Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200447.roa
File: AS200447.roa (raw, json)
Hash identifier: p4GBB/QG4mVo8XToCNbSdNV03ikBxPA0fW5Zr2gajNA=
Subject key identifier: 22:44:6C:E9:D5:D4:CD:6E:7A:76:F9:A5:C8:45:55:F4:D8:FF:2C:A8
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1F671FC816896AF254FEB5866A97FC4262B1E6C7
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200447.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 200447
IP address blocks: 2a06:a005:a16::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:67:1f:c8:16:89:6a:f2:54:fe:b5:86:6a:97:fc:42:62:b1:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=22446CE9D5D4CD6E7A76F9A5C84555F4D8FF2CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:c2:d6:db:78:ef:17:45:38:36:f2:ac:ef:
b0:6c:35:ed:85:c8:f0:e6:dd:bd:1f:71:83:06:ed:
10:87:34:ad:a6:cb:c5:05:bc:37:9e:4e:c3:7b:42:
b5:5c:60:20:d4:e2:92:c2:0c:6d:80:bd:5a:0e:77:
38:41:a1:ad:c4:65:ca:e4:0d:7e:8c:c3:e0:d8:63:
ef:b0:c0:e6:1d:87:4e:4f:ba:92:e9:ed:20:7b:20:
d0:94:83:bd:23:df:a0:9e:86:fb:98:45:13:03:5f:
b6:53:0c:44:cf:99:5d:f9:cf:5c:92:b3:38:b3:5e:
a7:3d:e7:5e:8a:9c:b7:c4:3c:18:9f:7a:7e:69:81:
a4:9d:4d:85:ac:73:e7:f7:a5:92:65:a8:39:2f:17:
fa:b1:cc:77:7c:13:63:79:eb:b5:f5:fd:48:95:93:
6b:7a:a8:3a:3b:c2:ac:82:9d:95:cc:6c:b6:ef:64:
da:99:5a:78:6b:ac:5a:4a:fd:05:28:2f:aa:b0:c6:
bc:26:90:61:8d:2a:95:a2:93:04:21:d0:b7:19:63:
5e:15:bb:1e:8c:e9:b3:ca:e1:30:1b:a2:39:eb:c5:
9d:be:93:83:d0:05:83:79:9a:c8:c2:59:47:cb:18:
9a:f0:98:71:5b:3a:e2:c4:42:73:94:bf:3c:a4:84:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:44:6C:E9:D5:D4:CD:6E:7A:76:F9:A5:C8:45:55:F4:D8:FF:2C:A8
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a16::/48
Signature Algorithm: sha256WithRSAEncryption
04:11:19:d0:13:6e:16:43:06:07:73:41:29:19:0f:cd:64:8c:
ff:3a:0b:fe:07:bd:60:a7:72:fe:31:88:f2:e1:d6:5e:61:e8:
b4:3b:40:78:c3:25:c0:04:cf:c8:46:e1:ee:4d:5a:4b:c8:9d:
4e:c8:49:10:f6:ec:78:c6:25:7a:15:b6:a5:fc:0e:ee:7e:76:
0c:21:56:8a:b4:94:9c:5e:33:1e:a8:55:fc:de:f9:32:6e:ff:
fd:ed:48:01:10:9c:72:55:1b:0a:0e:3d:44:5e:43:ef:8c:bd:
c9:99:b9:98:21:b9:2a:cf:ea:a3:a4:04:ac:43:0d:83:b7:89:
36:87:d1:e2:74:db:3f:dc:e3:26:0e:d2:96:cd:53:53:bb:0b:
95:08:da:8f:26:da:9e:c3:9f:dd:5a:53:43:1a:6a:38:88:42:
fd:d9:53:ff:1c:55:fc:46:f1:a4:7c:99:38:2e:2d:58:0e:5b:
bf:46:0f:dc:99:62:b1:c1:b0:a7:17:3b:e2:01:df:2b:64:17:
13:0e:1a:a9:da:3d:10:a7:07:c1:6d:f8:f6:2d:2e:da:92:6c:
38:ca:6e:13:68:fa:1e:cd:4e:21:56:9b:81:69:a5:12:ce:6e:
03:10:7d:cb:10:78:9c:f3:35:6c:2b:cf:46:ed:54:23:b9:96:
6f:5f:61:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org