Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200262.roa
File: AS200262.roa (raw, json)
Hash identifier: lZI+M5MwtXU9k+loIS+EwFdnHVg1tXCvv3Dt+lPuPng=
Subject key identifier: D5:ED:04:BF:29:8F:2B:23:E5:26:E6:F9:37:DD:21:44:FC:1B:88:DB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6762D0E0CEA17AF52AA3D526A35DB737DCB68197
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200262.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 200262
IP address blocks: 2a06:a005:29a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:62:d0:e0:ce:a1:7a:f5:2a:a3:d5:26:a3:5d:b7:37:dc:b6:81:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=D5ED04BF298F2B23E526E6F937DD2144FC1B88DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:ec:f6:6e:5f:73:35:3d:ce:14:bf:e5:95:
67:6b:a2:01:e4:93:de:78:33:6e:ca:7e:ce:2d:04:
32:62:4d:54:a5:b2:47:97:7b:0a:3c:76:39:12:81:
ce:61:40:52:54:f1:68:31:0c:0e:89:bc:52:33:b3:
b7:93:ea:00:69:f5:a5:12:28:9c:7c:27:41:de:0f:
f1:c5:95:4d:5b:c0:5e:f5:14:c8:43:a4:bb:a6:c4:
f0:03:c7:1b:7b:ca:4d:4d:1d:6d:c5:15:4f:6d:56:
3d:97:5d:bc:b8:89:e3:c0:5d:2a:a2:d5:84:bc:62:
47:35:2d:af:6d:1c:c6:fa:73:e5:a9:19:26:14:ec:
a2:60:dc:c8:38:e0:a8:bb:72:1d:8b:69:d7:fd:e5:
f2:3d:60:a4:95:ee:8a:05:16:55:4a:5f:6d:b2:24:
e3:25:a0:3a:98:8a:ae:ec:6f:4d:bb:bb:5b:94:6a:
0d:21:96:4c:29:86:ef:e3:ea:62:ec:79:3b:11:09:
9e:c4:14:b0:29:0e:ff:20:d3:fd:60:f2:4b:99:b0:
48:d3:d9:96:5d:f2:97:8e:6c:cf:b0:8e:3e:0b:17:
06:b6:2d:ad:b8:a5:ad:b4:63:02:c9:0a:7e:b1:0a:
39:7c:5c:7d:21:ab:2f:c8:07:ae:8d:d8:e2:23:f7:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:04:BF:29:8F:2B:23:E5:26:E6:F9:37:DD:21:44:FC:1B:88:DB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:29a0::/44
Signature Algorithm: sha256WithRSAEncryption
6b:12:65:8d:6f:fc:19:ad:58:14:89:7b:ad:e1:5b:f4:69:56:
1b:21:d3:42:43:11:0c:1e:fa:d2:ce:08:23:c2:88:87:e7:a8:
5e:67:3f:24:45:fe:96:0d:34:e3:6e:a8:70:86:94:f3:78:1b:
bb:5b:db:4c:9e:e7:a7:20:ff:85:c3:6d:d3:92:77:0f:f7:2e:
11:6b:b7:47:24:1c:85:e6:96:bb:85:b8:44:ca:2e:08:91:87:
a4:2f:cf:73:0a:0a:4f:c3:f8:c9:60:9b:20:63:75:2b:9b:8f:
b0:da:dc:a7:45:ff:f7:97:f9:cc:d9:24:74:59:12:31:12:73:
8f:4b:91:97:a5:79:e8:32:4b:c1:1e:8b:61:01:b3:7f:c1:87:
9b:4f:36:ce:15:49:fe:94:48:76:92:35:13:bc:66:2b:b5:96:
cb:f7:79:39:38:0e:bd:e6:b5:01:33:96:5d:eb:54:31:74:91:
fa:56:02:61:e3:78:04:1e:89:f0:33:55:77:09:27:bf:ed:6c:
61:ab:b8:39:af:18:02:cd:9a:99:e9:c0:51:bd:0f:3f:d9:99:
fb:43:18:06:19:37:af:ca:b3:0f:67:32:9b:0c:89:ca:d4:d2:
da:74:aa:2f:67:93:64:18:73:8d:f7:e7:91:f5:9f:2d:9c:50:
6a:b8:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org