Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200566.roa
File: AS200566.roa (raw, json)
Hash identifier: v+H8d01hDAW3uH7XBxY2vgQD2uK8tbwDKTJUzgYHcDU=
Subject key identifier: 02:67:1F:A1:1C:05:A6:61:D2:A2:9B:7F:55:9F:77:E8:4B:2A:F7:A4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 354F1F8505B91389C175901BF77D911051E3C67F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200566.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 200566
IP address blocks: 2a06:a005:2690::/44 maxlen: 48
2a06:a005:28a0::/44 maxlen: 48
2a06:a005:28b0::/44 maxlen: 48
2a06:a005:28c0::/44 maxlen: 48
2a06:a005:28d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4f:1f:85:05:b9:13:89:c1:75:90:1b:f7:7d:91:10:51:e3:c6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=02671FA11C05A661D2A29B7F559F77E84B2AF7A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:e1:f8:b8:65:8d:b0:b3:6d:07:f9:72:cc:
b1:12:08:17:d6:11:28:a2:79:4b:37:70:b2:20:f3:
6c:e8:49:0d:10:d9:98:a3:76:63:bc:bb:22:45:e5:
67:76:e5:c8:e3:99:0e:c8:a0:87:ef:35:8b:dd:1d:
74:6d:d1:9a:a3:1a:f2:15:db:14:b4:e8:fc:68:20:
34:85:90:17:14:9b:ad:b8:49:fc:0e:2d:23:a3:9f:
dc:dd:70:51:ec:14:b8:e5:7e:a1:b1:50:f4:6c:17:
51:b5:38:87:ff:00:86:f4:3c:97:2b:ff:c6:bc:8c:
04:ec:8a:85:10:9a:0f:30:3b:ff:d3:f7:23:86:5c:
b2:9e:33:d2:7e:a8:a5:a2:d3:48:2d:7d:11:33:41:
41:2e:61:cf:14:56:a2:51:e7:7e:1e:b6:f5:8c:cb:
29:37:b1:6b:22:0d:b6:05:4d:a2:6a:ef:2f:21:a9:
68:cc:1b:05:27:2b:a1:50:57:ee:7f:cb:c3:77:c1:
b1:7f:18:d3:12:ac:88:b7:37:81:08:f7:46:00:18:
2e:08:43:c4:8e:ef:e8:5f:5b:91:97:79:f2:3f:37:
d5:d5:75:8e:f6:7c:03:6f:fb:f2:26:08:9a:39:2e:
4b:9e:2c:c3:99:2a:e2:5d:b8:83:47:7d:65:87:53:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:1F:A1:1C:05:A6:61:D2:A2:9B:7F:55:9F:77:E8:4B:2A:F7:A4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2690::/44
2a06:a005:28a0::-2a06:a005:28df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:6c:5b:e5:d1:5d:76:76:09:0a:a9:b9:71:84:ff:8d:ac:3f:
13:bd:c5:aa:c9:3b:b8:47:7e:8f:d7:bc:70:f5:46:12:88:93:
0f:c2:27:02:ed:3c:bc:2a:b9:db:65:e7:1e:64:a9:66:93:8f:
fb:cf:90:40:f6:77:47:8b:2a:0c:68:54:ed:3c:19:00:43:46:
f5:c0:b5:6b:29:80:21:60:b3:a0:af:f4:14:30:ef:18:66:ca:
91:34:fa:8e:59:2e:40:e9:5d:75:01:57:89:17:de:52:3c:04:
59:2b:0d:9a:2e:14:13:5d:d7:21:6d:90:66:49:fb:19:8a:88:
14:ff:01:0b:9d:a3:ab:f1:27:65:4a:d9:9a:ce:04:79:0c:9f:
16:84:49:71:52:ce:69:4d:1d:47:07:be:1a:4a:d4:f5:8f:65:
e4:56:14:28:98:a2:d5:26:fc:57:5c:ba:35:d6:93:71:8d:ca:
b3:23:6f:fc:0b:59:e1:9c:1f:7c:54:41:f4:99:f5:cf:44:de:
c6:71:d2:47:de:5f:0a:62:cd:30:04:87:1a:cf:a8:2d:9e:98:
14:9a:e4:7c:90:d8:af:33:e6:9a:d5:bf:e5:57:db:dd:3c:5c:
5f:63:9a:5f:ae:a8:ba:91:21:90:84:14:6d:95:66:04:70:d0:
fa:47:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org