:f3:da:d7:2d:96:25:a5:86:13:76:65:
db:12:7b:39:b0:b2:c5:20:a7:47:7f:74:03:8f:fe:
dc:e3:e7:1b:6f:f3:d4:8b:c8:e0:3b:69:c1:46:02:
cf:ef:04:fe:7e:c6:0d:a2:12:f9:a7:c8:99:e6:23:
81:9f:61:c9:bb:74:1a:97:02:58:a8:6a:55:b7:e1:
d6:f7:da:89:bc:18:65:fc:4d:3f:14:2f:2d:e2:98:
09:cf:3d:1b:4c:b9:3a:19:80:e6:77:27:64:5b:62:
df:ae:08:f1:8d:c3:c8:1e:65:59:1e:5b:a8:f0:86:
ad:ff:e9:81:09:ca:71:e9:bf:b4:7c:ef:1a:90:33:
ca:9a:04:46:ad:36:0b:00:3e:89:c5:77:9f:0a:d9:
5a:a4:b9:e6:0f:9c:73:f0:21:be:6d:94:67:ca:c5:
4d:20:b1:90:f3:71:c4:6b:d3:99:f4:ef:73:57:82:
ac:1b:16:67:55:38:99:55:e4:fc:2d:fb:0e:46:7b:
dc:6e:b2:f9:84:59:cd:ca:91:a2:d8:9f:16:ba:d5:
98:6e:86:aa:26:dd:af:6c:92:23:7b:58:c5:20:ed:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:1B:65:CB:50:37:B2:1D:1D:83:BF:40:12:2C:F0:AC:4F:D5:C7
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
67:a5:43:3a:0d:01:c6:ec:66:be:cb:39:a4:87:dd:88:50:59:
8f:43:d0:6d:3a:d0:98:c4:47:79:62:25:4e:2b:45:17:c0:e3:
10:b7:e4:bc:8a:e3:fc:58:c3:c3:c1:72:e1:b9:32:4e:6d:1b:
32:22:44:7b:cf:28:ac:cb:e4:ed:4f:1c:d5:a7:04:9d:9c:21:
22:e8:97:37:96:2b:8c:c7:05:20:bf:16:49:ab:22:49:e8:da:
f1:7c:0d:9e:05:f8:fb:ec:a2:f3:5f:e2:0e:26:1b:e4:0e:77:
45:0e:82:8b:88:47:19:f2:72:c9:4c:4e:eb:ed:7c:1c:b6:2b:
86:09:74:d1:8e:ab:3d:66:54:ea:42:47:a3:9e:a2:fd:a9:68:
bc:79:c4:45:6c:93:2c:d0:78:ef:af:d5:a5:9f:48:85:e5:8f:
58:74:c5:9b:48:32:f4:cd:44:8d:b9:d6:ed:e0:12:dc:ae:8f:
a9:d5:a0:a5:c9:60:f9:0e:c5:4d:2b:d6:35:ee:ab:75:d0:72:
60:eb:9a:79:4c:97:81:15:3e:0f:9c:1d:10:c1:1a:5e:52:a6:
a7:95:fa:38:cf:b4:7b:6a:f5:8d:78:9e:e3:77:db:d8:6c:d7:
5c:73:fb:20:ec:30:75:47:38:bd:a5:62:eb:47:04:25:d3:5f:
6b:71:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:47:23 2025 by rpki-client