Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201242.roa
File: AS201242.roa (raw, json)
Hash identifier: itZjrKeNl+0ZatFOiCkxCLxTsmDeOdwHkLUFgU0A9P8=
Subject key identifier: 1B:4B:5E:AA:69:E8:44:79:5A:08:C4:78:40:33:7D:86:87:C3:17:F4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5B6A149B466C6DA2FB25935BD5B163AA7AD25305
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201242.roa
Signing time: Sun 01 Jan 2023 23:59:18 +0000
ROA not before: Sun 01 Jan 2023 23:54:18 +0000
ROA not after: Sun 31 Dec 2023 23:59:18 +0000
asID: 201242
IP address blocks: 2a06:a005:1084::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6a:14:9b:46:6c:6d:a2:fb:25:93:5b:d5:b1:63:aa:7a:d2:53:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:18 2023 GMT
Not After : Dec 31 23:59:18 2023 GMT
Subject: CN=1B4B5EAA69E844795A08C47840337D8687C317F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:f5:64:65:99:f0:2c:c0:7f:5f:c8:e9:a0:
f7:5c:7e:31:1e:0c:86:d4:c1:71:3b:25:63:82:3c:
9f:f7:83:dd:c1:7a:fb:94:aa:11:99:6c:82:e5:18:
69:5f:d7:f1:68:ad:3b:f2:83:d7:5f:da:6c:02:84:
d7:30:88:06:23:48:ce:90:ee:e7:25:fd:7c:0f:24:
d5:17:63:9f:03:e3:8d:7e:d3:36:4a:28:2f:ce:af:
46:ad:48:bf:02:b4:86:9b:4e:aa:e0:3b:84:76:37:
c4:bf:bd:d1:c5:ed:89:b7:ee:b7:28:38:fb:8e:e1:
7a:69:82:46:fd:36:ae:7f:3f:a7:df:48:95:8b:cb:
48:7f:71:a0:3a:b1:83:5d:07:e8:3f:54:bc:8d:27:
a9:75:d0:fa:ef:e6:1a:a5:87:09:32:8a:8d:87:71:
41:70:e0:6b:40:e4:91:3b:ab:a2:1c:e0:66:bf:f3:
22:a9:4c:11:e7:d2:8e:17:df:0a:aa:3a:8a:57:f4:
64:17:43:ae:45:68:e9:d0:11:cc:02:a3:fa:6b:ad:
e4:7d:b3:79:03:8e:e5:67:e1:9e:07:88:4d:0a:50:
be:eb:e7:a5:f7:c5:76:d9:5d:1e:e9:be:eb:ea:1e:
bb:c7:7f:c0:3b:b2:4e:c4:61:32:f0:a4:98:e4:ab:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:5E:AA:69:E8:44:79:5A:08:C4:78:40:33:7D:86:87:C3:17:F4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1084::/48
Signature Algorithm: sha256WithRSAEncryption
0b:80:1c:9e:32:97:0f:13:f3:10:20:59:4d:e4:7e:9f:61:e8:
a8:1b:0e:0c:68:0f:bb:66:c0:31:c6:fb:59:6b:ea:c8:71:64:
54:18:54:7d:79:3b:7c:85:a2:91:5e:20:4d:07:99:80:d0:e4:
6f:d8:62:da:10:e5:80:a4:d5:f2:01:50:e2:73:8d:fa:7d:07:
5f:11:6e:80:e6:29:6b:ee:9a:b8:10:1f:2d:75:b8:ad:4c:3e:
06:93:c8:c1:3e:29:a8:ae:2c:b8:b0:6f:16:2b:38:c4:8f:9c:
3b:aa:76:07:66:e2:9b:47:93:fc:0c:4f:09:bb:0c:e1:db:a1:
ff:01:0a:8c:ac:25:8f:f8:72:fa:7a:a5:85:4b:ac:a1:24:a3:
29:e8:2e:3f:5e:f4:15:e2:2f:bf:14:86:fd:4d:d0:41:1c:73:
ea:61:27:5e:b9:5f:41:62:83:14:1b:76:40:63:6f:76:79:ab:
5d:9f:59:61:62:dc:6d:ae:24:e6:d2:1c:28:dd:60:60:f4:9a:
9d:2f:53:47:39:f9:a7:0a:d7:40:69:5a:af:5c:7f:ff:d0:92:
d7:ed:58:27:f0:c8:1a:06:0b:c1:db:85:c6:9c:87:16:f2:5a:
2a:d2:82:11:5c:8e:e3:16:c7:50:66:61:fe:64:1f:be:68:31:
27:87:4a:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUW2oUm0ZsbaL7JZNb1bFjqnrSUwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MThaFw0yMzEyMzEyMzU5MThaMDMxMTAvBgNV
BAMTKDFCNEI1RUFBNjlFODQ0Nzk1QTA4QzQ3ODQwMzM3RDg2ODdDMzE3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVj/VkZZnwLMB/X8jpoPdcfjEe
DIbUwXE7JWOCPJ/3g93BevuUqhGZbILlGGlf1/ForTvyg9df2mwChNcwiAYjSM6Q
7ucl/XwPJNUXY58D441+0zZKKC/Or0atSL8CtIabTqrgO4R2N8S/vdHF7Ym37rco
OPuO4Xppgkb9Nq5/P6ffSJWLy0h/caA6sYNdB+g/VLyNJ6l10Prv5hqlhwkyio2H
cUFw4GtA5JE7q6Ic4Ga/8yKpTBHn0o4X3wqqOopX9GQXQ65FaOnQEcwCo/prreR9
s3kDjuVn4Z4HiE0KUL7r56X3xXbZXR7pvuvqHrvHf8A7sk7EYTLwpJjkq8onAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUG0teqmnoRHlaCMR4QDN9hofDF/QwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAxMjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BRCEMA0GCSqGSIb3DQEBCwUAA4IBAQALgByeMpcPE/MQIFlN5H6fYeioGw4MaA+7
ZsAxxvtZa+rIcWRUGFR9eTt8haKRXiBNB5mA0ORv2GLaEOWApNXyAVDic436fQdf
EW6A5ilr7pq4EB8tdbitTD4Gk8jBPimoriy4sG8WKzjEj5w7qnYHZuKbR5P8DE8J
uwzh26H/AQqMrCWP+HL6eqWFS6yhJKMp6C4/XvQV4i+/FIb9TdBBHHPqYSdeuV9B
YoMUG3ZAY292eatdn1lhYtxtriTm0hwo3WBg9JqdL1NHOfmnCtdAaVqvXH//0JLX
7Vgn8MgaBgvB24XGnIcW8loq0oIRXI7jFsdQZmH+ZB++aDEnh0ql
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org