Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201865.roa
File: AS201865.roa (raw, json)
Hash identifier: jwALowQMaIBhryY9WSWoMGE8OPJy5Kte4wO+/ay/8I4=
Subject key identifier: 32:C5:2E:A7:60:5B:12:59:E1:AD:E8:43:9A:54:12:B7:E9:A2:5B:F7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 36E1F75E46FDB026E86178D80C1938AE88870CF4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201865.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 201865
IP address blocks: 2a06:a005:5a6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e1:f7:5e:46:fd:b0:26:e8:61:78:d8:0c:19:38:ae:88:87:0c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=32C52EA7605B1259E1ADE8439A5412B7E9A25BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:b2:7b:2c:bd:fa:ea:cc:2c:38:a0:53:51:
ad:74:52:eb:93:8e:63:01:08:4f:aa:e8:08:fc:db:
a2:11:76:b9:7c:d9:70:75:f0:40:94:89:da:0d:90:
13:fc:c7:d3:de:89:01:55:28:fd:99:10:e4:ef:13:
dd:d5:7d:88:53:5b:10:56:8e:76:15:72:75:c8:5f:
60:ed:0e:d0:99:9f:46:22:0a:46:e1:88:18:06:95:
7d:7a:c0:d8:4d:93:4b:63:b5:9e:59:44:5b:d6:1e:
34:b5:fe:96:25:ec:7b:1e:04:99:a9:de:c6:05:66:
f6:37:fa:08:72:7c:91:f4:74:12:62:57:bc:f6:c6:
64:2b:65:be:18:86:04:20:a2:e5:bf:b1:af:e0:57:
da:93:4c:14:4f:91:13:2d:39:e7:d7:c0:43:b4:b0:
4a:8d:23:3a:65:cd:6b:d7:41:9d:57:ac:5b:14:dc:
e2:8a:d8:50:e2:d5:49:d0:a1:d4:7d:15:19:19:00:
31:48:65:c4:7a:76:d9:83:b9:bb:71:02:93:66:ed:
df:6b:09:31:35:81:24:0a:d3:65:89:b4:03:09:6c:
74:b1:f3:ec:2b:25:b7:df:a3:ab:8f:f3:69:fa:d0:
53:95:a4:b1:20:6b:2a:72:f7:2a:04:3c:d2:10:fc:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C5:2E:A7:60:5B:12:59:E1:AD:E8:43:9A:54:12:B7:E9:A2:5B:F7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
Signature Algorithm: sha256WithRSAEncryption
4d:6f:0f:e5:c8:8e:51:ae:a1:26:6e:c4:b7:a0:bb:e5:e1:b0:
db:f5:a5:c2:af:94:3f:05:0c:4e:51:7a:10:b2:ca:d1:92:67:
5d:ad:dd:2e:56:36:5e:0a:43:42:3b:58:fa:91:0d:65:88:88:
66:dd:7c:ce:16:59:40:ac:ae:5a:18:5f:d6:0f:47:45:39:ae:
a1:3c:62:56:b0:1b:09:2c:eb:56:87:7f:c2:06:e1:66:99:5c:
f5:1e:8c:ce:56:46:ba:66:cd:b1:cd:fa:e1:1a:57:70:eb:01:
7e:7c:01:07:c2:11:f6:f8:bb:af:97:15:6e:7d:74:ad:21:60:
a5:0e:9f:78:fb:1d:48:00:63:ba:8c:d4:2e:64:4c:49:21:18:
5e:ff:e2:26:f5:c6:d6:d3:0a:d2:f0:24:33:5c:dd:3a:58:58:
d1:f3:14:1b:bb:ef:a8:a1:0f:33:c1:73:12:dc:90:8a:65:7c:
ff:64:36:84:4c:55:04:cd:6f:e9:1c:39:f0:33:00:49:d7:3d:
07:0a:78:6d:48:72:28:40:9a:74:de:5e:a0:77:75:02:81:48:
72:09:7a:6c:ec:6c:ea:8a:6d:c6:97:59:40:cc:b2:cb:24:12:
cc:15:3c:a5:a4:1f:09:15:2f:3f:29:9a:1c:7a:f3:14:d7:51:
58:85:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:55 2025 by rpki-client