Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200965.roa
File: AS200965.roa (raw, json)
Hash identifier: U6twV7V57/YU2TtSgQRBQrmZLDWGlcq2PrmrKvkT4Bg=
Subject key identifier: FD:FB:B4:DE:1F:37:E1:82:DB:F4:7B:BD:52:F3:7D:68:FD:2D:FD:27
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 72481A37018A66F8A70596EA271FC7042F4FE3E3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200965.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 200965
IP address blocks: 2a06:a005:24a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:48:1a:37:01:8a:66:f8:a7:05:96:ea:27:1f:c7:04:2f:4f:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=FDFBB4DE1F37E182DBF47BBD52F37D68FD2DFD27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:de:3c:64:38:39:2e:44:57:90:9f:a5:2d:
80:1b:6e:d6:39:e0:ac:86:be:1a:f0:84:1c:d0:d5:
51:80:aa:4d:92:4d:76:78:37:1c:09:77:cc:2c:0b:
9e:af:d0:6c:27:fc:a7:1d:fe:ba:da:3f:c0:a5:39:
9e:ec:99:fe:d0:ab:f5:0e:48:7b:48:f0:32:34:8d:
b4:78:bc:0c:67:22:fc:5e:91:aa:c1:3e:96:f3:ab:
5f:63:22:2f:42:bb:cc:9d:6b:11:2f:48:2f:a3:50:
d5:e1:af:37:fc:f0:c0:a1:77:30:6e:7e:e2:f1:ae:
4a:09:ad:0e:6b:99:e9:d5:87:46:7b:d3:c2:c0:53:
71:5f:58:ce:7e:cd:01:88:c2:2e:56:74:58:86:44:
12:ee:af:ef:ef:be:b6:e0:c8:67:48:e5:a1:58:83:
4d:6b:04:df:5d:0a:e9:66:cf:c2:4d:ea:b2:74:33:
58:1e:65:d2:f4:63:6a:fb:9d:b9:63:3b:15:b4:bc:
fe:4f:1e:d3:3c:3e:65:d6:d9:a8:08:25:9f:06:91:
64:59:de:3c:32:41:51:42:cf:26:00:ac:60:2e:29:
64:92:31:ad:d4:a0:f4:54:ee:9f:12:f3:6d:ef:b3:
5f:58:09:8d:b4:c2:74:c1:aa:2a:89:f1:a5:1b:82:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:B4:DE:1F:37:E1:82:DB:F4:7B:BD:52:F3:7D:68:FD:2D:FD:27
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:24a0::/44
Signature Algorithm: sha256WithRSAEncryption
49:79:9a:52:ed:0c:ee:41:52:db:22:83:a9:58:a6:ee:41:54:
84:12:6f:e9:54:2e:33:fb:8f:d0:6e:f4:56:65:56:a3:2b:94:
02:03:88:51:e9:99:45:a9:2d:95:ac:c7:d5:53:9a:c3:f2:67:
c6:3f:b1:c3:e3:e6:d8:b4:e9:4e:55:d1:82:61:a3:e6:e1:29:
fe:32:ba:a5:31:b8:c8:f3:8f:3b:93:41:ff:00:6c:56:06:ef:
3b:7b:36:49:0b:7f:eb:97:29:dd:d6:91:ce:b0:54:3d:45:49:
41:60:a8:0c:a2:c5:a7:84:af:4a:16:89:b2:8a:93:31:41:6b:
40:a0:65:80:93:67:24:ae:76:77:c0:b9:4c:dc:15:33:60:59:
c6:b4:42:41:de:4e:d1:c9:d9:8b:eb:db:9b:36:fa:14:69:f2:
5d:c0:81:4d:ff:0a:18:a4:9e:4a:b8:b3:ec:da:96:10:ff:55:
c0:74:72:35:77:81:bc:5b:e0:06:72:84:98:42:a4:51:ea:36:
37:60:28:ba:e6:01:bd:b9:a7:2a:84:24:46:54:50:e0:3f:b3:
72:cb:30:4f:2e:59:6a:b1:8d:68:a9:d7:48:ac:d1:dc:c9:cc:
c8:e4:23:31:91:1f:61:fa:cd:aa:88:d0:1f:b0:16:0f:c5:9e:
91:51:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org