Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200455.roa
File: AS200455.roa (raw, json)
Hash identifier: LSJA5GGvw0bLbsAeODCi39qTRWo/4RvUa1GiX3o5Y0o=
Subject key identifier: D3:E3:58:84:F3:73:9A:70:10:55:6A:FF:E9:EA:63:42:24:B5:C1:DF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1646230E5AF977AE635311951074965BF58EEF37
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200455.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 200455
IP address blocks: 2a06:a005:ba3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:46:23:0e:5a:f9:77:ae:63:53:11:95:10:74:96:5b:f5:8e:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=D3E35884F3739A7010556AFFE9EA634224B5C1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:96:1d:b1:68:46:82:14:21:51:6e:2d:1c:
ff:48:72:41:85:db:1a:88:35:60:29:a5:c4:9f:bb:
d8:de:e1:88:f7:36:9d:17:9f:cf:70:80:a0:c2:45:
d9:ad:9a:6c:e9:17:5a:75:32:bf:8e:e7:79:66:6e:
61:28:6b:b0:12:0f:65:95:45:a7:7a:71:4e:f9:07:
0d:a0:88:01:9c:2e:4d:fe:26:94:66:d8:da:c0:0c:
a5:b8:c6:30:65:35:29:d9:e7:32:6e:fa:50:23:37:
24:5c:c5:12:ba:89:c7:90:be:38:d6:38:47:97:72:
01:88:14:ec:45:c7:99:46:e8:76:8d:55:42:7e:44:
e2:2b:4c:fc:6a:89:b6:d5:5c:9e:0b:fd:36:42:20:
21:3b:e7:15:a3:b9:f3:3f:b7:26:5f:63:d8:5a:43:
01:bb:0e:05:85:78:b4:e0:81:69:96:f4:31:2a:78:
30:87:86:41:e4:fd:97:f9:9d:ad:f5:73:cc:89:52:
1c:9c:a5:7c:46:68:48:3a:b4:7b:ce:bf:e2:e6:f7:
06:90:d1:27:a0:fe:8c:fe:8a:ef:72:01:16:7a:56:
a5:64:ac:7c:18:00:31:de:5c:f1:af:9d:90:34:84:
40:28:78:fe:b9:7c:84:b5:32:e6:9d:ab:86:9c:84:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:58:84:F3:73:9A:70:10:55:6A:FF:E9:EA:63:42:24:B5:C1:DF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200455.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba3::/48
Signature Algorithm: sha256WithRSAEncryption
23:1f:f1:04:bf:ae:35:e8:c2:4c:5e:bd:50:1f:8a:d9:ed:1f:
5f:b9:d2:cb:c2:e5:21:c3:98:df:48:63:27:d6:b5:47:c2:ae:
30:0f:90:10:9a:fb:5c:89:89:10:ef:30:ca:45:52:3f:ca:d1:
e9:96:6b:64:64:9b:77:71:27:ca:be:e4:6f:79:32:f1:30:f6:
bd:13:ca:cc:64:f9:5a:cb:d5:36:33:ef:cc:c0:ab:68:9a:42:
a6:7f:79:6e:91:dd:ef:19:c4:f3:a7:75:65:89:1a:e7:4a:96:
53:f1:72:e3:52:d3:e3:7b:c1:3d:a4:96:68:8b:4d:29:7d:5c:
e1:f9:b7:d5:5d:bf:5e:7c:5f:01:45:38:be:ad:9c:ac:3a:6f:
7b:48:e0:f7:19:a5:30:ed:02:c7:9f:7d:90:1a:31:ad:07:2b:
7c:5a:74:f5:2d:88:0d:af:7d:53:0b:1d:1c:0e:95:da:e8:09:
3b:d8:84:b5:4f:8a:a7:49:35:af:05:73:7e:e2:1a:6b:2c:0e:
08:0e:3c:5a:c7:85:d7:78:fe:ab:77:c6:17:65:88:eb:cd:c2:
c6:eb:c2:e4:3f:c4:da:09:3c:5b:ed:2c:8f:4f:93:09:ee:e2:
60:fc:da:0e:2b:01:3c:11:23:6d:3f:a6:90:06:44:51:42:7b:
7c:50:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org