Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200872.roa
File: AS200872.roa (raw, json)
Hash identifier: 9yEAD3yVywEWjQ85GQT6SVVdTSeqcQLdkujzfrRdp5s=
Subject key identifier: 37:96:A2:E7:E8:8B:6D:D7:A0:93:10:57:87:5D:D0:A2:C9:D7:AA:5E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 562328B1503405178D155C8331BF54AC6EA64DE6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200872.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 200872
IP address blocks: 2a06:a005:24f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:23:28:b1:50:34:05:17:8d:15:5c:83:31:bf:54:ac:6e:a6:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=3796A2E7E88B6DD7A0931057875DD0A2C9D7AA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:fe:7b:5b:17:50:ff:a3:6f:81:52:b2:be:
3e:a3:06:4b:4b:63:06:57:eb:e4:67:fb:c7:4b:c4:
ff:60:61:cd:79:b4:3e:63:a0:fa:fa:bf:7f:83:b1:
f9:5f:9b:8a:0e:99:de:25:b9:1a:da:ea:07:ba:74:
1f:9e:f0:f2:04:b2:85:ca:aa:ba:8b:fe:26:cb:ae:
90:37:bc:f0:65:c3:d2:64:46:73:52:4d:45:32:f4:
60:26:c7:43:d6:20:aa:94:19:11:66:e4:74:b2:0e:
a0:13:e6:57:98:31:e5:0a:07:65:35:51:e3:e5:14:
e1:8f:a1:44:70:b9:52:6b:51:9f:a2:51:95:6a:e4:
85:6a:10:e3:8c:e2:a0:84:a0:d0:ee:ee:23:16:ab:
03:e2:1a:29:68:7f:bf:98:f2:b8:25:7f:d6:7c:2b:
b2:44:7b:3f:c9:4d:5e:35:2d:ce:ba:6f:fe:57:0b:
57:1c:e7:4b:01:af:9b:35:0e:ed:0a:3e:fd:32:28:
37:95:b9:4b:d2:c7:5e:0a:c5:c7:c3:4f:23:7b:84:
86:47:2c:2a:25:c5:63:6b:7f:fd:60:af:6d:7f:af:
1f:92:e3:ad:98:d1:7d:a5:1b:38:66:c8:6b:70:67:
84:35:01:20:5e:eb:fe:8f:1e:cc:ce:08:83:71:d5:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:A2:E7:E8:8B:6D:D7:A0:93:10:57:87:5D:D0:A2:C9:D7:AA:5E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24f0::/44
Signature Algorithm: sha256WithRSAEncryption
28:90:d9:e4:2e:d7:a0:7f:cb:39:ba:39:21:f5:4e:0c:62:6d:
39:c2:66:8d:1d:b0:de:86:01:77:b3:2d:0f:e9:33:2d:da:8c:
6e:31:26:2c:44:01:df:5d:f9:1f:ba:50:a6:1b:69:19:b9:b0:
4d:f7:f0:78:ae:bc:73:5b:56:44:f6:5f:62:23:12:f8:9f:39:
61:62:39:44:d5:7a:97:22:07:e1:83:61:ef:12:51:bb:8c:05:
f6:fa:86:e5:db:07:1a:08:1f:9f:fa:03:98:48:e1:80:2d:72:
d6:2b:1d:e6:9d:58:86:a8:58:a7:75:70:01:ea:29:28:78:53:
f6:5f:52:0a:41:05:30:c8:e2:1e:8b:eb:1a:ce:b5:ad:1b:bc:
19:ec:29:d3:1c:1d:60:36:a8:80:08:a9:73:82:68:35:5e:57:
1e:60:1a:77:8d:98:76:68:00:23:b7:03:63:fc:39:1c:c2:43:
b2:8f:c6:78:98:e7:5c:56:8f:64:d1:62:a9:d6:42:d8:47:c1:
7c:27:a1:9d:d2:5f:c2:7b:32:c3:57:a2:d0:45:3c:39:c1:b9:
0c:71:00:6a:6f:45:1c:df:f2:b8:2f:a2:10:fc:a8:86:f1:da:
bd:b4:8c:c1:54:27:e5:27:ba:25:90:67:8f:b4:47:f2:ed:06:
73:ef:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:05 2025 by rpki-client