Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200866.roa
File: AS200866.roa (raw, json)
Hash identifier: 5CzlZ3en1p0YEQXSDHjBVs0kI58vo//uHUD8Y8gXDM4=
Subject key identifier: 15:41:EE:1D:30:A6:0E:7F:66:15:EC:F7:0F:F5:49:F6:93:53:6A:47
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 662F3810300D0A58E04F5E165EF8A2A6DD453E2A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200866.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 200866
IP address blocks: 2a06:a005:2370::/44 maxlen: 48
2a06:a005:26e0::/44 maxlen: 48
2a06:a005:26f0::/44 maxlen: 48
2a06:a005:2700::/44 maxlen: 48
2a06:a005:2710::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2f:38:10:30:0d:0a:58:e0:4f:5e:16:5e:f8:a2:a6:dd:45:3e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=1541EE1D30A60E7F6615ECF70FF549F693536A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:21:cf:db:4c:5a:b1:3f:98:0d:ac:a5:03:
fc:e8:c6:90:9e:5d:30:40:32:9e:c7:34:9b:e0:07:
4d:31:5e:81:92:cb:db:d5:70:fd:d4:a1:1f:7f:0e:
58:aa:5b:0b:b3:fe:35:d7:25:bf:c7:89:59:79:f0:
2b:a4:bd:2a:39:ea:46:7f:49:a7:aa:25:72:0e:7c:
8e:38:c4:95:7d:6e:76:13:50:71:59:bf:38:69:d8:
bd:79:fc:83:17:4c:bc:7d:02:f8:65:53:0f:c2:33:
ce:8b:2c:98:6f:01:4e:f3:e5:d9:90:a4:a3:36:d8:
f8:bb:d3:c1:89:61:47:5c:25:d2:08:e9:cc:12:37:
23:6f:bb:95:82:e2:0b:69:13:3b:1d:8b:e8:2e:aa:
a4:7b:39:b1:fb:10:4c:ef:9f:34:e9:5c:ef:e3:3d:
19:49:27:a4:36:a1:dd:34:80:00:3b:c2:ae:34:a0:
b0:22:32:ef:61:b3:c6:0f:a7:7c:ca:41:b9:76:da:
13:a8:b8:0f:e7:86:4a:a6:b1:08:3c:d3:76:b7:e5:
7c:b1:cf:5e:64:61:ed:66:73:87:ab:5b:8c:14:6b:
7c:1f:51:0e:c3:82:20:d0:46:bf:ca:7e:7f:15:8c:
aa:b9:75:6c:aa:25:5d:08:ac:f3:dd:f7:35:22:b8:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:EE:1D:30:A6:0E:7F:66:15:EC:F7:0F:F5:49:F6:93:53:6A:47
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2370::/44
2a06:a005:26e0::-2a06:a005:271f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:8a:b1:33:2e:9d:ec:88:3e:82:7f:5a:57:84:bf:27:30:71:
01:dd:ae:4d:2c:08:ca:3f:c8:0e:45:d7:85:55:8e:59:7d:a9:
10:2e:cd:88:30:b5:1a:bb:81:00:72:3d:0e:8e:2b:41:b8:33:
1b:fa:f2:d3:9a:4f:46:21:76:81:fa:ad:d7:66:a1:07:59:0b:
13:ac:71:4c:3e:77:15:df:54:9b:61:d7:08:b3:84:68:0e:89:
43:16:b5:6d:28:0c:b0:e3:cf:0a:91:c0:58:65:2f:f8:c5:c2:
98:db:ad:cb:b5:9b:3f:a5:45:af:53:e3:f2:55:6a:86:69:4d:
86:6a:af:c6:e7:a3:fc:32:9a:cb:e6:d6:85:63:4e:ae:19:e4:
25:9b:f9:87:51:34:fc:03:21:c7:2a:ce:67:a9:25:33:14:ba:
61:5a:e2:42:5f:1c:5e:d4:50:55:ac:04:d8:0c:8d:3b:ff:3d:
88:fe:76:f1:7e:39:16:7d:98:53:c6:ac:20:99:06:cf:d9:71:
3e:61:b4:a3:0b:4c:76:07:e4:1e:98:5c:53:ec:2e:5c:ca:5e:
e5:c8:7e:57:87:f1:67:45:09:3d:13:81:9a:93:1c:2f:b6:bc:
7c:c0:d5:c6:be:8e:c9:73:e4:57:e3:b5:5f:44:3e:ff:7e:6e:
98:3a:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org