Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200895.roa
File: AS200895.roa (raw, json)
Hash identifier: UZC+vx7mWTnuScV0gIEIUeTEtursWqvPgGptyejn50Y=
Subject key identifier: DB:E4:43:E1:F5:EA:6B:23:FD:68:7D:32:FF:B9:18:76:D3:2A:9D:38
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1E7919FC0F2F9EADABFED881D0C5D2D27020D86B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200895.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 200895
IP address blocks: 2a06:a005:1890::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:79:19:fc:0f:2f:9e:ad:ab:fe:d8:81:d0:c5:d2:d2:70:20:d8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=DBE443E1F5EA6B23FD687D32FFB91876D32A9D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:0f:ef:9d:d8:00:7c:e4:b0:50:67:38:05:
73:4e:93:32:ef:bc:ad:43:61:79:06:66:be:78:65:
ca:15:70:17:e4:0f:2d:9f:47:7c:e2:a6:c7:9b:ac:
f3:a9:55:76:3e:e7:0b:e1:80:e3:85:1a:a6:f1:84:
c0:51:27:3a:cb:20:51:e8:fc:0d:4a:f4:41:d4:fd:
f3:00:12:cb:fa:fd:7d:d9:a9:10:cb:34:03:ac:62:
b5:97:ea:02:ef:bc:24:9f:96:13:3a:85:c0:93:d0:
8a:0c:59:4d:34:9a:7b:f0:0e:52:f3:ac:91:15:45:
71:ee:9e:7e:60:18:89:2d:4b:0b:c5:da:9c:90:87:
a2:23:a4:a2:51:af:bd:3d:57:51:fb:df:0a:c0:d5:
8a:95:2a:50:60:36:bd:71:ee:07:9c:21:d6:80:45:
63:d1:2b:7a:a7:6a:b8:b0:66:e4:06:8c:cf:1c:9e:
15:48:b9:ab:98:39:d5:17:52:73:b2:e3:cc:71:20:
76:35:9e:61:f9:35:ba:ab:8b:9d:ab:c8:67:c0:ae:
8a:f6:2a:7f:0d:d4:ae:4b:8d:3f:d2:50:d1:a5:8a:
c2:e1:ae:dd:cc:66:cf:73:12:e3:a1:2a:28:0e:44:
e9:5a:2e:42:1e:92:d5:ce:3e:b6:c8:63:27:47:fe:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E4:43:E1:F5:EA:6B:23:FD:68:7D:32:FF:B9:18:76:D3:2A:9D:38
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1890::/44
Signature Algorithm: sha256WithRSAEncryption
75:67:1e:7d:93:18:a0:3b:ec:61:4c:4b:75:64:d7:ad:6e:2c:
21:02:c8:2d:0e:a6:19:8f:70:cb:f7:ef:6d:e3:37:72:fe:73:
dc:b9:4d:32:66:b8:3e:a2:0e:b6:e1:47:76:fd:66:f7:c8:20:
73:2b:c9:57:3a:7f:cc:c2:50:0c:99:81:6b:74:18:ed:98:66:
df:9e:68:c0:50:ba:70:63:76:5c:9d:95:79:8f:bd:d8:53:9c:
fb:9c:8b:58:aa:bc:82:c7:87:81:e8:12:01:b4:90:dc:da:3e:
bf:40:aa:f2:3c:70:c3:87:7c:2b:59:0a:ba:42:2c:93:42:50:
bf:9b:58:65:3c:f1:d3:0a:c0:7e:67:d1:c4:0c:65:32:3c:eb:
27:9c:ee:84:a7:5f:2c:d7:5f:58:6c:ef:e0:fc:e7:ea:dd:b2:
1a:45:7c:07:9b:e8:fa:fc:36:83:f4:dc:53:51:60:ed:f9:3e:
ad:e2:e2:32:b6:10:6d:5e:c5:ae:e5:2b:ad:c1:7c:e1:a4:66:
96:81:a0:aa:e8:f4:ba:87:1f:c6:14:b4:e9:3a:07:6f:70:fb:
37:cf:10:32:63:24:54:6c:8c:9d:08:68:85:66:a1:47:c8:d9:
30:4c:26:89:1d:4b:c5:5e:d5:37:54:e8:a2:aa:1d:46:58:60:
96:2e:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org