Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200879.roa
File: AS200879.roa (raw, json)
Hash identifier: QCnBPs6pdUCxWM58Cn8katDQb/JwTtjfXZkMM7GKnj8=
Subject key identifier: 81:4B:E6:DD:6F:BE:D0:68:E7:6D:7B:36:E7:69:AA:B8:71:F3:B3:BF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 108EE3E7BD78B2FD63436555945D9FF64B440568
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200879.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 200879
IP address blocks: 2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8e:e3:e7:bd:78:b2:fd:63:43:65:55:94:5d:9f:f6:4b:44:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=814BE6DD6FBED068E76D7B36E769AAB871F3B3BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:df:cf:e2:2c:7c:8a:16:d9:cb:67:86:e1:
d7:76:66:07:46:7e:25:ba:f8:a0:1e:c4:08:cd:4a:
20:73:f0:85:e6:49:f5:ad:31:63:e5:15:7e:5d:04:
e2:e4:65:e0:ca:bb:8d:e4:45:eb:b9:ec:0c:ea:53:
0f:e2:24:ab:ff:82:4a:1e:8b:77:38:09:fe:21:cb:
64:04:7f:69:1f:7f:c8:0d:f8:c1:a1:e3:b9:87:b2:
c8:2e:39:fa:45:f4:a2:39:05:12:10:f0:2c:c8:36:
5b:75:f6:7a:87:50:d5:f6:91:0d:28:da:8d:ed:d1:
fe:39:5a:f3:55:97:9f:0d:6e:e0:39:d4:06:be:c2:
1e:f7:5b:11:85:a7:c5:f2:a9:ab:1b:03:02:8e:02:
11:fd:a2:99:b4:b5:2e:17:31:78:58:3a:b4:c8:8c:
a9:34:62:0a:78:d0:ff:ef:e6:85:26:d3:b0:13:da:
73:e4:33:5d:3b:da:a1:c9:ba:b4:27:10:35:a2:1f:
3a:23:a4:09:5f:c1:49:ad:11:13:86:fe:88:76:81:
ab:eb:45:b7:2b:25:ad:aa:c6:3f:01:be:a3:42:54:
46:c8:88:0e:c3:03:db:36:e0:56:87:b9:2d:75:bb:
c2:c4:ea:75:44:0e:65:5b:c6:cb:76:b2:9d:ea:40:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4B:E6:DD:6F:BE:D0:68:E7:6D:7B:36:E7:69:AA:B8:71:F3:B3:BF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
Signature Algorithm: sha256WithRSAEncryption
4f:d4:40:32:16:cc:a5:4b:e6:80:ce:e2:31:1b:b3:f5:e9:bc:
67:d5:bc:56:97:05:ab:f6:04:da:d0:18:62:75:b8:6f:41:bc:
0c:aa:76:43:37:f4:68:8e:11:c5:84:85:bc:f8:c9:a5:ec:17:
54:72:c3:52:97:08:78:2b:2b:99:0d:55:39:56:f2:29:8d:2d:
0f:c3:c9:88:31:ae:44:04:e1:75:d3:21:0e:03:3f:53:a8:fb:
81:3f:83:1c:86:3f:b6:8d:fd:d4:7d:46:99:62:c2:6d:b4:6c:
8e:67:7c:e0:9d:52:a1:a9:6c:53:57:1f:1d:ef:79:a5:c2:5c:
cd:dc:0d:eb:7d:c2:5e:9a:41:c4:d3:ee:7a:b9:f0:92:3c:4d:
2a:88:10:31:b3:52:48:e8:fa:92:ee:34:29:8e:54:1e:24:c3:
f9:60:22:8a:d4:70:c6:32:38:9d:d8:fc:40:8c:2c:0c:4d:16:
27:ac:3b:c8:ca:c1:56:92:2e:10:9f:d6:54:ee:02:d0:26:23:
76:e6:3f:32:c2:b8:cc:7f:75:5e:8a:32:2c:f0:78:4a:51:66:
0f:28:3d:0c:00:56:95:c8:9e:82:2e:aa:51:fa:4b:e2:61:45:
04:87:6b:40:0e:74:4d:ee:ac:ef:d9:ff:a2:f8:a4:74:21:76:
b0:bf:55:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUEI7j5714sv1jQ2VVlF2f9ktEBWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDgxNEJFNkRENkZCRUQwNjhFNzZEN0IzNkU3NjlBQUI4NzFGM0IzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HN/P4ix8ihbZy2eG4dd2ZgdG
fiW6+KAexAjNSiBz8IXmSfWtMWPlFX5dBOLkZeDKu43kReu57AzqUw/iJKv/gkoe
i3c4Cf4hy2QEf2kff8gN+MGh47mHssguOfpF9KI5BRIQ8CzINlt19nqHUNX2kQ0o
2o3t0f45WvNVl58NbuA51Aa+wh73WxGFp8XyqasbAwKOAhH9opm0tS4XMXhYOrTI
jKk0Ygp40P/v5oUm07AT2nPkM1072qHJurQnEDWiHzojpAlfwUmtEROG/oh2gavr
RbcrJa2qxj8BvqNCVEbIiA7DA9s24FaHuS11u8LE6nVEDmVbxst2sp3qQB77AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUgUvm3W++0GjnbXs252mquHHzs78wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwODc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQAGMA0GCSqGSIb3DQEBCwUAA4IBAQBP1EAyFsylS+aAzuIxG7P16bxn1bxWlwWr
9gTa0BhidbhvQbwMqnZDN/RojhHFhIW8+Mml7BdUcsNSlwh4KyuZDVU5VvIpjS0P
w8mIMa5EBOF10yEOAz9TqPuBP4Mchj+2jf3UfUaZYsJttGyOZ3zgnVKhqWxTVx8d
73mlwlzN3A3rfcJemkHE0+56ufCSPE0qiBAxs1JI6PqS7jQpjlQeJMP5YCKK1HDG
Mjid2PxAjCwMTRYnrDvIysFWki4Qn9ZU7gLQJiN25j8ywrjMf3VeijIs8HhKUWYP
KD0MAFaVyJ6CLqpR+kviYUUEh2tADnRN7qzv2f+i+KR0IXawv1XT
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:54 2025 by rpki-client