Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200952.roa
File: AS200952.roa (raw, json)
Hash identifier: KpOy1ua45EQLTG76skFgSPubjkM9jaTaixMur8g2n6s=
Subject key identifier: 86:43:B7:8E:6A:9B:8E:E0:51:4E:F7:3C:69:91:53:79:4F:7E:B6:52
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 18FC27A2ADE93FD8517856765C8E9523FB24A0A6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200952.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 200952
IP address blocks: 2a06:a005:2570::/44 maxlen: 48
2a06:a005:2630::/44 maxlen: 48
2a06:a005:2640::/44 maxlen: 48
2a06:a005:2650::/44 maxlen: 48
2a06:a005:2660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fc:27:a2:ad:e9:3f:d8:51:78:56:76:5c:8e:95:23:fb:24:a0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=8643B78E6A9B8EE0514EF73C699153794F7EB652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:c3:5c:b6:e1:97:de:b2:59:2a:41:b6:e1:
c9:ba:e6:8e:a3:ac:6f:6c:00:03:ae:da:b7:9d:16:
d4:3d:22:ab:3a:b0:b7:99:a9:1b:83:52:ed:39:d5:
19:40:86:8b:0f:e1:d6:7d:41:a0:d5:5d:da:0a:f8:
e6:5c:2d:b8:86:6c:e8:b6:ee:be:9f:99:24:58:e8:
e0:2e:a9:19:77:1b:a1:d4:4f:00:6c:93:b4:3b:04:
29:20:84:b6:b5:02:00:ff:46:8a:b7:cf:7d:31:87:
bc:04:e1:81:fa:d1:13:1d:88:20:3b:66:80:7a:dd:
e2:95:0c:17:a8:90:87:e0:6b:58:05:c8:bb:49:5c:
9c:8a:f7:f0:4d:40:6e:ec:89:ab:e7:f9:9b:75:37:
0d:89:46:04:85:3e:03:be:d2:94:43:65:6b:35:d8:
51:31:3c:e9:43:84:5e:44:80:cb:1a:73:68:4a:11:
82:a0:3d:cf:15:75:17:5f:30:70:0d:55:c1:f0:55:
44:6e:86:ca:21:7e:f0:e9:c0:d3:a2:3d:2a:91:71:
aa:76:fa:65:64:b6:71:15:d3:ec:dd:75:d6:07:ac:
36:c0:1c:34:34:81:78:45:da:95:43:0e:b4:a4:ae:
6e:4f:3c:78:22:86:44:c4:a8:ea:b0:97:95:d8:2b:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:B7:8E:6A:9B:8E:E0:51:4E:F7:3C:69:91:53:79:4F:7E:B6:52
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2570::/44
2a06:a005:2630::-2a06:a005:266f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:b6:e5:83:1a:a2:78:d4:61:11:f6:3a:6e:73:82:32:5d:34:
e6:b1:0a:63:ca:a1:95:02:f6:e7:47:3a:b4:6b:94:e9:d7:4b:
2c:bc:85:40:ce:38:9e:7d:e3:b2:1f:79:ed:7e:66:26:bd:c3:
64:db:93:bb:88:d6:73:f0:72:0a:19:9e:46:a2:eb:24:0a:b9:
1b:7d:44:80:67:8e:69:fd:ff:ff:2a:66:74:36:2e:6e:98:68:
0e:e4:f2:ab:ff:b5:60:9a:2c:d1:65:f5:73:9c:58:ee:08:94:
b3:f6:86:1f:ac:ac:62:c9:50:3a:9d:2c:4e:ed:da:8c:e9:a2:
b5:e0:04:e2:1a:b3:1b:9e:cc:24:16:b7:37:29:d5:aa:53:c9:
e8:64:34:8d:a7:77:c3:b1:a9:38:ce:54:b8:3a:23:7e:38:24:
61:f3:d0:bb:cd:38:95:af:3e:ef:08:4e:57:ac:5e:fc:b3:59:
47:8c:91:07:85:a2:4a:cd:a2:cd:d1:cc:37:1f:4a:9d:c3:bd:
16:20:6c:ad:2d:d9:1e:ea:04:ad:6b:a3:3e:1b:e4:9c:ea:a9:
41:8f:b3:76:fd:1c:cb:d5:73:82:33:2a:c7:27:59:f7:d2:d1:
81:54:15:92:6f:c8:a9:48:5e:f9:fc:e1:5a:c5:1d:0b:1e:3e:
2d:ac:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org