Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200840.roa
File: AS200840.roa (raw, json)
Hash identifier: fw64bq+xyOLcxs5ZrfCvykyumC0re+NUpr8pHsSwq/4=
Subject key identifier: 1E:07:39:4C:4A:F3:B9:71:58:31:AB:E3:08:F4:D3:F2:1B:BD:B2:6B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 47BA22850E2736FC182DF91E9B25240FD1321412
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200840.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 200840
IP address blocks: 2a06:a005:1dc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ba:22:85:0e:27:36:fc:18:2d:f9:1e:9b:25:24:0f:d1:32:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=1E07394C4AF3B9715831ABE308F4D3F21BBDB26B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:8f:2f:2a:1b:01:20:22:fb:5b:a9:54:0d:
f4:0c:1a:b1:79:62:70:78:11:72:55:c8:1e:74:71:
cb:e1:ee:99:26:df:73:09:7e:a4:7b:32:d1:1b:90:
11:81:81:71:d1:0e:99:b2:c3:27:76:1b:8c:85:e7:
48:75:12:66:e6:8c:4b:31:bb:2a:16:91:34:30:e7:
8f:2d:a9:2f:04:f4:1b:9d:ee:e3:35:cf:35:30:d9:
17:93:0d:34:9e:27:35:87:3a:ad:75:c0:b6:e6:04:
9e:d5:9f:3f:d8:d8:c0:1e:3b:73:33:cf:0f:2a:b1:
d3:02:60:0e:2a:ce:69:c9:eb:15:c3:9d:f1:45:55:
6c:06:7f:96:30:7e:93:81:69:cf:58:16:84:d8:4d:
08:79:f8:f9:28:12:c0:e7:96:13:f9:bf:36:d9:b6:
2a:9c:4d:ec:00:84:fd:69:cf:c4:b6:d0:98:20:5d:
9a:d5:cf:bd:76:2d:dc:a3:d3:7b:2f:74:96:a3:5e:
f4:90:4e:48:ef:d5:57:62:a1:82:94:bd:f6:e9:b3:
70:28:c0:78:77:e4:0b:24:e3:60:b3:0c:9c:6e:b3:
97:65:3a:14:32:a2:52:72:85:6a:4a:09:93:33:d2:
77:d2:46:51:c9:7f:bd:0c:6e:58:10:0f:1f:b5:2b:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:39:4C:4A:F3:B9:71:58:31:AB:E3:08:F4:D3:F2:1B:BD:B2:6B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1dc0::/44
Signature Algorithm: sha256WithRSAEncryption
02:53:bf:9f:0c:b1:b5:d3:71:77:07:85:b4:2b:58:3b:89:66:
a5:9d:03:ff:f8:0e:f5:a9:02:ac:94:da:03:e1:11:76:83:16:
df:b2:60:41:36:b8:3f:7b:8b:bb:f2:20:29:5a:e4:d8:d8:91:
f0:8c:86:a3:c3:87:78:ea:c3:5e:5a:ef:df:8f:ab:13:bf:4a:
f9:4d:33:79:fe:0f:cd:2d:f3:7a:49:59:12:29:c8:0d:15:b4:
26:b6:a1:e2:f0:9b:3a:90:a8:9a:16:57:0c:3a:84:2a:91:29:
e2:0a:3c:31:3d:33:b5:74:60:bd:af:c6:d1:d2:ee:27:08:45:
10:e5:1d:3c:ae:8a:30:49:2c:f2:03:f6:4a:2f:e3:7f:9d:e9:
62:23:08:21:bf:ee:5e:67:ee:8a:f0:39:5e:65:22:b1:bb:44:
a4:2f:01:09:3d:04:6d:7a:6c:26:63:b4:26:e8:f0:b0:4e:c5:
ae:36:76:b8:fa:5c:55:1a:95:78:8e:52:19:14:51:2c:01:c1:
b3:c7:21:64:c1:1b:a1:a6:6f:7a:8e:7a:99:9a:54:ef:9d:6d:
78:51:98:19:6a:45:9c:21:5c:5d:47:a3:73:15:9f:72:dc:30:
34:04:5a:13:c1:37:e3:19:55:c7:55:bb:f2:8c:7b:e3:43:b4:
cb:47:e0:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUR7oihQ4nNvwYLfkemyUkD9EyFBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjNaFw0yMzEyMzEyMzU5MjNaMDMxMTAvBgNV
BAMTKDFFMDczOTRDNEFGM0I5NzE1ODMxQUJFMzA4RjREM0YyMUJCREIyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Vo8vKhsBICL7W6lUDfQMGrF5
YnB4EXJVyB50ccvh7pkm33MJfqR7MtEbkBGBgXHRDpmywyd2G4yF50h1EmbmjEsx
uyoWkTQw548tqS8E9Bud7uM1zzUw2ReTDTSeJzWHOq11wLbmBJ7Vnz/Y2MAeO3Mz
zw8qsdMCYA4qzmnJ6xXDnfFFVWwGf5YwfpOBac9YFoTYTQh5+PkoEsDnlhP5vzbZ
tiqcTewAhP1pz8S20JggXZrVz712Ldyj03svdJajXvSQTkjv1VdioYKUvfbps3Ao
wHh35Ask42CzDJxus5dlOhQyolJyhWpKCZMz0nfSRlHJf70MblgQDx+1KwtJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUHgc5TErzuXFYMavjCPTT8hu9smswHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwODQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BR3AMA0GCSqGSIb3DQEBCwUAA4IBAQACU7+fDLG103F3B4W0K1g7iWalnQP/+A71
qQKslNoD4RF2gxbfsmBBNrg/e4u78iApWuTY2JHwjIajw4d46sNeWu/fj6sTv0r5
TTN5/g/NLfN6SVkSKcgNFbQmtqHi8Js6kKiaFlcMOoQqkSniCjwxPTO1dGC9r8bR
0u4nCEUQ5R08roowSSzyA/ZKL+N/neliIwghv+5eZ+6K8DleZSKxu0SkLwEJPQRt
emwmY7Qm6PCwTsWuNna4+lxVGpV4jlIZFFEsAcGzxyFkwRuhpm96jnqZmlTvnW14
UZgZakWcIVxdR6NzFZ9y3DA0BFoTwTfjGVXHVbvyjHvjQ7TLR+CP
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org