Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200969.roa
File: AS200969.roa (raw, json)
Hash identifier: dODijEyemQhnb1HSAJ0KzkVbwkoQQcvhLkGzlK9wx7Q=
Subject key identifier: AE:8F:BC:33:C6:85:26:03:FA:91:1F:6A:F1:38:22:04:92:F1:16:06
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 63A1097986DC74E1DFE9759F0F1B5651AF76920C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200969.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 200969
IP address blocks: 2a06:a005:2740::/44 maxlen: 48
2a06:a005:2750::/44 maxlen: 48
2a06:a005:2760::/44 maxlen: 48
2a06:a005:2770::/44 maxlen: 48
2a06:a005:2780::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a1:09:79:86:dc:74:e1:df:e9:75:9f:0f:1b:56:51:af:76:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=AE8FBC33C6852603FA911F6AF138220492F11606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:87:10:fc:2f:2e:d2:92:d2:42:d9:01:87:
87:61:9c:41:b5:3c:59:79:31:3b:cb:5f:ca:18:d5:
0a:68:6d:15:89:f9:cd:ef:54:d6:82:72:62:45:68:
10:05:e8:68:f1:86:c6:ca:49:52:88:f6:21:e5:3d:
53:f2:f2:4d:74:26:a3:1f:bf:a6:ac:17:4b:d5:f3:
1b:96:3b:12:1c:b5:c9:0a:6b:42:ef:92:29:95:0d:
6c:d9:25:f9:38:ba:3f:9a:b6:c5:2c:95:c1:95:64:
22:ce:48:18:3a:57:36:8f:1f:4a:b7:eb:d1:81:52:
98:f5:3a:ee:46:ef:83:83:2d:85:bf:92:60:35:68:
44:f1:59:49:1d:4e:b5:9a:8d:0f:30:7e:09:6e:89:
82:2d:6b:b7:5c:93:9b:06:ad:be:c1:42:fe:fe:a4:
b7:f2:47:98:0b:64:61:ad:76:ce:79:2c:c3:c6:90:
e4:1f:08:a7:e0:2c:b7:54:5f:fa:a4:e2:3f:db:06:
f7:7b:d5:76:04:d7:9b:37:4f:fd:3c:d9:60:85:24:
01:ad:bd:71:e6:4e:f9:f5:ac:d8:7a:a5:fb:91:ff:
b0:48:14:df:41:07:18:f2:7c:63:5c:fa:05:4a:d6:
2e:d1:17:8e:c3:bd:f2:ff:44:e3:2c:81:0c:26:fb:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:BC:33:C6:85:26:03:FA:91:1F:6A:F1:38:22:04:92:F1:16:06
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS200969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2740::-2a06:a005:278f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:11:8b:8f:24:ef:02:2b:5e:47:95:20:ae:c9:4d:99:1e:7d:
f4:30:e5:c1:b9:e7:e1:2f:07:ee:72:59:c0:cb:46:6a:d3:88:
8c:15:9b:68:8b:f1:e8:f5:5d:51:68:e6:5f:50:86:5e:cc:c6:
b0:03:f5:b4:9e:22:e0:4d:cb:75:3f:d4:dd:03:47:25:6b:7e:
33:15:8c:7e:8b:ec:1e:33:4d:35:f0:63:d6:e9:52:f4:d6:b8:
60:ff:72:6e:5e:60:4f:b6:c0:bc:16:73:75:53:55:11:59:5a:
63:96:97:39:8c:a3:3f:0a:a4:b4:62:9b:de:5f:9e:79:76:7a:
c6:ba:5a:a6:37:8f:09:71:04:7a:65:d2:6c:17:3c:3d:19:b1:
3b:07:cf:ec:18:2e:35:ba:56:67:65:7f:43:83:a4:65:db:6a:
9d:1c:89:20:01:01:e3:c9:36:ef:ed:41:05:cb:31:0e:a8:a4:
70:e2:65:4a:68:7b:c9:7d:97:a1:86:49:eb:0c:44:fa:d4:c1:
81:aa:3a:97:14:03:70:8c:e4:6c:47:aa:f4:2d:65:4d:f2:f7:
79:94:19:59:8d:2b:c8:93:30:3b:6c:70:7b:15:bb:e9:f3:9a:
26:45:77:e6:7d:a4:7a:e0:56:00:ac:a7:c6:86:65:bd:6b:96:
d4:38:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org