Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200890.roa
File: AS200890.roa (raw, json)
Hash identifier: PhU3+ddVr9kXT1aq4nPU1ItFWOXhZe37xfIqwIh+6lc=
Subject key identifier: CD:62:4D:2A:98:EE:63:10:8A:76:7B:43:D9:57:50:FA:29:8E:09:36
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 633019F3AAC4C7B7AE2AC79817EA716DEF0BB1E1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200890.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 200890
IP address blocks: 2a06:a005:1b60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:30:19:f3:aa:c4:c7:b7:ae:2a:c7:98:17:ea:71:6d:ef:0b:b1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=CD624D2A98EE63108A767B43D95750FA298E0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:63:c1:c5:c4:b6:ef:15:59:da:a9:e3:db:
83:8f:1a:a5:25:99:e8:84:fd:d2:28:e8:ca:09:8c:
67:bb:10:cc:1a:41:38:cc:c5:fe:d2:a5:cb:3f:f6:
bd:40:95:4f:bd:0d:da:9e:34:80:a9:5f:3d:db:2e:
5b:1e:97:59:db:1c:48:4c:fc:c2:4e:0a:5a:f9:5e:
6f:2a:73:d8:a7:fe:62:ec:4b:d5:43:92:df:1d:89:
80:35:6d:05:dd:4d:26:19:ad:24:db:ca:8c:02:05:
94:c5:2a:70:82:d7:59:51:d5:26:45:cd:f7:f4:bd:
c9:1b:f7:23:eb:9d:ad:c0:0d:44:d7:e9:aa:97:f0:
7e:22:41:9d:d3:16:11:12:c5:e7:7a:84:90:a6:a8:
68:9c:17:a0:fb:dd:13:55:6d:90:43:b0:82:f6:fa:
80:4f:48:02:2b:e7:89:19:7c:58:f4:0b:1f:cd:92:
fa:75:a6:07:32:44:04:e0:7c:cf:71:3e:51:58:fd:
df:e2:1f:53:1d:46:68:bb:9c:44:8d:34:ca:47:39:
ff:82:7b:17:51:86:cc:98:e8:e1:14:d0:e5:5a:60:
79:7d:d8:16:f0:a4:7d:2b:e2:7e:00:c5:b1:4c:1b:
cc:ef:97:d9:9f:2a:32:0e:4f:a9:44:d0:e0:a8:a4:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:4D:2A:98:EE:63:10:8A:76:7B:43:D9:57:50:FA:29:8E:09:36
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
6d:d6:ca:87:24:58:d6:bf:a2:fd:0a:4c:db:3e:2d:b7:b4:fe:
c2:a7:3d:77:aa:d5:d1:ba:6d:c3:da:c9:08:81:74:21:46:94:
0f:d1:6d:de:dc:cd:6b:9d:09:8a:dc:9a:0e:e9:b5:e1:6d:af:
d0:1c:13:26:09:19:93:09:01:c5:26:2b:7c:77:08:b8:be:8c:
a2:17:78:66:c1:8a:15:66:56:f2:02:b8:6c:c5:ac:98:8c:9f:
b6:7e:5b:37:4b:bd:84:fa:5e:38:ac:f0:d1:61:02:2a:fd:26:
31:1f:98:5c:51:ef:a7:e8:f2:f9:8e:69:00:70:4e:5a:c0:f7:
bf:45:0b:85:3b:52:9f:ce:77:ca:29:a0:ed:eb:d1:ea:85:4f:
98:07:32:f0:d3:b6:21:da:b3:20:b9:92:dc:15:5c:fc:ee:e6:
f0:af:f1:7c:aa:1c:c6:10:89:af:f6:ac:53:31:96:9d:85:5d:
df:0a:47:60:10:2d:cb:d1:bb:55:b1:cb:aa:ac:6b:9b:93:39:
e6:8f:4e:e2:60:a5:c0:81:7b:34:f5:86:56:61:92:27:a1:5c:
8f:07:5e:86:2a:9f:3d:3e:ef:3b:e9:a3:bc:32:c0:43:d9:16:
d9:e2:16:d3:f9:69:4b:5a:81:b8:38:e2:a9:3d:fd:05:53:6e:
d2:66:f4:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYzAZ86rEx7euKseYF+pxbe8LseEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjJaFw0yMzEyMzEyMzU5MjJaMDMxMTAvBgNV
BAMTKENENjI0RDJBOThFRTYzMTA4QTc2N0I0M0Q5NTc1MEZBMjk4RTA5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeWPBxcS27xVZ2qnj24OPGqUl
meiE/dIo6MoJjGe7EMwaQTjMxf7Spcs/9r1AlU+9DdqeNICpXz3bLlsel1nbHEhM
/MJOClr5Xm8qc9in/mLsS9VDkt8diYA1bQXdTSYZrSTbyowCBZTFKnCC11lR1SZF
zff0vckb9yPrna3ADUTX6aqX8H4iQZ3TFhESxed6hJCmqGicF6D73RNVbZBDsIL2
+oBPSAIr54kZfFj0Cx/Nkvp1pgcyRATgfM9xPlFY/d/iH1MdRmi7nESNNMpHOf+C
exdRhsyY6OEU0OVaYHl92BbwpH0r4n4AxbFMG8zvl9mfKjIOT6lE0OCopAcRAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUzWJNKpjuYxCKdntD2VdQ+imOCTYwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwODkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BRtgMA0GCSqGSIb3DQEBCwUAA4IBAQBt1sqHJFjWv6L9CkzbPi23tP7Cpz13qtXR
um3D2skIgXQhRpQP0W3e3M1rnQmK3JoO6bXhba/QHBMmCRmTCQHFJit8dwi4voyi
F3hmwYoVZlbyArhsxayYjJ+2fls3S72E+l44rPDRYQIq/SYxH5hcUe+n6PL5jmkA
cE5awPe/RQuFO1KfznfKKaDt69HqhU+YBzLw07Yh2rMguZLcFVz87ubwr/F8qhzG
EImv9qxTMZadhV3fCkdgEC3L0btVscuqrGubkznmj07iYKXAgXs09YZWYZInoVyP
B16GKp89Pu876aO8MsBD2RbZ4hbT+WlLWoG4OOKpPf0FU27SZvT8
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:42 2025 by rpki-client