Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201398.roa
File: AS201398.roa (raw, json)
Hash identifier: eDPY+a7itC6qVYT2sWPohNHT3VuFCi1+fyN41JYjutM=
Subject key identifier: EC:C1:C9:4B:D6:CB:E3:55:18:66:47:DB:B1:0C:44:AF:D9:67:02:44
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0C944B2F7DC763EB3D9A6AFFD697F5E075330ECE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201398.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 201398
IP address blocks: 2a06:a005:108f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:94:4b:2f:7d:c7:63:eb:3d:9a:6a:ff:d6:97:f5:e0:75:33:0e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=ECC1C94BD6CBE355186647DBB10C44AFD9670244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:b0:eb:2c:e8:3b:7e:d8:ae:35:bf:3b:82:
08:e5:64:ab:06:4a:15:3d:78:32:9e:ae:f6:f7:f0:
c6:83:52:eb:94:70:08:e5:d2:fd:65:8a:ca:74:e6:
0b:5b:93:8b:f0:94:52:f3:86:b8:b3:cd:95:a4:6d:
66:6b:b1:f8:49:02:7c:50:3e:27:3f:a6:34:34:fc:
bf:6f:6b:e1:b0:02:80:12:c4:90:3f:b8:98:fc:fa:
15:57:5d:20:d0:63:81:83:d3:7d:a5:5b:3c:51:6d:
68:eb:69:e0:ae:4a:03:d9:77:5c:96:d4:40:64:f4:
42:9f:a4:6e:bf:8b:3b:fb:6a:aa:cc:97:7e:24:b9:
dc:95:8a:34:ba:0b:6b:e7:d1:88:b8:3a:04:30:ab:
e9:06:3c:52:4e:80:3f:b4:3b:77:f4:95:ba:e0:9c:
3a:95:6a:60:17:5c:12:13:23:11:88:dd:6c:a8:c7:
e5:a2:ff:fd:74:1b:56:1b:d2:50:41:c2:26:2b:56:
51:ad:d9:63:1c:f2:64:1c:2a:00:61:b6:46:6d:50:
29:1f:fa:2e:44:e8:21:0f:66:fe:b5:a5:c8:d0:d7:
85:aa:b4:b4:f7:8d:bc:f6:cd:1a:62:1d:65:84:99:
86:be:7e:2c:d5:bb:9e:1b:d3:02:cc:45:be:d2:93:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:C9:4B:D6:CB:E3:55:18:66:47:DB:B1:0C:44:AF:D9:67:02:44
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201398.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108f::/48
Signature Algorithm: sha256WithRSAEncryption
42:f3:b4:3c:ca:0d:8c:42:95:ef:c9:7c:72:39:cf:62:0f:b1:
c2:7a:56:ab:0e:4e:51:68:ef:82:d1:9f:8d:eb:a7:6f:d7:d7:
0a:aa:fe:13:58:04:0f:61:78:c3:da:77:2c:47:2f:f3:d5:56:
20:fa:02:97:8c:61:8f:0a:a8:cd:91:77:bc:18:4b:08:6e:e8:
42:b9:3b:d8:b8:20:ce:20:ce:6d:2a:cf:dc:69:7a:c2:33:86:
34:b6:a9:5b:dc:f6:bf:41:ff:91:b3:b4:9a:19:5e:20:b1:28:
a5:1e:11:52:f4:a8:4d:d7:ba:f3:50:4f:c1:b7:1c:38:46:ce:
d0:79:d3:6d:31:2a:84:db:9d:ff:d3:08:c2:c7:9e:58:c0:f7:
85:1f:f9:b2:51:ed:4b:de:a6:22:db:5a:89:4e:e0:50:cd:e4:
fd:bc:a5:25:ad:1a:bb:a8:ef:c7:ce:86:d5:f6:7e:d4:3a:7d:
fa:cb:ac:fc:99:1b:3e:ff:b6:a7:b9:3b:5a:f5:7c:42:81:9d:
d5:3e:0c:d9:d9:8e:ce:c5:43:a3:20:fc:9c:b3:66:34:93:de:
6f:d0:43:07:c6:f7:dd:1e:56:2c:66:8f:2b:f4:b5:8a:ff:be:
e7:bc:76:98:83:86:e1:61:be:e9:e0:41:4e:c9:4a:9b:5a:23:
d6:9b:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org