Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200196.roa
File: AS200196.roa (raw, json)
Hash identifier: gg3R+lIUCPo3ewJTxStL7Whdh38Q/vMuvnEt7Ygqz0Q=
Subject key identifier: 76:03:0C:29:6C:0B:07:2B:15:32:52:DC:4A:75:16:F6:40:B6:EC:45
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 4AD459ED3C7D9E9389D059CC5A6C4B37455D6116
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200196.roa
Signing time: Tue 06 Jun 2023 09:26:02 +0000
ROA not before: Tue 06 Jun 2023 09:21:02 +0000
ROA not after: Tue 04 Jun 2024 09:26:02 +0000
asID: 200196
IP address blocks: 89.23.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d4:59:ed:3c:7d:9e:93:89:d0:59:cc:5a:6c:4b:37:45:5d:61:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:02 2023 GMT
Not After : Jun 4 09:26:02 2024 GMT
Subject: CN=76030C296C0B072B153252DC4A7516F640B6EC45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:96:d1:d5:c9:1d:b4:f7:56:8c:61:43:35:
76:99:a3:a5:6f:56:09:75:43:a8:12:30:04:6d:00:
ce:86:98:46:3b:ea:9e:5f:4d:c8:a5:46:6f:f7:89:
ae:f9:c8:94:05:65:62:78:d2:0f:d5:8d:4c:b8:35:
30:39:d8:61:21:a4:68:e7:d9:f9:71:4c:8e:93:fa:
8f:8a:d5:c6:0f:a8:a2:cd:80:fc:92:6a:89:63:5b:
1e:6a:90:1c:5b:fa:ed:07:2b:3d:45:8a:ed:a3:12:
6a:ee:02:bc:0b:c6:07:d4:fb:c0:cb:b8:52:4d:48:
f8:8b:82:31:ba:f4:d9:5f:c3:10:0f:4e:79:55:72:
ed:7e:22:19:80:7d:9c:be:64:1d:bd:b4:49:2c:05:
f0:bb:86:ea:32:fe:8a:a0:4e:42:b5:bf:0c:93:6b:
b9:b6:69:ec:bf:44:6c:45:9a:b8:f4:5b:50:1d:db:
1b:e4:92:d4:6e:61:47:f3:e7:8d:e5:a4:bc:2e:2c:
e7:05:18:e4:c9:b7:2b:b0:d5:53:ec:3f:22:4e:4f:
58:9a:33:dc:7c:a2:f2:ea:15:8a:7f:ea:df:40:94:
a6:69:ad:7a:50:16:38:3a:27:0c:70:dc:60:2d:a8:
a7:cf:49:bc:35:a7:95:97:31:ec:02:00:96:bb:82:
10:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:03:0C:29:6C:0B:07:2B:15:32:52:DC:4A:75:16:F6:40:B6:EC:45
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f7:6e:22:83:cc:1f:21:fa:01:dc:8e:3f:9d:9f:4f:fa:eb:
cd:58:f1:b0:f7:4a:32:99:ff:b0:c4:1c:27:ed:ac:dc:9b:15:
4d:1d:d6:87:38:a8:4f:b8:bc:07:50:54:eb:2f:31:81:c8:a1:
cb:4b:0a:ff:51:79:d6:8e:6b:7d:bc:aa:d6:9e:8a:7a:da:75:
2c:76:49:69:a7:99:5f:f1:bd:9e:d2:d9:a8:aa:6a:0b:05:03:
f2:83:53:52:e0:65:5c:74:8d:74:b2:70:3a:67:ee:2a:ce:46:
5d:b7:85:d0:e6:f1:13:fa:81:2f:38:21:3b:e5:6a:a3:9c:59:
7a:08:a9:05:d4:4c:65:76:b4:68:72:d1:25:11:b1:8b:a0:27:
1c:0e:d9:4c:1a:7b:0c:b0:87:97:12:f3:53:b6:a8:c9:f6:69:
e5:93:6c:3f:0e:d3:55:59:06:97:1a:1e:fb:bb:6c:9d:f5:e4:
32:f1:1d:72:7f:80:ae:cd:6a:ea:fa:8d:e6:9c:72:60:cb:d3:
c9:43:b1:99:3a:d4:88:2c:50:0d:04:15:47:34:64:82:7e:a3:
e1:9a:d8:b1:00:d8:67:15:07:ee:7d:1d:8e:e3:fe:4a:4d:e0:
5e:c3:85:df:19:e8:8b:14:b5:a7:16:63:d3:fe:10:03:83:8d:
2b:ae:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org