Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200676.roa
File: AS200676.roa (raw, json)
Hash identifier: idlFjH8Jfc+QlfFfUwA3/SL09uE4In3IDulYRy6aWL0=
Subject key identifier: 42:70:FC:3F:79:71:02:F3:10:9E:A2:93:6B:48:41:81:69:64:7B:47
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 617DDD1B6153AE0D2B63598C0B1671184270F19C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200676.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 200676
IP address blocks: 2a06:a005:2680::/44 maxlen: 48
2a06:a005:2730::/44 maxlen: 48
2a06:a005:27e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7d:dd:1b:61:53:ae:0d:2b:63:59:8c:0b:16:71:18:42:70:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=4270FC3F797102F3109EA2936B48418169647B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:1d:e7:34:1d:d6:34:43:97:5c:b3:28:86:
04:2b:24:fa:52:59:69:31:da:72:01:de:84:77:47:
d9:e1:b5:58:e1:98:d9:ea:13:a8:a2:a7:6e:13:d0:
0a:38:1c:6a:eb:3b:f5:c0:2b:e8:ea:4e:a4:f5:c3:
90:c3:d5:91:d1:74:02:f8:6d:1b:0e:d8:ed:7e:47:
7b:13:b1:fd:20:78:70:30:cd:c7:9c:51:65:30:03:
e8:e6:a9:3f:32:58:19:d7:b1:11:63:06:2e:bb:c6:
77:a8:b7:22:6b:01:cf:15:83:c8:45:12:ce:44:1b:
f8:57:ff:c8:99:a1:08:45:29:83:94:27:09:d2:eb:
1e:7d:35:14:58:0c:29:75:f7:63:c1:2e:63:eb:c9:
7c:c9:bc:01:74:75:34:31:91:21:f3:e2:52:a8:59:
8c:5d:e0:6d:c4:45:85:64:82:3b:cc:aa:00:6a:70:
9c:d7:f9:ae:34:db:2d:d2:9a:12:76:ab:cd:49:c2:
b3:8c:47:da:29:e6:74:72:18:b2:63:65:81:b8:ee:
2e:bf:72:21:90:e5:76:2c:b8:1c:51:37:61:48:02:
37:2f:62:3a:32:ec:05:fe:d2:40:56:74:ec:b2:e5:
ff:12:c6:e7:13:34:cc:92:5f:ee:c1:97:a8:39:4e:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:FC:3F:79:71:02:F3:10:9E:A2:93:6B:48:41:81:69:64:7B:47
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2680::/44
2a06:a005:2730::/44
2a06:a005:27e0::/44
Signature Algorithm: sha256WithRSAEncryption
05:d9:a8:b4:99:d4:a9:49:60:68:f8:86:37:3b:2d:10:35:dc:
22:b7:24:23:c0:ad:89:b5:05:f1:6a:9c:ce:f0:44:0f:33:5a:
37:f6:af:ed:5c:6c:8b:93:04:51:d4:b2:f0:76:3a:d2:91:ca:
7b:94:33:e3:3d:1e:f6:ff:cc:a9:cf:1c:65:63:cc:67:36:5d:
7d:10:1f:f9:4e:f1:fa:3f:84:89:10:70:66:5d:52:da:bd:33:
16:87:06:cf:a1:14:39:7b:a9:ce:29:ff:aa:75:35:f1:8d:0c:
51:b4:00:e1:b6:6c:a7:37:7c:12:05:e0:35:58:b2:de:15:6b:
2c:46:11:5e:cc:79:05:61:c9:c6:db:b7:25:d3:35:81:76:cd:
90:e0:84:e1:7f:1a:a8:5c:67:16:95:40:d9:81:a4:1e:f3:e0:
c2:7a:db:e9:bb:37:84:34:a8:e7:86:95:f1:01:2c:ee:66:29:
83:bf:a3:e3:13:42:60:59:77:4b:dd:4e:72:c2:01:21:37:89:
65:6b:14:c6:e1:01:3f:ed:be:e7:d5:16:5c:d6:66:a8:df:ec:
2a:32:c0:43:50:b0:7e:fa:44:fa:6c:1c:c9:ae:72:17:1b:91:
d5:e3:c6:dc:96:23:25:da:92:71:e1:d9:84:08:f5:1d:c5:6c:
98:a7:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:13 2025 by rpki-client