Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200912.roa
File: AS200912.roa (raw, json)
Hash identifier: STjN/trS7nKjN/CKD++i9Rlr6Brft9BRgbBVjerKy8s=
Subject key identifier: 1E:9D:43:93:A9:1B:88:65:B0:16:14:99:76:1F:50:E1:32:C1:6D:37
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 28BCB7755461AA6D391CEDC379F9A7FE469F8C4D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200912.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 200912
IP address blocks: 2a06:a005:2500::/44 maxlen: 48
2a06:a005:2510::/44 maxlen: 48
2a06:a005:2520::/44 maxlen: 48
2a06:a005:25b0::/44 maxlen: 48
2a06:a005:25c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:b7:75:54:61:aa:6d:39:1c:ed:c3:79:f9:a7:fe:46:9f:8c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=1E9D4393A91B8865B0161499761F50E132C16D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:55:d3:63:fd:fe:cf:78:7d:8e:29:12:f3:
e2:a6:86:37:83:27:40:5f:b1:d7:cb:de:9a:38:79:
ca:dc:5b:cd:09:d3:9e:9b:11:5c:7c:e3:02:e4:ce:
26:b7:2e:d1:1f:96:ed:32:b1:f4:97:1e:85:ff:5c:
67:1e:8b:d1:92:27:55:38:de:37:7e:b6:c6:1e:65:
5b:ee:f5:0f:2b:0a:cd:10:dd:40:e8:69:3b:85:d6:
54:ba:72:30:2f:04:77:b6:fd:35:0b:92:ca:46:20:
62:a4:e4:6a:a3:23:4d:15:1e:79:66:66:dc:1d:7f:
79:16:42:f0:c1:bb:ea:13:57:0e:f9:45:a7:ac:36:
02:66:90:57:28:6c:52:c0:45:bd:64:78:71:76:4f:
f1:ea:54:e7:53:b9:81:d4:15:66:5d:99:bd:3d:89:
b7:7c:d9:d5:7c:1d:bf:57:e2:0c:f0:bd:a9:b7:a2:
4f:34:20:44:23:6e:a4:ad:4c:50:62:97:e2:96:c5:
73:ba:57:63:83:f4:e4:93:12:62:0d:71:92:37:ea:
e9:98:36:6e:3b:30:88:c5:03:84:3a:d4:22:1c:6f:
5f:fb:6d:c6:9e:d4:9c:bb:78:c8:3e:c6:74:ab:66:
47:50:a3:61:1a:00:03:0a:92:03:7f:f9:15:c3:4b:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:43:93:A9:1B:88:65:B0:16:14:99:76:1F:50:E1:32:C1:6D:37
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2500::-2a06:a005:252f:ffff:ffff:ffff:ffff:ffff
2a06:a005:25b0::-2a06:a005:25cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:7d:69:8b:5b:b1:31:17:4a:e4:00:ee:a3:95:65:8e:cb:69:
88:0f:d9:b9:d9:d8:89:17:ec:90:b8:cb:e8:30:61:c5:17:8a:
fa:d9:af:3b:57:77:b9:57:25:aa:8d:c9:6a:6f:0b:9f:89:ea:
7b:62:ea:4c:2d:7b:96:0d:e1:40:f0:fc:82:1a:36:ee:82:9e:
4a:fa:42:49:96:cf:3d:bf:35:b6:3c:3d:14:dc:2b:4c:7e:96:
b3:d6:41:d0:df:ae:fb:32:7a:c3:b1:fa:8c:87:ce:6c:bc:d3:
ca:2a:39:0b:bf:08:2e:27:08:b3:f3:fe:e0:3e:af:4a:64:c1:
b2:7c:a3:6a:b8:0c:51:02:64:f4:6f:a4:15:8f:2f:26:29:ca:
fd:d3:92:bf:1e:2a:4c:e9:2b:68:1b:d6:c3:56:8e:f7:b5:bf:
7f:a1:61:a9:08:4d:e3:e0:dc:1f:7d:17:55:7d:5e:e1:59:99:
00:05:3e:d8:b0:9e:f4:ff:b5:57:a0:95:1d:54:5f:ec:67:12:
00:fc:e6:d4:bd:24:c7:1f:60:6f:eb:b4:ab:1b:69:07:b2:02:
43:c8:64:e2:30:25:5e:87:71:fa:5b:f7:89:58:8e:bf:e0:13:
e7:a0:17:e7:53:a3:ec:b2:9e:21:4e:2f:67:b2:0e:9b:72:88:
ed:3f:96:38
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUKLy3dVRhqm05HO3Defmn/kafjE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjJaFw0yMzEyMzEyMzU5MjJaMDMxMTAvBgNV
BAMTKDFFOUQ0MzkzQTkxQjg4NjVCMDE2MTQ5OTc2MUY1MEUxMzJDMTZEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VFXTY/3+z3h9jikS8+KmhjeD
J0BfsdfL3po4ecrcW80J056bEVx84wLkzia3LtEflu0ysfSXHoX/XGcei9GSJ1U4
3jd+tsYeZVvu9Q8rCs0Q3UDoaTuF1lS6cjAvBHe2/TULkspGIGKk5GqjI00VHnlm
Ztwdf3kWQvDBu+oTVw75RaesNgJmkFcobFLARb1keHF2T/HqVOdTuYHUFWZdmb09
ibd82dV8Hb9X4gzwvam3ok80IEQjbqStTFBil+KWxXO6V2OD9OSTEmINcZI36umY
Nm47MIjFA4Q61CIcb1/7bcae1Jy7eMg+xnSrZkdQo2EaAAMKkgN/+RXDSzjjAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUHp1Dk6kbiGWwFhSZdh9Q4TLBbTcwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwOTEyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnMBEDBgAq
BqAFJQMHBCoGoAUlIDASAwcEKgagBSWwAwcEKgagBSXAMA0GCSqGSIb3DQEBCwUA
A4IBAQBufWmLW7ExF0rkAO6jlWWOy2mID9m52diJF+yQuMvoMGHFF4r62a87V3e5
VyWqjclqbwufiep7YupMLXuWDeFA8PyCGjbugp5K+kJJls89vzW2PD0U3CtMfpaz
1kHQ3677MnrDsfqMh85svNPKKjkLvwguJwiz8/7gPq9KZMGyfKNquAxRAmT0b6QV
jy8mKcr905K/HipM6StoG9bDVo73tb9/oWGpCE3j4NwffRdVfV7hWZkABT7YsJ70
/7VXoJUdVF/sZxIA/ObUvSTHH2Bv67SrG2kHsgJDyGTiMCVeh3H6W/eJWI6/4BPn
oBfnU6Pssp4hTi9nsg6bcojtP5Y4
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:00 2025 by rpki-client