Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200885.roa
File: AS200885.roa (raw, json)
Hash identifier: reObWDI6B1zRDBggXon6ZWjk05HRwaGJtDCrwSn+75U=
Subject key identifier: 4A:3E:B0:98:B2:C6:08:07:10:CC:7F:A8:CC:0F:2B:27:6F:1F:55:EA
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2109DCE4E9524ABA30A9DEB16DF988A60CDEBA29
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200885.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 200885
IP address blocks: 2a06:a005:5::/48 maxlen: 48
2a06:a005:26d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:09:dc:e4:e9:52:4a:ba:30:a9:de:b1:6d:f9:88:a6:0c:de:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=4A3EB098B2C6080710CC7FA8CC0F2B276F1F55EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:ac:c9:79:96:f6:f7:00:1b:b4:9b:70:5d:
38:80:86:40:1e:a8:c5:1f:c7:4b:4c:1d:e6:3a:4c:
79:b7:4f:67:dc:2c:56:28:75:b2:11:ec:6c:bc:12:
5f:8f:57:7c:26:dc:35:9f:a1:55:f3:27:f3:c4:79:
1f:ce:95:62:99:ca:ff:5e:42:a9:d6:37:fc:cd:71:
ec:df:c3:b8:85:4e:e1:71:71:46:d9:85:74:df:97:
07:83:9f:50:7e:07:60:a7:e7:30:15:81:6a:8c:11:
99:14:fb:55:78:cd:4d:68:c5:0c:5d:86:6a:39:a7:
17:3d:e6:0f:8b:ec:54:6f:86:4e:b5:88:03:15:67:
ab:99:40:35:14:1f:d4:10:ff:d7:be:a1:58:87:69:
89:92:d7:c7:f3:3d:c6:43:82:b8:0d:48:6c:96:e3:
9c:ec:7c:86:51:5e:16:30:b0:bf:b7:71:57:c6:67:
de:17:04:d7:68:89:7d:89:1f:78:07:d1:f5:12:2a:
60:93:3f:c0:5c:c5:cb:c0:51:4e:29:2a:a6:c2:cb:
74:80:56:58:f8:28:89:31:ed:7f:34:7a:ce:e4:8c:
53:ca:69:26:ac:6f:4d:4b:1c:c0:34:63:bf:a6:d9:
dc:ca:34:0d:10:db:29:bf:c4:2f:6a:b8:50:84:be:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:B0:98:B2:C6:08:07:10:CC:7F:A8:CC:0F:2B:27:6F:1F:55:EA
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5::/48
2a06:a005:26d0::/44
Signature Algorithm: sha256WithRSAEncryption
36:12:a4:97:8a:45:70:40:fb:fc:39:46:fb:af:17:5e:c9:78:
62:e1:9a:a5:9c:d9:e9:63:77:da:0f:5b:07:3a:3c:e7:f8:9b:
85:d0:4b:31:95:a5:7c:90:b7:cd:a8:0d:e5:50:14:c1:43:4f:
89:bf:29:30:88:49:0f:d6:2a:2a:d8:d8:b7:c6:f2:d1:b8:53:
35:ea:ac:ab:39:b4:d8:d7:c0:f7:ec:7f:86:e1:ea:3b:57:f1:
3a:67:e9:06:26:e0:74:90:08:d8:07:9a:40:90:b6:43:2f:38:
fa:6f:7e:60:a5:6e:0b:9d:21:a9:6a:3c:3b:cc:5b:62:18:94:
75:e5:0f:4a:bc:0e:58:0a:69:88:3e:1d:ad:68:5c:3b:25:a6:
ec:04:4e:2a:75:c5:f9:d0:64:d8:51:d1:6b:0f:c1:72:61:14:
d6:ac:15:cf:d9:f7:c4:9b:c2:bc:84:a3:7a:b2:01:fd:45:8e:
27:fe:f8:c8:3d:20:a3:49:97:9d:bb:2b:1a:9d:87:c2:fb:89:
0f:bb:c7:9b:7b:5d:ba:fe:07:68:6f:b9:49:e4:08:61:51:10:
ec:c5:bf:16:f0:c7:b2:5b:2f:ab:62:8c:02:93:02:52:01:b9:
a1:c0:76:93:0d:1a:68:c0:f5:a0:bb:e6:12:51:4c:79:15:33:
6a:7d:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org