Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200766.roa
File: AS200766.roa (raw, json)
Hash identifier: mKvRUPpsxgvxcIjw2QU/slI7QlDkfkoSRmIkDSxPqo4=
Subject key identifier: B5:27:A5:9F:D4:A1:B7:A9:F1:54:9D:97:40:99:F9:B7:F1:6D:CE:0C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 52DF4C5625AB984C649CB2A58854C09C7835ED75
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200766.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 200766
IP address blocks: 2a06:a005:116b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:4c:56:25:ab:98:4c:64:9c:b2:a5:88:54:c0:9c:78:35:ed:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=B527A59FD4A1B7A9F1549D974099F9B7F16DCE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:7e:46:47:39:d7:48:1d:81:b3:55:a0:6b:
1d:0e:6e:1e:64:e8:08:8f:c1:72:6c:ea:27:94:85:
a0:7b:3b:1a:04:9e:17:64:60:ad:33:88:c5:8b:53:
51:34:9c:4b:40:d5:eb:af:77:87:64:2f:8c:e7:f2:
93:e8:1c:06:9b:7e:bb:a3:d5:64:39:69:90:34:ff:
c0:fc:cd:5f:35:73:25:1c:5a:7e:73:36:a7:8b:31:
ed:c0:62:71:b8:69:60:43:aa:b0:67:f7:c8:d7:31:
28:9f:bb:e6:c1:a8:eb:f6:99:7c:74:6d:66:c7:06:
46:99:2b:5d:2f:a6:86:fc:d8:8f:d6:2e:fd:3a:02:
e9:d1:f3:62:77:5b:c6:36:3c:b1:57:86:37:8f:83:
f5:78:06:d5:ad:aa:9b:51:83:ba:c8:cf:f2:00:bf:
bd:f6:a3:eb:f7:b9:5b:45:ee:fc:73:79:e0:87:6d:
d9:ee:7a:b8:3e:08:3d:d3:69:b6:eb:d2:72:3c:45:
11:e4:02:d4:f5:b3:0d:a0:0f:94:f4:76:e8:e1:c4:
1a:be:95:2f:69:51:d3:66:83:ff:c2:d6:4a:ec:e9:
8d:f5:a9:b0:73:33:8c:51:e2:40:ac:44:06:79:33:
20:fa:a6:0d:6d:e8:85:07:21:03:44:7a:4f:c3:33:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:A5:9F:D4:A1:B7:A9:F1:54:9D:97:40:99:F9:B7:F1:6D:CE:0C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116b::/48
Signature Algorithm: sha256WithRSAEncryption
06:b1:92:18:e6:d2:ee:ed:42:a8:8b:5f:6d:e1:10:7e:5a:80:
bb:2e:56:a0:a2:06:dc:a0:54:ed:d1:e5:f7:29:35:ae:72:99:
a3:79:60:8f:56:36:36:7e:e7:05:26:59:08:b6:70:dd:13:ea:
c0:d8:74:fc:7b:cc:3e:d9:bc:85:0f:69:8e:10:93:1a:89:aa:
3f:28:8e:51:2a:ec:ef:f8:50:45:c6:7f:ae:4e:b7:ca:20:26:
3b:e5:26:f7:7e:fc:38:0e:0a:94:fe:c2:fa:7d:99:48:a5:1d:
05:c6:da:97:c0:03:c9:cc:a8:82:44:d6:28:ee:83:33:dd:31:
7a:f6:06:e5:ff:ee:4c:4d:cf:65:73:53:64:36:cf:cb:6e:fa:
00:7f:93:84:6f:89:fa:aa:ca:31:d3:0d:01:1e:97:49:27:e9:
1e:ae:09:fc:24:32:58:ff:ee:a2:bc:3b:bf:97:33:8e:01:7d:
10:86:ff:c2:f5:79:27:92:31:db:55:4f:5f:c5:e2:8f:d0:7f:
74:34:59:ff:ae:12:0e:15:0f:be:a3:b4:d0:28:f6:28:bd:cb:
60:84:e0:f3:c1:0c:39:3a:2d:48:e2:31:3e:fe:e7:74:5c:cb:
98:ad:2b:85:18:af:90:b6:9d:fc:db:83:95:3b:f2:e9:33:f5:
b8:d5:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org