Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200306.roa
File: AS200306.roa (raw, json)
Hash identifier: DRWKvg8HwpGCBSr+OmbG/hd8IUAsm8gyAf0HCO21UXE=
Subject key identifier: FF:E4:9E:47:76:21:4D:E4:53:3C:8D:17:CB:37:9D:7A:39:E8:CD:F9
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4F5322DFBDEF6AD4BD6C47DD9EF722C1EBE6E44D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200306.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 200306
IP address blocks: 2a06:a005:af0::/44 maxlen: 48
2a06:a005:b00::/44 maxlen: 48
2a06:a005:c00::/44 maxlen: 48
2a06:a005:c10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:53:22:df:bd:ef:6a:d4:bd:6c:47:dd:9e:f7:22:c1:eb:e6:e4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=FFE49E4776214DE4533C8D17CB379D7A39E8CDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:92:25:97:ff:6c:ce:5a:54:f3:d7:1c:6d:
8f:58:0c:e6:61:9c:2f:a3:bc:97:d9:43:ef:e2:4d:
b7:17:ea:65:94:19:86:65:9d:07:0d:22:bd:e7:dc:
d7:b6:49:c1:77:8b:ee:62:2f:fe:a1:fb:3b:16:58:
dd:d9:ee:57:77:2e:a9:05:40:7a:4b:67:fb:eb:f7:
e6:c5:e9:eb:c0:86:09:79:41:19:c6:ce:3a:d4:c1:
6d:d6:c8:de:5f:25:a8:c2:5f:5a:32:73:e6:d5:4c:
62:0d:34:25:7a:c7:92:07:73:97:4a:66:43:be:1c:
b4:25:58:ae:51:98:41:97:92:78:0d:97:a2:03:cc:
84:c7:09:09:ee:1a:54:dc:83:70:0a:0d:9b:12:fa:
f2:67:aa:84:fc:a0:14:0d:f3:66:74:09:5a:a3:9a:
96:43:9b:20:bf:7b:f2:0d:79:9c:d1:96:a0:67:5b:
e3:99:78:50:ac:a7:5e:03:55:ab:5f:d6:69:04:08:
8b:b1:9a:3e:60:04:9d:b2:b2:91:f7:bc:08:13:e1:
fa:57:f8:6c:88:cd:9f:f4:61:3e:2c:dc:bc:c7:27:
af:e8:b9:fa:7c:7c:21:04:b9:5d:57:53:f8:de:a5:
09:fd:fd:6c:90:1f:b2:18:16:08:b8:ed:ca:ab:12:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:9E:47:76:21:4D:E4:53:3C:8D:17:CB:37:9D:7A:39:E8:CD:F9
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
2a06:a005:c00::/43
Signature Algorithm: sha256WithRSAEncryption
1f:e6:7f:6f:43:dd:af:65:87:7f:dd:b5:ad:38:25:e1:df:35:
ab:a6:78:05:d4:0b:53:ba:6f:fc:b8:61:b9:de:8a:52:b2:bc:
e6:5a:aa:01:d1:eb:80:b6:08:a6:a4:ce:5e:9f:2e:8c:c5:bf:
e3:0e:75:93:ae:e3:ec:2c:ff:09:5d:0d:95:f8:04:ea:aa:da:
3d:a9:11:bf:71:8f:16:a0:69:ef:b0:43:da:c5:92:d7:05:59:
54:75:aa:27:3f:60:20:7e:7d:e8:44:45:02:0a:60:02:de:b6:
4e:b1:6f:e9:e2:82:24:63:1f:d0:08:ea:1a:4f:a3:c8:88:c2:
0c:2f:97:3d:54:da:15:21:3a:55:20:8f:dc:e8:6a:b8:29:9a:
ee:20:68:cb:6c:6a:0c:49:1c:43:df:8f:49:11:eb:2f:d0:cd:
9f:17:e8:49:7a:f5:33:f9:c6:61:22:80:c6:66:6e:32:bf:1b:
fd:35:bd:ef:ec:17:5f:f9:4d:22:4f:be:02:cc:f2:6e:ba:a2:
d7:45:58:a9:bd:38:f0:39:34:c9:c0:7e:fc:28:35:65:91:f7:
52:5c:60:6e:56:9a:b5:b9:14:17:91:b3:27:dd:d0:dc:10:0f:
dd:eb:88:76:93:42:47:a6:c7:96:59:5f:b8:ee:eb:c8:d3:b6:
a5:06:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org