Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201732.roa
File: AS201732.roa (raw, json)
Hash identifier: mqM0rD53jmCKkX+560G/ajcQyezVOFLOacZUhIHden8=
Subject key identifier: 16:D1:55:96:5B:F5:83:82:AC:E3:22:C6:65:B4:AF:85:8F:F8:E8:4A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6F2DD68EB125906637AFA03984B65CDA0BFF062E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201732.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 201732
IP address blocks: 2a06:a005:15d2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2d:d6:8e:b1:25:90:66:37:af:a0:39:84:b6:5c:da:0b:ff:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=16D155965BF58382ACE322C665B4AF858FF8E84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:4e:7b:ef:76:66:a8:ae:5b:78:d3:09:98:
05:3f:e0:66:6d:d7:3f:dc:ac:75:c6:66:47:e0:6f:
02:bb:1d:af:ca:0a:3d:43:f2:bd:5b:c6:90:bb:6a:
2d:ae:84:e6:6e:e0:53:c2:3d:08:36:c3:f3:b6:05:
c4:d4:f1:21:f7:c0:a2:af:ab:10:e8:c8:da:da:2f:
36:5d:d1:5d:47:6e:dc:68:6e:ab:63:fc:1e:f7:d1:
64:b4:74:5f:67:66:10:87:4e:7d:a9:92:24:6a:85:
20:57:4c:50:42:f7:9a:49:58:78:39:ce:3e:b1:9d:
e9:cf:34:04:86:55:bd:00:61:59:27:14:fd:03:65:
92:3d:a9:31:25:22:9d:c7:9d:2b:d1:96:de:af:14:
bd:7e:67:17:f7:61:0f:b8:3e:29:73:48:ec:33:f8:
10:94:3e:35:0f:ef:2f:3d:84:0c:38:08:54:3f:51:
91:1f:dc:f0:da:43:bc:97:e7:fa:8f:4b:5f:1e:27:
54:fa:50:83:e0:51:7a:ef:ad:a1:ac:04:de:92:d6:
90:6b:60:53:0f:54:ad:53:8b:ff:a2:a2:b9:e7:58:
2b:ce:da:dd:ca:48:1a:ac:2e:22:51:4c:2c:fa:43:
9d:91:02:b3:ee:9d:a4:47:55:d2:af:28:3f:0a:63:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:55:96:5B:F5:83:82:AC:E3:22:C6:65:B4:AF:85:8F:F8:E8:4A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15d2::/48
Signature Algorithm: sha256WithRSAEncryption
67:d8:1e:95:3e:6e:7d:bc:0e:88:75:c8:3f:52:76:da:4c:2b:
59:c7:c0:17:92:7b:e6:ec:5f:97:e6:1d:67:39:ae:2d:5c:39:
5b:48:51:b3:94:12:18:19:a5:1e:e5:a8:db:0f:8f:29:42:d3:
91:af:ca:e6:e7:fb:77:5a:c7:e0:1e:cf:0b:99:f4:81:6d:42:
41:23:d1:45:39:ff:e8:97:2b:0b:ea:e8:4d:a5:1f:be:97:8c:
e3:4d:c7:96:3e:fb:6e:c3:a7:53:17:a4:ee:22:ea:91:58:ea:
cb:88:ca:54:04:8d:74:01:5d:c9:12:cf:72:8a:2d:17:04:be:
a5:93:22:b4:7c:b9:2e:3b:94:22:09:bf:ad:6f:9e:12:26:19:
6c:c4:fa:5a:db:10:d7:d2:78:9e:85:79:a1:89:13:cd:74:58:
9f:b6:bd:84:de:43:3f:65:91:fc:80:84:6f:08:85:65:68:cb:
ff:1a:7c:11:a1:3f:2e:b7:ce:10:b1:9b:ee:6d:36:5c:d8:0b:
d6:f2:0b:31:f2:40:2e:ae:1b:59:c3:9d:a1:4e:ea:ee:5a:07:
e4:3d:f2:5d:f9:93:40:92:7c:15:dd:14:db:ba:b1:14:ac:57:
89:74:0e:7f:1e:90:74:eb:79:ab:b9:11:9e:dc:7d:90:73:f1:
8b:d0:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org