Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200897.roa
File: AS200897.roa (raw, json)
Hash identifier: 8+ZuJOr/purmjbu2cU3e9vTducCGIu8BCCCB1/RgW4Y=
Subject key identifier: 64:CB:04:EC:26:3D:D0:C4:70:45:16:71:6A:EB:B8:92:63:18:24:AF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3283768F54D394449CFFA6EDE29AC94AA63AD503
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200897.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 200897
IP address blocks: 2a06:a005:5b9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:83:76:8f:54:d3:94:44:9c:ff:a6:ed:e2:9a:c9:4a:a6:3a:d5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=64CB04EC263DD0C4704516716AEBB892631824AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:71:69:64:c8:01:ea:72:e2:12:2f:53:6f:46:
48:20:d0:f9:8c:77:9b:6d:a3:ad:3b:0d:f5:b1:9e:
f6:83:94:71:e2:03:17:33:ce:52:a8:63:30:e8:18:
fb:50:19:b2:3f:20:60:9b:ce:74:af:80:19:f5:6a:
b0:c4:9d:17:6f:60:ac:bc:1c:fb:3e:11:1f:fa:3f:
b0:e3:4e:bc:c6:db:5a:aa:60:45:5f:e0:fa:8d:99:
fd:9b:06:55:e9:5c:f2:d1:28:d0:64:b5:e3:c4:72:
aa:74:df:fc:76:f3:58:71:14:50:1f:73:98:e5:ca:
0f:3a:5e:42:71:b1:c5:9b:e7:c2:ee:78:a8:55:41:
c6:21:5b:43:d3:13:a8:3a:48:70:df:80:75:f6:1d:
b1:06:59:da:90:b3:c8:6f:62:8c:b6:57:2f:b6:fd:
0d:ea:42:6f:95:9b:49:e2:34:36:96:9e:8e:45:fe:
65:54:7c:4c:69:df:d4:95:94:3e:a8:cf:19:9f:cc:
d0:7b:0e:76:42:c6:6b:d3:7d:a3:6a:9d:68:8d:24:
ff:c5:27:77:34:c7:4f:1b:5a:26:98:d0:9f:3d:4e:
c4:70:69:0f:d3:4b:08:20:54:1d:a5:18:c5:08:eb:
84:c8:3b:77:74:fd:b3:b3:89:e7:b9:f4:91:ec:da:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CB:04:EC:26:3D:D0:C4:70:45:16:71:6A:EB:B8:92:63:18:24:AF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b9::/48
Signature Algorithm: sha256WithRSAEncryption
82:6b:11:92:bd:09:b9:e6:57:b8:36:27:24:8e:87:88:f9:2f:
c8:e2:bb:0c:72:54:83:61:a1:67:da:eb:2a:f4:80:26:4a:13:
e3:cb:41:04:f3:46:25:f6:b0:ee:ed:f7:e0:3d:21:38:44:f4:
30:82:cd:b1:a8:5e:b8:eb:dc:68:84:10:e8:df:82:4a:04:2f:
1d:66:6b:27:35:f8:a9:2e:4a:f6:87:5a:34:57:1f:cd:98:14:
28:5b:a4:f8:66:7e:63:ba:42:6a:36:a6:5a:e5:ee:fe:d0:66:
e4:67:9f:2c:aa:16:aa:a4:35:ee:d6:9d:45:95:77:67:e3:b8:
78:c1:e8:8b:32:cc:94:19:6b:b3:72:3e:fd:c1:61:3e:ae:29:
e6:94:db:d4:d9:d4:56:a6:d5:39:c5:81:3e:d3:93:1c:09:46:
f2:10:64:dc:94:77:df:00:9f:21:0d:f1:bb:c7:9f:c7:09:e8:
a5:d5:ad:b0:26:84:22:1c:62:ce:b5:ba:2b:b0:1d:56:e8:a2:
ae:a0:8b:77:86:dc:8b:97:bd:55:f3:ba:ac:9a:d0:b5:66:8b:
65:2d:e6:04:44:e4:8b:ca:ca:dd:9a:d1:f3:f1:7f:e5:bb:b2:
95:d5:bc:c9:39:29:56:2a:f8:7b:5f:56:35:40:a4:0b:89:58:
3d:5f:ed:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUMoN2j1TTlESc/6bt4prJSqY61QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjFaFw0yMzEyMzEyMzU5MjFaMDMxMTAvBgNV
BAMTKDY0Q0IwNEVDMjYzREQwQzQ3MDQ1MTY3MTZBRUJCODkyNjMxODI0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1cWlkyAHqcuISL1NvRkgg0PmM
d5tto607DfWxnvaDlHHiAxczzlKoYzDoGPtQGbI/IGCbznSvgBn1arDEnRdvYKy8
HPs+ER/6P7DjTrzG21qqYEVf4PqNmf2bBlXpXPLRKNBktePEcqp03/x281hxFFAf
c5jlyg86XkJxscWb58LueKhVQcYhW0PTE6g6SHDfgHX2HbEGWdqQs8hvYoy2Vy+2
/Q3qQm+Vm0niNDaWno5F/mVUfExp39SVlD6ozxmfzNB7DnZCxmvTfaNqnWiNJP/F
J3c0x08bWiaY0J89TsRwaQ/TSwggVB2lGMUI64TIO3d0/bOziee59JHs2qCvAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUZMsE7CY90MRwRRZxauu4kmMYJK8wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQW5MA0GCSqGSIb3DQEBCwUAA4IBAQCCaxGSvQm55le4NickjoeI+S/I4rsMclSD
YaFn2usq9IAmShPjy0EE80Yl9rDu7ffgPSE4RPQwgs2xqF6469xohBDo34JKBC8d
ZmsnNfipLkr2h1o0Vx/NmBQoW6T4Zn5jukJqNqZa5e7+0GbkZ58sqhaqpDXu1p1F
lXdn47h4weiLMsyUGWuzcj79wWE+rinmlNvU2dRWptU5xYE+05McCUbyEGTclHff
AJ8hDfG7x5/HCeil1a2wJoQiHGLOtborsB1W6KKuoIt3htyLl71V87qsmtC1Zotl
LeYEROSLysrdmtHz8X/lu7KV1bzJOSlWKvh7X1Y1QKQLiVg9X+29
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org