Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200882.roa
File: AS200882.roa (raw, json)
Hash identifier: Mnt9nkTS324tAR06AMMHnuSr1oLVoEwlgzY9JfD4VK0=
Subject key identifier: BB:C7:F6:ED:3B:1D:63:13:37:2B:21:40:DB:E6:DC:8F:A7:62:CC:E1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5EA9C09C3DF49847C471CD45DFC6C227148550F5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200882.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 200882
IP address blocks: 2a06:a005:2530::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a9:c0:9c:3d:f4:98:47:c4:71:cd:45:df:c6:c2:27:14:85:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=BBC7F6ED3B1D6313372B2140DBE6DC8FA762CCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:4b:2b:a9:3a:1a:b7:db:97:69:d6:01:0d:
60:dd:39:c3:e4:38:5b:5b:22:01:f1:93:4e:60:b6:
a8:d1:d5:50:77:8b:d8:c6:6c:a6:7a:47:52:cc:d9:
5a:ad:39:4e:5e:0d:d6:05:29:3b:28:c9:a9:a4:f5:
70:3a:d8:8b:1f:bb:df:17:5b:2c:b4:6c:5c:90:c3:
bb:a6:f2:ee:79:9b:08:e8:f1:fd:77:f5:39:4d:83:
f8:46:c9:61:b7:45:bd:2b:24:e3:63:27:4c:6d:16:
3c:f3:2d:09:66:ce:69:44:18:27:fb:b3:32:88:da:
3c:59:aa:dd:be:e6:3d:4c:0f:c1:61:ce:03:ea:c7:
fd:eb:56:dd:c6:cc:54:0b:90:b2:8b:e8:ec:ac:c3:
12:1e:8c:db:5e:db:e9:39:f4:f9:8c:4f:26:5a:b3:
01:c9:2f:8f:87:e9:58:d0:30:68:33:63:a4:9f:7b:
44:8f:8b:29:57:44:c6:ae:4b:4a:33:31:b0:9b:08:
e3:09:47:12:aa:a6:60:2b:21:60:d6:f6:f6:9c:b4:
aa:76:f9:9c:d9:cf:9b:02:2b:f6:08:77:bf:ce:59:
d6:83:e7:f9:59:11:6f:9d:43:5c:a1:de:45:2f:db:
be:71:c9:92:ef:5d:98:f2:79:66:c4:f6:32:f1:c2:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:F6:ED:3B:1D:63:13:37:2B:21:40:DB:E6:DC:8F:A7:62:CC:E1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2530::/44
Signature Algorithm: sha256WithRSAEncryption
0c:cd:f4:5b:6b:ab:50:c1:b5:4b:77:07:ee:f7:2f:46:81:55:
b5:b1:8b:28:e7:71:87:3b:55:df:68:ca:e5:3e:cf:7e:ce:0a:
bb:62:dd:4c:c2:2b:e1:13:66:a6:64:42:90:06:14:aa:43:31:
db:f5:a7:ef:d5:08:10:d7:53:82:90:ed:8d:23:1b:e9:a1:36:
5e:44:0a:c8:61:1a:b6:71:63:74:dd:e6:e1:c0:ce:0c:d2:85:
7b:ec:12:24:22:fb:12:ea:ec:55:e1:d2:21:73:83:eb:6a:53:
b6:64:c0:e3:27:f4:0b:56:2c:25:b6:5b:0d:72:67:7f:47:f7:
1b:d6:fa:70:3f:94:ad:df:0d:4a:91:da:5c:38:ef:00:ff:a3:
b6:00:30:48:04:21:61:65:67:35:0c:02:0c:e1:56:1b:5c:8a:
c2:d3:75:b2:6e:60:8e:bb:02:75:a4:c4:fd:95:0d:21:0a:61:
9d:4a:16:1a:a8:e7:a0:29:4a:2a:d5:44:8a:e9:cb:4e:76:05:
61:3d:2a:7a:76:6d:b1:59:2c:f1:7d:c1:c7:79:9a:71:d4:59:
00:06:1f:21:4a:d8:fe:48:7e:e1:10:1e:d1:2c:53:6c:60:17:
94:d7:22:f9:cd:15:da:e8:54:47:c0:92:34:07:fa:f0:e5:29:
e2:94:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org