Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200954.roa
File: AS200954.roa (raw, json)
Hash identifier: f8EV3cKpW19QF3t+PIlFgkLxVu2TTBGlWZTZL5H1JMw=
Subject key identifier: EE:EA:7D:C6:2E:A1:A2:DD:79:E6:F7:A1:BC:F9:84:56:47:80:0E:F7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 565E2326868E6707BC69FA4BBC96343BED99CE14
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200954.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 200954
IP address blocks: 2a06:a005:2100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5e:23:26:86:8e:67:07:bc:69:fa:4b:bc:96:34:3b:ed:99:ce:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=EEEA7DC62EA1A2DD79E6F7A1BCF9845647800EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:9d:af:4b:48:a2:2b:c9:0e:67:06:68:4f:
35:11:28:a1:d5:d7:35:f0:1d:89:a8:f2:a2:c6:89:
21:67:84:40:4f:be:56:cb:f0:f5:c9:c8:dd:6a:9d:
e1:5c:c1:4d:92:83:bf:19:aa:76:99:c6:ce:9d:d4:
e0:f8:27:e7:e4:b0:9e:a8:16:c1:02:4e:33:cd:55:
a4:a4:d9:7d:e3:7b:37:2e:46:41:1f:46:77:8d:e0:
5b:29:da:69:0c:9a:ab:a6:05:de:26:35:88:00:6e:
b2:cc:5e:07:29:dd:3e:21:96:7c:fc:b2:62:68:47:
f5:c7:87:59:4c:c0:e4:41:da:58:56:fa:d8:2c:48:
f3:18:61:41:7c:69:de:8b:91:c9:d4:63:7c:d4:83:
af:f4:e3:9f:16:13:a6:f0:79:35:ca:b7:5d:21:cf:
bb:ab:2a:dc:a4:a8:36:ba:df:c6:b2:d6:8c:d3:48:
c5:95:ce:79:c9:de:a2:8b:d2:fb:3b:a6:b2:65:aa:
a0:8f:7c:42:2e:70:d5:fe:27:2c:6a:4c:ba:69:f9:
39:53:79:e0:a6:6c:ba:40:7b:16:3b:eb:67:8d:d2:
20:1c:15:a1:ed:17:8f:72:fd:fb:7f:59:b7:d8:44:
13:62:53:89:29:1e:78:bb:a0:57:ba:f8:41:b4:77:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:7D:C6:2E:A1:A2:DD:79:E6:F7:A1:BC:F9:84:56:47:80:0E:F7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2100::/44
Signature Algorithm: sha256WithRSAEncryption
65:01:bd:93:61:2d:de:c6:fa:61:c1:4d:d7:b5:ec:39:07:cc:
9b:41:0b:5e:45:a2:b4:6e:4b:6d:b1:ee:4c:af:05:ed:85:0d:
ad:f8:ed:1b:5a:2d:fd:25:c0:e1:d7:92:57:0e:38:93:9d:ee:
79:97:33:bd:8f:61:63:fe:eb:6a:b3:1d:c0:7f:53:a0:36:6f:
2d:0f:a2:5e:19:ab:6f:9c:fa:e6:6a:af:0a:1a:f3:16:3f:87:
e5:50:1d:9f:50:3b:30:a9:cb:e2:c9:58:c7:1a:6d:14:1b:a7:
bf:44:33:ed:cf:7d:88:88:a7:2c:a8:5e:16:3b:6c:f4:cf:3a:
a6:a0:7f:6e:8d:1d:72:a7:20:d3:ed:7e:19:f8:d0:c6:cd:97:
c2:5d:b1:d8:6e:b0:c1:88:1e:4b:00:e1:6b:21:34:8b:7e:7d:
39:c0:4c:34:81:5f:b6:23:b9:5a:99:05:50:44:18:5b:58:1a:
a9:28:db:35:ed:29:27:62:0f:51:25:16:d0:b5:78:e6:8d:ac:
c8:02:e0:34:21:10:c4:c4:95:d8:c0:07:71:3f:57:ff:0b:9d:
78:e6:a1:ee:10:5b:f4:5a:ba:c2:7c:98:fd:16:9c:1f:96:dd:
6a:4a:6c:f0:ba:d6:4f:2d:37:57:6a:6c:4b:42:24:6e:dd:7d:
61:27:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org