Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201818.roa
File: AS201818.roa (raw, json)
Hash identifier: irpdsmhg4BvX7j0rJ7tHVpRLUlHB0AA2cZNfKy4tUOY=
Subject key identifier: C4:31:0E:A5:E2:59:16:A3:38:D0:98:DD:BD:0C:C3:CC:43:E7:9C:42
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6AFDEA76E912F381B54E00DB3AFDA6E9F825B17C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201818.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 201818
IP address blocks: 2a06:a005:2010::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fd:ea:76:e9:12:f3:81:b5:4e:00:db:3a:fd:a6:e9:f8:25:b1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=C4310EA5E25916A338D098DDBD0CC3CC43E79C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:5d:5a:1f:32:57:05:68:be:67:0d:59:41:
f3:b8:21:84:6b:fb:4f:11:03:42:68:13:9d:13:33:
1c:b0:3b:c0:58:8c:26:53:a8:f0:d4:2b:83:83:88:
c4:1f:f3:a1:11:f0:31:c7:29:4a:04:06:c6:97:9d:
47:0c:b8:45:53:54:3b:5d:a7:c8:7f:98:33:8e:3b:
4d:e9:af:ee:1a:f3:b6:42:68:ce:2d:e5:43:38:f3:
05:69:8e:27:57:fb:51:79:79:52:36:9a:39:c5:7e:
a3:12:b2:cc:4c:51:1e:be:67:2e:12:cd:bf:8b:9f:
9e:2d:dd:a8:07:9f:f5:3e:8c:77:17:89:ce:22:f4:
4c:d4:84:e2:d1:be:6e:11:91:ad:b0:4b:1e:0c:5b:
a8:30:e6:8f:42:be:c0:50:27:46:b6:25:67:9e:71:
75:bb:1c:ed:b2:fe:77:d1:b3:ca:0f:59:df:d3:e2:
c6:ea:26:4e:0d:8d:87:e5:f1:31:a2:23:7b:9a:b0:
1f:6a:a6:a6:5c:57:18:88:1d:7c:fa:5c:68:f0:bc:
f1:8b:a9:c0:dd:66:01:73:0b:93:c3:03:16:76:72:
b5:a3:5b:39:43:a7:36:b9:33:3b:84:cf:b8:ba:c5:
af:af:aa:b0:d6:86:75:07:2f:35:f9:55:a6:80:fb:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:0E:A5:E2:59:16:A3:38:D0:98:DD:BD:0C:C3:CC:43:E7:9C:42
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
00:02:96:84:11:13:a6:aa:51:0c:92:fe:ce:d4:37:39:fc:80:
04:49:2f:3b:71:62:f6:16:80:64:fc:87:92:77:3a:af:f2:c2:
5b:b2:63:c3:38:dc:2a:67:ab:c9:2c:f0:90:fb:b6:c7:cd:ae:
9b:d5:d8:2c:a5:3d:7e:30:1f:cc:c8:ad:c7:ad:22:de:df:49:
ad:c2:a5:3f:96:8b:12:80:ed:92:64:8b:f5:23:ec:cd:92:f7:
bd:9d:3f:28:e2:f8:0d:1f:cc:1a:e2:9d:37:4e:e9:3f:4c:41:
27:93:bd:c2:3f:88:b8:97:5c:7b:5d:90:7f:9e:54:00:56:c0:
34:b5:8e:3e:11:06:39:86:15:7f:85:d1:c4:be:ed:ee:8e:48:
48:e2:00:a2:f8:ad:39:d1:b2:65:07:c6:df:17:e9:ce:c6:1b:
1b:34:1c:42:4e:72:07:51:ab:8a:2a:e8:5a:fc:69:d2:d0:25:
7b:0f:66:3b:93:0c:58:3f:70:56:23:15:0f:fa:e7:b3:d6:40:
e3:86:b5:90:cd:52:52:9a:e4:72:cc:be:47:fd:d3:dd:40:1d:
b4:dc:34:dc:0c:64:55:2e:0b:c2:39:06:7c:46:38:e9:9f:cc:
fe:ae:54:26:95:54:3b:fd:75:23:53:89:9d:5a:9f:5d:20:33:
17:c0:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org