Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200351.roa
File: AS200351.roa (raw, json)
Hash identifier: hRNfEmt2zat7VAcs0vY4VBmZ6uoFALw4/7Q2yhEL3yE=
Subject key identifier: C1:DE:C3:12:59:4A:36:CD:F9:95:4C:70:56:D0:25:51:EA:70:95:52
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3095F69CE43224DC06F8F5A7DB4AF4A32A76E04E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200351.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 200351
IP address blocks: 2a06:a005:26c8::/46 maxlen: 48
2a06:a005:2720::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:95:f6:9c:e4:32:24:dc:06:f8:f5:a7:db:4a:f4:a3:2a:76:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=C1DEC312594A36CDF9954C7056D02551EA709552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:07:cf:bb:83:fb:b6:27:a9:91:9a:b5:62:
5f:18:2c:e8:22:41:f7:20:e5:45:97:2b:74:15:f3:
35:6f:24:7f:3c:7c:4a:b6:f4:e4:46:06:f3:4f:9c:
96:2a:b3:fa:f4:a0:99:6b:6e:ba:4f:ab:fc:b1:bf:
da:3c:49:29:b8:3f:df:8d:ee:45:38:fe:52:93:ef:
f9:8e:78:ea:49:6c:41:f6:28:de:90:ac:67:88:99:
53:53:0f:4c:91:78:8e:1a:a9:11:e7:71:11:e2:34:
da:9c:3e:63:4a:28:e2:13:6a:75:32:24:b5:9d:9e:
c1:2d:dc:3c:a4:6e:2a:90:f3:7b:b6:71:f2:f3:14:
3a:da:29:33:89:84:6f:e6:2f:fb:01:85:e8:a7:87:
1a:86:77:47:7c:8f:c3:8a:91:dc:c1:e5:68:60:78:
28:e5:15:02:04:ca:83:a9:76:6a:4b:86:3a:7f:94:
0f:02:6d:4b:cb:c0:f7:2a:aa:36:8c:a5:55:1e:e7:
33:77:2b:d4:89:2a:2f:ed:ec:66:f9:03:ec:4f:45:
98:b3:1d:8f:9d:6d:87:03:e5:46:9a:f5:74:44:89:
b2:09:ee:03:fe:df:4c:45:6d:ed:ec:7d:ea:5d:f3:
d1:c1:74:a8:7c:7f:9d:3a:c3:9b:9b:42:04:99:59:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:C3:12:59:4A:36:CD:F9:95:4C:70:56:D0:25:51:EA:70:95:52
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26c8::/46
2a06:a005:2720::/44
Signature Algorithm: sha256WithRSAEncryption
42:bb:35:06:72:3b:14:19:d1:82:99:27:64:7b:a0:df:56:17:
a8:2c:75:11:01:de:7e:c5:44:1b:a8:91:83:74:c3:45:57:c1:
13:59:16:fc:79:9d:40:eb:94:6f:3c:9b:59:73:03:21:f2:9f:
73:0d:06:d1:ee:75:ef:98:57:22:aa:fa:89:42:8c:20:7c:a4:
ce:ad:f5:85:e4:9a:fa:53:fa:53:48:ee:30:cd:eb:47:91:e2:
1a:47:30:77:33:eb:ca:77:44:80:12:1a:5d:31:77:0a:ae:58:
62:26:19:2e:80:e5:17:60:65:a9:f0:86:8e:2c:97:78:fd:3d:
2f:34:e1:8e:9c:89:a1:0b:81:5e:8e:7d:e7:23:4e:44:94:44:
0a:f4:0e:5a:d0:fd:17:54:3c:f0:7b:bd:1b:80:18:38:3b:8b:
df:84:58:3e:3f:4e:ed:a3:9c:af:e0:e8:47:c0:34:ae:c7:ad:
a0:f2:35:d7:44:7a:da:18:f2:86:4d:67:66:b2:ea:b5:a7:35:
3e:f4:0a:3e:44:56:e7:cb:9c:48:4c:2f:14:7c:45:7e:9e:8a:
8f:b0:a0:7f:d3:bf:5d:30:64:20:11:23:bc:0b:9c:95:7f:4b:
45:09:a1:43:85:94:39:67:1b:5a:1c:19:23:7a:d5:68:83:1c:
9c:b4:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org