Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200949.roa
File: AS200949.roa (raw, json)
Hash identifier: O3I3Ee+hgbQEjUIqVs1lVZyIYlR4xxYUBlNOJa02rhw=
Subject key identifier: D1:B8:3E:69:51:3E:10:B5:BF:5F:87:C1:91:BF:C3:A3:9A:EB:4C:0B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7780544F58AB78948B6AB8D2F4AFDF2BAB7D2799
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200949.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 200949
IP address blocks: 2a06:a005:1880::/44 maxlen: 48
2a06:a005:2490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:80:54:4f:58:ab:78:94:8b:6a:b8:d2:f4:af:df:2b:ab:7d:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=D1B83E69513E10B5BF5F87C191BFC3A39AEB4C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:10:08:0c:d3:67:3e:f7:13:09:05:3b:10:
8f:15:6c:12:73:70:6a:cb:18:50:c5:39:1c:08:61:
31:1e:94:6c:59:e0:d0:ba:af:f6:ba:85:89:eb:1a:
0e:69:3b:e5:5c:6e:4d:df:17:22:72:dc:c1:c8:ce:
8d:c7:56:ec:b0:a8:b7:89:bf:76:b8:52:c4:c4:33:
7f:4d:85:ca:b7:2d:8c:a1:7b:80:a2:95:e1:12:34:
6b:b6:c6:cc:5b:b8:46:0d:29:88:bd:b3:e7:b9:b0:
27:f1:e0:6a:7c:58:a3:f0:bb:03:f8:cf:53:b3:c6:
79:43:d6:76:b7:15:46:38:40:c3:2b:41:f7:1c:be:
d5:bd:7f:7e:1f:4e:d5:8d:39:a6:85:85:f5:c0:26:
1e:61:c6:85:d9:4e:d0:e3:c5:b0:29:11:9c:d1:fa:
8a:eb:06:b5:46:8a:bc:0e:96:64:fa:f5:2f:d7:66:
48:05:f7:55:66:33:45:3c:4c:62:91:eb:b5:ac:c5:
fa:84:13:d3:77:b4:1c:b0:49:52:0a:d9:5d:bf:fb:
45:b9:69:6c:0b:0c:7b:69:9b:cf:b6:30:2c:47:05:
3d:47:5c:6f:47:4a:56:d8:f1:d2:2c:90:b7:33:95:
c8:9c:4c:38:b6:e0:d6:6a:60:64:02:37:1b:85:83:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:3E:69:51:3E:10:B5:BF:5F:87:C1:91:BF:C3:A3:9A:EB:4C:0B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1880::/44
2a06:a005:2490::/44
Signature Algorithm: sha256WithRSAEncryption
88:ec:80:83:e5:33:b3:83:b3:82:41:b9:af:9a:9f:ab:75:66:
ab:82:59:02:32:58:37:39:4b:19:8e:a1:7a:57:c7:c7:4d:c2:
0b:54:50:8e:fd:4c:46:b4:51:6a:77:e8:49:dd:a0:12:a5:f1:
b2:66:2d:fb:2c:f6:cb:f8:58:16:b3:f1:51:df:3c:e2:c3:c3:
12:8a:04:10:eb:5d:d2:d0:4b:4a:ee:5b:c0:28:0b:e6:e8:5a:
f8:f0:49:66:47:71:32:cd:d9:c6:f1:df:5a:72:1f:05:a2:e6:
25:91:a6:f3:b3:d9:c3:86:52:39:13:63:e5:a8:e4:83:fd:45:
ea:79:96:e6:c4:33:78:4a:e8:ac:fe:b0:3c:2d:d1:bc:86:06:
58:98:c0:d5:09:ac:6f:41:5f:6e:fb:ec:20:26:1e:57:62:86:
28:27:ee:a0:45:d6:2d:c2:a4:cf:b9:b6:2c:ca:e3:c6:20:d4:
da:33:66:a6:7a:75:76:12:9f:c7:0c:5a:08:35:bc:0f:5f:2d:
b4:f0:91:c6:c4:bc:af:f8:5b:e6:9d:f8:04:c6:0c:ad:d9:ca:
fa:af:26:ec:b2:19:21:93:54:01:f6:03:e3:f0:6e:9f:44:0c:
e6:bc:97:45:da:26:3c:2d:08:8f:54:89:9c:d9:70:60:e1:68:
93:7a:b3:32
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUd4BUT1ireJSLarjS9K/fK6t9J5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTNaFw0yMzEyMzEyMzU5MTNaMDMxMTAvBgNV
BAMTKEQxQjgzRTY5NTEzRTEwQjVCRjVGODdDMTkxQkZDM0EzOUFFQjRDMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlmRAIDNNnPvcTCQU7EI8VbBJz
cGrLGFDFORwIYTEelGxZ4NC6r/a6hYnrGg5pO+Vcbk3fFyJy3MHIzo3HVuywqLeJ
v3a4UsTEM39Nhcq3LYyhe4CileESNGu2xsxbuEYNKYi9s+e5sCfx4Gp8WKPwuwP4
z1OzxnlD1na3FUY4QMMrQfccvtW9f34fTtWNOaaFhfXAJh5hxoXZTtDjxbApEZzR
+orrBrVGirwOlmT69S/XZkgF91VmM0U8TGKR67WsxfqEE9N3tBywSVIK2V2/+0W5
aWwLDHtpm8+2MCxHBT1HXG9HSlbY8dIskLczlcicTDi24NZqYGQCNxuFg3W1AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU0bg+aVE+ELW/X4fBkb/Do5rrTAswHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAwOTQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgag
BRiAAwcEKgagBSSQMA0GCSqGSIb3DQEBCwUAA4IBAQCI7ICD5TOzg7OCQbmvmp+r
dWarglkCMlg3OUsZjqF6V8fHTcILVFCO/UxGtFFqd+hJ3aASpfGyZi37LPbL+FgW
s/FR3zziw8MSigQQ613S0EtK7lvAKAvm6Fr48ElmR3EyzdnG8d9ach8FouYlkabz
s9nDhlI5E2PlqOSD/UXqeZbmxDN4Suis/rA8LdG8hgZYmMDVCaxvQV9u++wgJh5X
YoYoJ+6gRdYtwqTPubYsyuPGINTaM2amenV2Ep/HDFoINbwPXy208JHGxLyv+Fvm
nfgExgyt2cr6rybsshkhk1QB9gPj8G6fRAzmvJdF2iY8LQiPVImc2XBg4WiTerMy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org