Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200732.roa
File: AS200732.roa (raw, json)
Hash identifier: Bum8nMEtFWUd2Qn4gGTvdIuS2+wXoatrzgD8DOgk1mA=
Subject key identifier: 32:6A:68:87:DF:87:2E:F9:4C:73:2E:17:48:3D:C8:0F:F1:7F:D0:43
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0A2193DAE11FFE1BF26EEE26C10C99F96A022F0C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200732.roa
Signing time: Mon 02 Jan 2023 13:56:28 +0000
ROA not before: Mon 02 Jan 2023 13:51:28 +0000
ROA not after: Mon 01 Jan 2024 13:56:28 +0000
asID: 200732
IP address blocks: 2a06:a005:5bb::/48 maxlen: 48
2a06:a005:d26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:21:93:da:e1:1f:fe:1b:f2:6e:ee:26:c1:0c:99:f9:6a:02:2f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 13:51:28 2023 GMT
Not After : Jan 1 13:56:28 2024 GMT
Subject: CN=326A6887DF872EF94C732E17483DC80FF17FD043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:ef:31:cc:58:7d:dd:12:e1:06:bc:32:56:
99:3e:29:c8:3f:11:80:ea:d0:8a:c2:15:27:c5:01:
ac:e2:5b:f0:5e:47:2e:0d:e0:0e:f0:80:9e:ad:29:
04:a5:bc:77:ba:6b:49:08:ea:91:45:e5:51:7b:ca:
14:39:89:28:eb:d5:8e:0b:0e:50:ed:60:e5:68:0b:
16:e3:e8:e3:4f:d7:7c:c3:ea:ad:20:0d:8b:ff:d7:
55:a5:17:73:79:63:73:12:82:1c:c6:c5:28:71:7d:
db:79:b1:97:40:9c:4f:71:e9:48:95:84:11:5f:31:
29:ec:23:14:7b:b3:67:7b:14:f6:6a:9e:39:e8:87:
83:3c:72:fa:13:a5:60:43:2d:28:de:35:35:3d:d6:
5b:8c:13:a3:e3:d7:13:8a:4f:b3:fd:0a:a3:a6:28:
2d:57:0a:cf:b1:d7:17:ee:7f:be:d2:ae:e7:90:1f:
1b:13:2d:32:d6:4a:b8:9f:cb:f7:0b:51:ae:bb:03:
79:29:49:09:c6:35:f5:3a:f0:43:9b:06:7e:e6:39:
0b:22:f4:00:c7:dd:a9:ea:52:9b:e2:79:12:9c:1c:
00:a2:65:cb:07:dd:ee:50:eb:80:5e:fb:ea:a0:b8:
b6:99:99:c6:60:2f:0b:58:03:e8:ff:fe:f3:c1:fa:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:68:87:DF:87:2E:F9:4C:73:2E:17:48:3D:C8:0F:F1:7F:D0:43
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bb::/48
2a06:a005:d26::/48
Signature Algorithm: sha256WithRSAEncryption
01:29:1d:04:b5:f1:56:a7:a4:a9:c0:5f:58:44:da:5c:14:9f:
03:6b:58:fe:08:34:5c:37:9b:43:c4:ae:ac:bd:82:93:97:03:
d7:40:e5:81:13:93:f1:f2:9a:47:49:d1:d0:45:3b:4c:45:cf:
a1:c2:47:ff:d7:6a:c3:57:01:0a:fc:ea:f6:86:83:6a:71:7c:
95:f1:6c:95:f2:73:88:a0:5d:cb:ef:23:5a:7f:75:e7:78:36:
55:9d:a8:f9:47:5e:e5:d2:9e:97:b3:f4:37:99:d2:89:fb:e6:
b2:b4:8d:fd:71:ef:9c:92:a7:86:b8:d1:ad:d4:90:4c:20:db:
c4:49:38:86:8b:d8:4c:42:f5:d2:69:21:64:13:18:4f:4a:df:
d5:bf:7c:fe:03:20:97:db:71:a4:37:07:8a:e7:93:4b:f6:08:
ac:99:52:e4:ed:0d:78:e1:7c:97:e6:04:e8:9c:6d:26:b4:a3:
9d:5b:e3:cc:77:5d:17:a3:50:9c:34:72:ad:ff:e4:37:67:d4:
49:76:76:97:af:61:81:47:7b:5e:90:8a:52:e4:c1:80:e8:2f:
b0:bb:d0:53:16:56:23:53:99:58:ab:af:6e:87:3f:f3:78:02:
dd:07:f8:95:05:c2:3f:ad:98:cf:8d:b7:1f:7f:79:99:34:92:
26:24:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:47 2025 by rpki-client