Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200959.roa
File: AS200959.roa (raw, json)
Hash identifier: kvt7UXgzM78nOCQbwGZWxjWiPYF1eKCqSP5W2yWgiNs=
Subject key identifier: 9B:C4:39:5D:7C:F0:9B:06:7B:95:95:5F:79:79:47:BE:CE:5E:C8:C5
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7431B29EFF76D2E48F8A9E356576A95F8D5F7B6F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200959.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 200959
IP address blocks: 2a06:a005:1d5c::/46 maxlen: 48
2a06:a005:2040::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:31:b2:9e:ff:76:d2:e4:8f:8a:9e:35:65:76:a9:5f:8d:5f:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=9BC4395D7CF09B067B95955F797947BECE5EC8C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:55:d9:e4:23:d7:e1:04:7f:bd:8a:b0:c4:
53:ad:c0:b2:22:1d:ca:cd:53:57:fe:0a:b9:93:fc:
01:33:ae:7f:87:f2:1c:43:42:5e:9a:ac:f9:fc:a3:
17:d7:ca:28:58:ed:5d:ed:ff:61:10:94:88:eb:c1:
60:d4:f5:e9:bf:08:ac:0b:3f:0a:fc:d1:dc:00:6a:
be:51:7b:d1:0b:fc:70:f2:80:13:20:58:c7:9e:7d:
24:77:1b:2d:3b:ed:eb:4b:dd:c0:ce:54:18:78:6d:
b6:19:6a:4c:d0:ba:68:e6:c9:98:56:36:98:d9:52:
e3:34:ef:a5:65:be:64:b9:85:53:e5:97:2d:a1:83:
41:cf:66:de:27:c6:c3:c9:72:d8:65:41:f6:05:f3:
a2:b3:29:5a:f4:6c:46:ed:a8:7e:2f:a5:fd:fd:ab:
7b:31:c8:71:5c:6f:1e:48:62:e7:b2:cc:47:98:3b:
65:a0:b2:79:8b:be:1c:5c:97:40:53:0d:2a:cd:5d:
4b:9a:0b:56:8e:90:1f:c0:49:f8:d6:99:9d:2d:4f:
f8:18:1c:10:ef:44:d7:ae:96:a6:4b:f6:5e:b6:45:
4f:8a:eb:bd:fc:bf:d5:75:3b:f3:9d:cb:6f:c1:23:
b8:d8:7a:48:ed:f2:68:f8:dd:5d:20:3c:ec:ac:8c:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:39:5D:7C:F0:9B:06:7B:95:95:5F:79:79:47:BE:CE:5E:C8:C5
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d5c::/46
2a06:a005:2040::/44
Signature Algorithm: sha256WithRSAEncryption
61:75:ec:a7:13:ec:9a:b9:81:8d:20:42:8f:9d:c1:82:37:ee:
d8:7f:ed:31:3c:bd:66:0d:fd:39:fd:76:db:25:cc:01:1f:dc:
09:eb:57:24:4c:29:ea:bf:fd:94:3b:f2:23:10:8a:5c:99:83:
de:4c:2f:dc:5f:ba:1f:1b:2b:2a:dc:b0:6e:dd:a3:2c:9e:ae:
35:05:67:78:06:2f:57:1a:a3:40:8d:51:ea:3e:ac:3f:c7:79:
cb:6a:86:4a:1f:5c:71:b0:05:7b:7f:85:fc:b3:51:1c:7c:cd:
0e:40:b4:e7:17:29:ba:e8:fd:ce:f3:4f:e1:90:37:2d:1c:b6:
60:0b:ad:67:42:04:c9:9a:fb:d0:7e:c7:94:4e:d4:f0:d9:07:
40:55:a0:72:05:af:02:af:15:99:1d:7b:d5:09:ee:e0:df:63:
6a:7f:aa:14:89:be:9e:9e:1c:bb:7d:b9:ed:52:48:3f:5e:d8:
f6:2a:39:dd:dc:ee:5a:7b:b5:3f:24:c7:6e:91:48:c8:00:b4:
34:f2:71:5b:82:5f:44:18:8a:7a:5e:cf:e9:e8:44:ed:23:73:
c3:56:ca:aa:01:bc:80:53:2a:fa:e5:fc:4b:eb:18:15:0c:fe:
00:7e:48:c1:01:89:7b:6c:37:08:49:96:d1:76:b3:c6:bd:dc:
e2:30:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org