Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200923.roa
File: AS200923.roa (raw, json)
Hash identifier: wza9bgLLDKM8iZO+VhN4DDUaBdwYICqMOsUKBscNtHc=
Subject key identifier: A7:D3:A4:45:CE:30:3D:C7:AF:1B:54:1C:E2:AC:B1:C6:A0:38:75:9E
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6B657DB1D27B01AF70E668DF1214AE2E6BEAF55C
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200923.roa
Signing time: Tue 06 Jun 2023 09:28:41 +0000
ROA not before: Tue 06 Jun 2023 09:23:41 +0000
ROA not after: Tue 04 Jun 2024 09:28:41 +0000
asID: 200923
IP address blocks: 95.140.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:65:7d:b1:d2:7b:01:af:70:e6:68:df:12:14:ae:2e:6b:ea:f5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:23:41 2023 GMT
Not After : Jun 4 09:28:41 2024 GMT
Subject: CN=A7D3A445CE303DC7AF1B541CE2ACB1C6A038759E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:26:67:9d:3b:db:1b:c2:e4:71:93:1f:21:
20:ba:fb:56:17:84:dd:18:2f:dc:c3:a1:f2:0d:7d:
92:ce:84:da:cd:02:16:15:a1:93:e2:2a:bc:fc:75:
ec:34:3a:88:5c:4b:f9:56:a6:f0:5d:da:fb:a8:ea:
04:2f:23:52:27:d7:94:15:ac:38:2c:15:54:ae:28:
31:0b:fa:ad:fa:51:45:50:74:93:09:75:7a:1b:48:
18:81:15:e6:96:9b:26:f1:c3:62:12:29:bd:d7:8e:
84:a3:e8:ee:70:ad:14:30:c2:59:ac:97:20:a9:4b:
d5:e3:47:78:4d:e9:f0:23:09:51:b7:b3:e1:c4:de:
bd:be:cb:8c:54:52:62:00:49:29:df:a7:d8:2c:be:
c6:0a:a7:dd:c4:47:a3:0a:49:06:4f:20:5a:14:1b:
7f:4f:d2:7c:d2:b3:2d:94:a5:1e:00:7f:a4:57:c6:
aa:47:27:7c:8b:f7:20:c5:1f:00:05:af:ae:6e:f5:
f3:e9:55:c0:7e:0a:19:b8:1c:ba:93:f7:e5:23:df:
5c:55:42:58:ff:4f:e3:20:1b:72:5d:30:c1:ae:dd:
30:dd:e2:d2:f9:37:77:22:d2:31:1c:d7:2e:b9:ca:
35:7c:1b:97:06:04:48:55:71:0f:e4:07:2d:32:5a:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:A4:45:CE:30:3D:C7:AF:1B:54:1C:E2:AC:B1:C6:A0:38:75:9E
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS200923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.123.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8d:e0:28:ad:c3:82:8b:e2:1a:27:92:3b:75:1f:42:fe:c2:
ab:ef:d2:72:67:64:0c:f7:f2:a9:01:1f:2b:1d:f8:66:42:0b:
7d:a6:dd:4c:fb:c2:aa:64:2a:11:1f:48:ba:2e:55:e3:63:60:
81:94:e7:87:e5:2c:9f:6e:63:24:3c:98:13:87:52:82:26:14:
9b:f4:83:66:61:5b:5e:08:8b:83:7b:8f:16:86:23:40:47:46:
2c:f1:81:59:fb:3d:e4:0f:de:f7:13:c8:8d:b4:e7:f0:d0:d3:
d8:8c:2f:f8:85:f1:f5:cf:09:93:b0:49:e3:69:da:35:c0:87:
6b:25:18:b5:53:4b:2a:79:02:d4:91:7f:29:72:37:26:ed:d7:
c8:be:10:c2:e2:33:7d:b0:17:f0:3a:90:37:24:ea:50:bc:6a:
00:28:f7:fa:9c:2b:e1:a5:61:2f:d1:3e:45:7b:7e:ce:7c:b0:
11:a1:d4:6e:1e:3a:e2:29:8c:21:f7:bc:3c:7f:ff:94:19:65:
1d:b8:2f:8f:0f:fa:f6:19:3d:43:dc:1d:ca:88:be:6e:cd:d5:
1a:8c:4d:d9:99:24:9a:bf:91:4a:63:53:3f:e5:7f:2c:18:7d:
cb:34:9a:fa:2f:62:0a:97:dd:6a:00:54:52:ff:3d:0b:71:b7:
0b:1d:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org