Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200536.roa
File: AS200536.roa (raw, json)
Hash identifier: qBxZhXY8C+xcGyKs9ZtTveRVme/Lzse/8vgOwH97bvU=
Subject key identifier: 88:EA:17:BE:0C:EC:F7:55:A8:0C:3B:04:CA:B3:7E:C8:5C:96:B6:0B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 208E8B62E9F568AA5694133095F34A6E3D6D0DA1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200536.roa
Signing time: Mon 02 Jan 2023 05:47:03 +0000
ROA not before: Mon 02 Jan 2023 05:42:03 +0000
ROA not after: Mon 01 Jan 2024 05:47:03 +0000
asID: 200536
IP address blocks: 2a06:a005:f80::/44 maxlen: 48
2a06:a005:1700::/44 maxlen: 48
2a06:a005:28f0::/44 maxlen: 48
2a06:a005:2910::/44 maxlen: 48
2a06:a005:2920::/44 maxlen: 48
2a06:a005:2930::/44 maxlen: 48
2a06:a005:2940::/44 maxlen: 48
2a06:a005:2950::/44 maxlen: 48
2a06:a005:2960::/44 maxlen: 48
2a06:a005:2970::/44 maxlen: 48
2a06:a005:2980::/44 maxlen: 48
2a06:a005:29d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:8b:62:e9:f5:68:aa:56:94:13:30:95:f3:4a:6e:3d:6d:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 05:42:03 2023 GMT
Not After : Jan 1 05:47:03 2024 GMT
Subject: CN=88EA17BE0CECF755A80C3B04CAB37EC85C96B60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:99:93:93:ca:fc:0c:a1:ef:ce:54:3d:42:
b7:be:6f:c0:85:37:49:44:83:97:26:a0:46:fb:66:
14:28:26:12:46:16:28:e5:7b:fe:19:5e:4e:14:9d:
7c:e5:fd:d1:70:4d:f8:ec:32:c8:da:d1:76:2c:e6:
91:be:31:2d:89:24:1e:c2:df:96:f9:52:18:00:52:
26:64:1e:32:c5:fb:02:af:ba:65:0b:e0:b0:9c:d8:
94:45:44:ee:62:38:bb:cc:1c:a4:3f:59:4f:12:11:
b7:08:f2:e9:0a:ae:bc:08:82:24:46:40:81:f3:7c:
59:00:bf:c3:e1:65:5b:2a:97:ac:10:69:42:a5:ae:
ca:3c:d2:e9:c4:f2:78:35:28:2d:79:e4:05:5a:56:
91:f3:da:74:a3:43:b8:05:20:fb:89:3f:6b:83:13:
c5:40:a4:df:06:a6:98:9a:f1:3e:ba:c2:7b:98:5d:
45:98:0e:f5:bc:94:8b:76:0a:bc:87:d0:05:99:e8:
53:d2:0d:50:27:a7:68:ed:28:0b:6a:8a:d7:ae:eb:
c0:af:61:0d:bc:07:dc:e9:98:94:fd:62:96:ef:92:
6c:86:5a:03:aa:2b:70:db:22:58:cc:13:c5:a0:4d:
77:e7:0b:11:4b:49:6d:79:67:a0:95:3b:4a:f7:d6:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:17:BE:0C:EC:F7:55:A8:0C:3B:04:CA:B3:7E:C8:5C:96:B6:0B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f80::/44
2a06:a005:1700::/44
2a06:a005:28f0::/44
2a06:a005:2910::-2a06:a005:298f:ffff:ffff:ffff:ffff:ffff
2a06:a005:29d0::/44
Signature Algorithm: sha256WithRSAEncryption
73:1a:2b:21:52:8d:80:76:87:ae:e5:a7:80:08:62:bd:9f:66:
d4:69:da:1d:f8:86:6a:f6:44:14:d0:b1:0e:46:5c:fe:a6:28:
3c:8a:a8:38:cb:bd:15:de:40:d1:53:f1:a6:85:77:ce:f9:84:
2f:30:52:1b:07:aa:c6:1b:7f:5b:92:9f:72:bc:cb:9c:71:02:
ee:ec:fb:f8:33:33:31:97:38:ab:3e:f4:35:e2:f8:0e:6f:ca:
45:c8:17:b1:ed:32:e5:0c:b2:82:69:18:c5:20:50:a7:fe:2b:
30:cd:cf:71:41:e8:b5:f7:46:88:11:ec:28:ef:bc:b2:fe:7a:
97:fe:24:47:0d:70:b6:46:21:7b:a3:eb:d4:a5:b5:83:c6:e3:
7c:de:b6:15:4d:65:c9:3f:c4:ad:69:88:ae:09:63:9a:7a:03:
7c:89:2b:6a:03:27:13:09:3b:a5:4c:fb:33:13:07:09:50:a3:
35:29:fa:4e:8f:ee:4d:94:38:76:b4:71:7e:53:47:74:9f:76:
7b:0b:5d:50:f2:92:cf:f4:ba:d3:b8:bd:be:c6:96:6d:c8:15:
bb:7a:8a:d5:32:9b:8a:30:6c:1d:7f:83:64:76:3f:59:1c:ae:
1c:d9:ad:9e:0b:d9:08:7a:84:54:aa:80:13:a1:6e:a9:ff:d5:
4c:f3:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org