Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200809.roa
File: AS200809.roa (raw, json)
Hash identifier: hSwJaVJCw+Op5JXx5obxk5xWDtCQLCdXAaYuzgdkbMM=
Subject key identifier: 11:2A:3B:0A:E3:4C:5C:CA:0B:8B:1A:10:1C:56:C6:BF:D3:B8:24:1B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2B00C6AFB00D57853EA4D4785F033FE3254B162C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200809.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 200809
IP address blocks: 2a06:a005:2670::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:00:c6:af:b0:0d:57:85:3e:a4:d4:78:5f:03:3f:e3:25:4b:16:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=112A3B0AE34C5CCA0B8B1A101C56C6BFD3B8241B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:95:53:39:bf:a7:ed:03:12:65:48:e2:52:
7f:0b:8a:5e:43:fa:35:c6:77:ca:24:53:ec:88:a2:
a2:be:71:b1:c0:ed:08:e7:df:29:8f:ac:3c:05:fb:
c8:a8:be:d3:68:3d:dc:f9:ba:64:07:5e:ff:3d:cc:
30:36:45:4c:01:1d:81:f1:b6:05:b6:80:8d:1e:4f:
fb:a8:80:e9:8e:9e:d6:e2:ff:37:d2:7e:06:ed:53:
ca:ba:f6:9c:b1:f7:dc:72:62:86:be:0b:ec:6e:e1:
2b:91:b5:32:5f:47:7f:11:f3:53:bb:df:10:f5:2c:
50:71:31:c1:52:9e:67:e6:18:ba:9b:cb:35:67:85:
d6:8f:72:b7:07:fb:76:54:89:d5:59:71:6a:bc:20:
e6:43:8d:73:77:fa:57:2d:70:7b:ec:e0:0b:6f:8a:
ca:83:85:e7:1a:9b:ab:a9:ed:b6:3b:56:c0:33:08:
28:af:6c:e9:51:92:bc:e2:36:68:9b:38:ca:b5:f0:
b7:fe:88:79:6b:71:44:20:92:d1:8e:09:dd:38:95:
6c:2f:70:ad:1a:ea:11:2e:41:51:c5:ee:bd:2a:d2:
fb:47:88:5a:4d:4d:63:b2:cf:e6:cf:a2:46:34:b2:
d5:55:92:96:64:cf:32:83:1d:88:07:47:00:73:0f:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:3B:0A:E3:4C:5C:CA:0B:8B:1A:10:1C:56:C6:BF:D3:B8:24:1B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2670::/44
Signature Algorithm: sha256WithRSAEncryption
97:cf:30:cc:83:e2:62:48:32:b4:38:05:7a:8f:13:8e:5b:30:
56:7e:e0:40:10:94:e4:df:6e:a3:52:5a:e1:3a:61:4e:d9:de:
d2:de:64:03:57:28:ef:00:79:d0:34:c8:7d:bb:51:9b:e4:0e:
b9:61:dd:0e:d2:ec:b8:0c:fa:f0:a2:52:f7:98:67:30:75:63:
48:72:87:11:a3:96:98:71:fa:34:62:f0:81:0f:c9:0b:20:8f:
b0:16:cf:a0:1d:8d:13:ec:69:b2:06:38:94:d4:af:8d:40:79:
f5:6d:6f:2d:e5:87:b8:3f:b4:1f:d2:53:df:61:43:65:fa:68:
d9:72:b1:15:cc:92:80:61:c6:ac:91:22:61:70:b2:77:74:4b:
0f:1a:6d:47:05:ec:0b:8f:56:bf:78:c7:17:66:26:2a:45:74:
e2:da:e2:da:3a:c9:64:1f:da:88:d9:72:7e:f6:38:ad:02:ac:
73:c9:96:7f:63:c0:ca:59:09:fb:2e:c3:19:a2:f3:53:1c:96:
0d:7b:24:e6:c8:25:83:56:3f:4e:af:12:e1:ee:87:40:ae:ef:
e9:91:34:f1:98:8b:6c:96:21:a1:82:5e:2d:45:9e:10:26:d7:
f0:bb:02:3f:4e:be:8d:20:b9:36:12:05:6b:62:15:6b:5d:59:
28:5e:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org