Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201517.roa
File: AS201517.roa (raw, json)
Hash identifier: jdicq6dyBXiKDT3v2Wvx7lwWGA/XuXSA9JOI2OcUxIk=
Subject key identifier: F5:4A:A6:1C:42:B8:7B:3F:89:7A:11:C9:4E:BE:7E:07:EE:15:D4:D1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 34CFBFB81D962F76C884BF09B3E8AEF2CD7166BC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201517.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 201517
IP address blocks: 2a06:a005:1550::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cf:bf:b8:1d:96:2f:76:c8:84:bf:09:b3:e8:ae:f2:cd:71:66:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=F54AA61C42B87B3F897A11C94EBE7E07EE15D4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:79:cc:73:bd:1e:d7:9e:63:03:68:fd:9e:
02:7b:7b:20:34:52:89:ef:85:58:ca:17:4a:e5:d5:
4b:be:e8:20:33:44:76:99:d3:38:96:a6:fd:0a:14:
cd:fc:6d:d3:a8:de:4d:6a:64:b4:1c:c6:f9:d6:70:
f8:57:df:86:d1:2d:be:29:3a:b4:13:87:76:28:43:
29:61:e2:7b:0b:83:f0:af:cd:44:bc:ed:bc:d8:66:
ef:23:83:2b:3e:b0:22:ac:4f:38:32:3c:e9:6c:3b:
c7:19:fc:50:37:69:04:6c:59:b8:3c:7d:c0:bd:c3:
2e:37:0a:d3:c4:e3:fd:bd:6b:ec:18:3e:46:08:53:
37:bb:f1:4d:3a:71:cd:b8:c8:75:fc:c3:3a:f2:7c:
45:b8:fc:5d:14:ee:d8:85:59:e3:e8:00:c4:a8:14:
49:06:c8:de:46:66:39:b0:da:5c:64:7a:bc:bd:8e:
af:b8:92:93:8c:73:74:4d:eb:dc:a5:15:90:5e:3f:
c4:a1:c6:3c:9c:ae:16:6f:8d:46:72:37:58:96:05:
35:f4:f5:5d:eb:f5:65:8b:52:ac:44:97:75:95:7a:
2c:d2:0b:86:64:83:d0:25:f9:2c:43:e8:7b:43:16:
ec:d2:84:0c:5a:e9:24:25:e0:d4:bb:55:6e:01:de:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:A6:1C:42:B8:7B:3F:89:7A:11:C9:4E:BE:7E:07:EE:15:D4:D1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1550::/44
Signature Algorithm: sha256WithRSAEncryption
04:ea:7d:df:d4:7b:3e:b2:57:c1:27:51:ce:9b:98:eb:cb:90:
6c:7d:36:14:b8:db:a0:af:0b:31:ce:dd:ad:9e:b0:e7:ad:f3:
b1:4e:a6:9b:ab:da:09:56:53:15:15:22:c5:61:09:e1:8d:78:
df:7c:c9:89:5f:78:9f:b7:10:f7:98:34:70:84:41:90:49:30:
42:ac:0a:cb:a8:57:6b:4c:29:15:10:b2:1f:a5:43:a1:4b:39:
f2:2d:29:55:3a:cf:c7:29:bf:d4:1e:66:01:91:65:43:6d:13:
2a:ca:5f:d7:6e:1e:e8:29:25:33:c5:e2:6b:62:6f:88:1c:a3:
e1:41:a7:69:20:ef:58:05:2d:28:d5:44:0e:7e:3e:9c:14:12:
c6:a8:f5:e3:eb:cd:ff:59:b0:5f:25:71:90:ff:de:42:8e:1a:
1f:dc:4e:e1:8b:4b:50:63:e3:34:7c:77:42:89:27:bc:52:37:
dc:d8:b2:5a:77:5b:32:db:ca:77:42:a9:ff:92:f1:fd:e8:f2:
3d:fe:fa:f1:95:e1:cc:e9:a9:53:e0:3e:b1:a1:3d:ef:f7:68:
1a:54:86:e0:e9:73:61:38:ad:e1:70:e5:fb:b1:ec:0c:38:ef:
79:72:49:79:a3:9b:0a:7b:e3:fe:12:39:57:74:9c:ad:8f:c1:
03:fe:51:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUNM+/uB2WL3bIhL8Js+iu8s1xZrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjJaFw0yMzEyMzEyMzU5MjJaMDMxMTAvBgNV
BAMTKEY1NEFBNjFDNDJCODdCM0Y4OTdBMTFDOTRFQkU3RTA3RUUxNUQ0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIHnMc70e155jA2j9ngJ7eyA0
UonvhVjKF0rl1Uu+6CAzRHaZ0ziWpv0KFM38bdOo3k1qZLQcxvnWcPhX34bRLb4p
OrQTh3YoQylh4nsLg/CvzUS87bzYZu8jgys+sCKsTzgyPOlsO8cZ/FA3aQRsWbg8
fcC9wy43CtPE4/29a+wYPkYIUze78U06cc24yHX8wzryfEW4/F0U7tiFWePoAMSo
FEkGyN5GZjmw2lxkery9jq+4kpOMc3RN69ylFZBeP8ShxjycrhZvjUZyN1iWBTX0
9V3r9WWLUqxEl3WVeizSC4Zkg9Al+SxD6HtDFuzShAxa6SQl4NS7VW4B3ivjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU9UqmHEK4ez+JehHJTr5+B+4V1NEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAxNTE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BRVQMA0GCSqGSIb3DQEBCwUAA4IBAQAE6n3f1Hs+slfBJ1HOm5jry5BsfTYUuNug
rwsxzt2tnrDnrfOxTqabq9oJVlMVFSLFYQnhjXjffMmJX3iftxD3mDRwhEGQSTBC
rArLqFdrTCkVELIfpUOhSznyLSlVOs/HKb/UHmYBkWVDbRMqyl/Xbh7oKSUzxeJr
Ym+IHKPhQadpIO9YBS0o1UQOfj6cFBLGqPXj683/WbBfJXGQ/95Cjhof3E7hi0tQ
Y+M0fHdCiSe8Ujfc2LJad1sy28p3Qqn/kvH96PI9/vrxleHM6alT4D6xoT3v92ga
VIbg6XNhOK3hcOX7sewMOO95ckl5o5sKe+P+EjlXdJytj8ED/lFm
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org