Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200754.roa
File: AS200754.roa (raw, json)
Hash identifier: aADGMI6nHJMpFIUPTSgdkmezSVD8VTBIhB4ltYwycQg=
Subject key identifier: 89:08:56:3E:82:40:BF:D2:F6:8E:96:9B:29:5B:F2:38:D1:29:75:D1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2446B32FBA3F3E31D609160BAF66044007EBA814
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200754.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 200754
IP address blocks: 2a06:a005:1165::/48 maxlen: 48
2a06:a005:116d::/48 maxlen: 48
2a06:a005:116e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:46:b3:2f:ba:3f:3e:31:d6:09:16:0b:af:66:04:40:07:eb:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=8908563E8240BFD2F68E969B295BF238D12975D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:6f:e4:f0:b4:66:c5:10:72:ad:37:ec:41:
fb:20:6a:f9:1d:0e:bc:52:8d:1a:d0:90:18:37:15:
06:cb:f0:ae:3d:ad:e7:69:b7:6c:64:b1:dc:df:71:
7b:73:ce:17:62:61:2d:93:ff:8d:41:64:ee:0e:36:
a5:f3:e2:d2:3f:07:47:b2:68:c6:a4:e6:65:c4:cf:
ae:b5:80:34:81:15:d0:c9:19:d1:05:30:cc:1d:cc:
d0:97:1f:66:2b:f0:fb:1f:64:68:86:ec:4f:dc:68:
6d:44:57:c7:4f:ff:f3:e6:fc:5f:14:d9:b1:65:9d:
e4:24:96:f3:d0:e7:5d:72:aa:21:16:e2:77:6e:eb:
0b:f6:8c:ae:f4:71:c4:ac:ca:82:b4:4e:72:20:e7:
81:fe:ff:3d:50:3b:d3:51:40:71:e8:db:e9:b1:f5:
18:8e:1e:07:4d:ab:d1:7e:dd:8a:0d:10:32:e8:79:
fb:ee:67:90:ea:06:f1:0f:77:a9:91:41:85:83:4b:
e0:24:2c:1d:33:7a:b5:d8:e5:97:27:3d:d2:e8:51:
a5:2f:81:bd:15:64:c9:26:19:d8:e8:17:90:9c:51:
a1:bf:9d:4a:1a:48:3d:f1:a3:4c:aa:13:8d:5a:61:
0e:cb:7e:a6:51:35:53:7c:55:a1:7c:f5:78:bf:18:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:56:3E:82:40:BF:D2:F6:8E:96:9B:29:5B:F2:38:D1:29:75:D1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1165::/48
2a06:a005:116d::-2a06:a005:116e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:a4:4e:50:11:19:cb:74:89:0e:fc:74:30:9d:a6:95:a3:e8:
96:07:e5:e6:e5:c5:c9:b4:7f:bc:b8:9f:f2:c8:f3:f6:f0:0e:
f6:e0:a3:53:92:7c:15:f0:aa:92:8b:2a:b3:e1:a6:ec:f9:36:
17:75:b0:a1:6c:8b:f2:ae:5f:e4:e0:f0:19:81:e0:7a:5d:5a:
78:20:20:4c:0a:5c:59:7a:97:18:45:42:3b:8c:43:db:a3:48:
fb:ee:ae:09:12:6e:7f:74:f6:90:5a:a7:98:57:36:67:76:d0:
af:0e:92:4e:28:ae:9a:85:c6:0d:44:7c:cf:f8:d7:2e:1b:83:
f6:9c:23:5f:bc:01:ec:26:2f:a4:c5:f7:ae:96:8f:56:97:c3:
6b:d0:e5:cb:3d:b3:20:9d:de:cd:31:3a:74:b5:78:fd:b5:31:
c0:1a:04:aa:8b:38:f3:99:1e:c2:81:1a:64:e6:07:fa:eb:58:
25:1b:c6:ba:1a:a9:50:0f:c6:ac:0c:42:8e:70:74:8e:3e:ba:
ec:e2:da:1b:47:53:9b:45:98:a1:56:78:b9:91:71:01:57:db:
2d:87:74:fe:0e:03:ff:b2:b2:6c:5e:3c:1b:16:9f:fe:61:9e:
ca:e6:60:a2:17:c8:aa:fd:23:5a:da:fc:b5:a4:d6:c6:5f:32:
80:7f:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org