Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200581.roa
File: AS200581.roa (raw, json)
Hash identifier: dkQBNGRevZ9ziOvcdTCRdhOgEOrlPN3Pb3C81w2tr9Y=
Subject key identifier: BC:C7:14:B4:64:77:CC:05:81:2B:AB:36:14:68:4F:D5:4F:3D:5D:2A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 45FD5159E3E8DF07DE327984633EAFE3CCEA9217
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200581.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 200581
IP address blocks: 2a06:a005:2290::/44 maxlen: 48
2a06:a005:2790::/44 maxlen: 48
2a06:a005:27a0::/44 maxlen: 48
2a06:a005:27b0::/44 maxlen: 48
2a06:a005:27c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fd:51:59:e3:e8:df:07:de:32:79:84:63:3e:af:e3:cc:ea:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=BCC714B46477CC05812BAB3614684FD54F3D5D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:6d:12:b7:d6:67:90:cc:eb:65:d2:ea:54:
1a:58:21:7a:16:7c:69:e2:b7:09:4a:b3:2f:fe:9e:
71:04:0e:27:fb:06:78:bb:99:10:bf:e8:01:20:59:
f9:72:70:29:84:50:2c:3b:19:89:9d:6e:8a:78:0b:
59:16:b5:1d:e8:b3:e6:c7:32:49:6d:19:55:f3:2e:
f5:e3:89:a7:97:13:42:ad:55:b2:07:77:6b:03:8e:
b8:33:50:38:14:0b:b6:b0:16:03:a5:07:7c:98:01:
af:a9:15:c9:a7:81:c5:b8:40:b6:92:df:2c:70:2e:
77:e1:92:e0:16:3f:4d:e4:e1:ff:8d:2f:e6:08:d4:
2f:23:58:a4:03:70:9d:5c:1a:01:2c:13:c7:f3:1a:
a3:fd:57:c9:64:b2:a1:df:1a:0a:6f:39:2d:d6:82:
41:50:03:61:56:55:50:6e:c6:15:7b:3e:5c:5d:83:
d3:87:8f:12:b2:e7:45:c4:6d:01:fa:65:d0:80:1f:
33:c4:4b:36:56:0b:d0:23:d5:9d:c1:0e:8f:9f:46:
72:f3:52:c4:28:f1:aa:78:1d:32:67:5f:7b:22:c4:
5b:18:9d:00:44:86:7a:f4:d0:f2:83:d3:01:ee:df:
45:15:ba:2c:02:61:7e:bb:80:33:f3:4b:48:eb:38:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:14:B4:64:77:CC:05:81:2B:AB:36:14:68:4F:D5:4F:3D:5D:2A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2290::/44
2a06:a005:2790::-2a06:a005:27cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
42:fc:4a:1c:f4:2f:c6:14:26:c5:bb:c6:50:eb:a0:f9:6d:76:
88:89:41:d3:48:bf:08:ad:95:61:ed:19:f2:d6:f0:e3:6c:8a:
04:62:09:9a:88:5e:cb:f8:60:ad:49:1b:4d:f9:7a:fd:0d:30:
85:5f:52:7a:03:90:ec:8a:d3:c5:c8:3d:4e:de:6d:d1:8f:f1:
19:d0:3d:79:8b:33:7e:bf:38:d4:6a:9f:ef:d2:b1:9c:49:ed:
18:36:ff:c5:7c:0a:5a:c2:ad:5e:cc:95:39:c1:3c:e6:a8:38:
17:98:45:20:65:d6:80:ef:01:ac:b2:79:ba:e2:b4:3b:77:08:
8f:5a:54:10:2a:ed:4b:e3:a3:87:59:99:30:d6:23:2e:9a:e1:
08:51:e8:24:77:e8:aa:e6:50:03:85:18:be:cf:04:05:f0:78:
63:9f:7a:5a:fb:ff:1c:2c:f1:e9:c3:db:37:92:5a:0d:6a:61:
be:69:e6:62:f9:47:67:7e:8e:c3:79:29:44:7f:de:58:1b:16:
cc:fb:c3:e8:a3:ab:e0:d2:f4:96:62:a6:ce:59:85:ea:ea:a9:
16:03:b6:5d:7f:b6:0b:fc:8b:d3:ff:32:53:50:f7:b5:c7:52:
3a:7f:54:e0:83:9d:0d:49:64:d6:4e:6e:04:e9:a0:ae:b6:6d:
d3:06:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org