Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201938.roa
File: AS201938.roa (raw, json)
Hash identifier: qF8nakmXMKGRbBOabqwkBf1a39cDWnyZHTaaxpK22fc=
Subject key identifier: 3E:94:89:DE:E5:8A:37:36:96:3F:FA:B6:47:6D:C1:2E:FA:11:E7:60
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 731A6A123A9949362524EE6B5915DE235475D5C6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201938.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 201938
IP address blocks: 2a06:a005:2110::/44 maxlen: 48
2a06:a005:2120::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1a:6a:12:3a:99:49:36:25:24:ee:6b:59:15:de:23:54:75:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=3E9489DEE58A3736963FFAB6476DC12EFA11E760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:c3:f7:33:f5:1f:cb:c5:5d:0a:f8:ef:9a:
50:4c:11:a3:43:8a:29:1c:05:b9:e9:6f:77:88:1d:
88:ee:56:4e:25:de:06:d7:32:de:2a:22:7e:9c:0d:
56:d6:34:c3:4d:76:3d:88:85:06:4f:e3:c9:47:d1:
ab:7d:72:3e:2c:6c:c6:e2:4e:46:7d:e7:3c:e5:93:
bb:2d:79:14:69:8a:56:ab:8e:4b:eb:9b:3b:3e:e1:
9a:d9:e6:6c:16:03:eb:01:71:b5:b6:c7:ff:c4:c6:
8a:1e:f6:d1:a2:fe:36:74:b7:98:b8:d3:7b:8b:4b:
89:e7:b0:fd:1f:84:bb:62:09:60:a6:a9:ef:63:bf:
42:f7:43:dd:6c:85:17:f8:c2:af:79:98:01:6a:09:
ad:e6:0b:08:96:ab:42:0c:21:ba:31:ba:7e:40:25:
ba:8e:e0:a3:3d:11:58:03:4b:12:0a:33:9a:29:4d:
6e:ce:4e:6b:09:c3:95:13:ee:3c:ae:c4:01:75:a9:
8f:9c:a1:41:42:dd:5c:58:2f:d7:07:98:30:69:d2:
40:c3:2e:3a:6c:e9:6e:af:0b:56:28:8f:0e:05:ba:
d4:58:25:0c:24:ee:80:6e:91:fe:8c:a0:51:49:9a:
10:ed:1b:dc:08:8b:7d:07:4e:46:65:0b:cb:69:5d:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:94:89:DE:E5:8A:37:36:96:3F:FA:B6:47:6D:C1:2E:FA:11:E7:60
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2110::-2a06:a005:212f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:92:73:5a:ad:80:c8:fe:e1:e2:ed:f6:70:69:84:42:e9:6f:
92:d8:0c:94:0a:65:64:31:53:05:07:91:f1:eb:0a:2e:29:99:
4e:97:18:ae:e9:85:59:96:28:0c:83:e4:e7:15:05:dd:dc:fa:
49:f9:14:e9:41:cd:e9:cb:51:13:83:f5:62:51:39:a6:bf:8e:
d3:11:09:64:7a:e3:c7:83:d6:e2:ec:ac:93:b0:b2:23:e3:86:
dd:d4:fb:43:46:2c:65:bb:f4:b8:f7:7b:e2:2d:12:ac:5e:91:
ae:74:66:5c:52:02:fc:ef:af:f7:13:07:77:bc:48:54:9d:df:
57:cd:fa:11:cf:90:c1:f1:27:2c:4a:bc:73:41:d1:cc:fe:a9:
c2:04:20:db:fc:79:bf:f4:35:cd:dc:10:a4:4b:86:44:7c:83:
55:b8:43:fd:b1:b0:77:92:6b:82:38:af:f7:fe:0d:20:f4:4d:
8f:79:90:57:de:99:6d:41:a3:a8:24:96:9f:f5:60:aa:59:c8:
0a:d2:48:10:db:c9:5f:aa:45:47:fe:d5:3b:2f:11:fe:4b:0f:
f3:0c:1f:03:e5:82:db:82:47:76:0d:d7:fa:28:c7:26:dd:bc:
21:36:9f:a7:a4:63:c6:7f:f7:ac:6e:3a:57:b2:40:8f:fd:2c:
bb:20:2a:8b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUcxpqEjqZSTYlJO5rWRXeI1R11cYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDNFOTQ4OURFRTU4QTM3MzY5NjNGRkFCNjQ3NkRDMTJFRkExMUU3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWMP3M/Ufy8VdCvjvmlBMEaND
iikcBbnpb3eIHYjuVk4l3gbXMt4qIn6cDVbWNMNNdj2IhQZP48lH0at9cj4sbMbi
TkZ95zzlk7steRRpilarjkvrmzs+4ZrZ5mwWA+sBcbW2x//Exooe9tGi/jZ0t5i4
03uLS4nnsP0fhLtiCWCmqe9jv0L3Q91shRf4wq95mAFqCa3mCwiWq0IMIboxun5A
JbqO4KM9EVgDSxIKM5opTW7OTmsJw5UT7jyuxAF1qY+coUFC3VxYL9cHmDBp0kDD
Ljps6W6vC1Yojw4FutRYJQwk7oBukf6MoFFJmhDtG9wIi30HTkZlC8tpXcqlAgMB
AAGjggIYMIICFDAdBgNVHQ4EFgQUPpSJ3uWKNzaWP/q2R23BLvoR52AwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAxOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQq
BqAFIRADBwQqBqAFISAwDQYJKoZIhvcNAQELBQADggEBAJiSc1qtgMj+4eLt9nBp
hELpb5LYDJQKZWQxUwUHkfHrCi4pmU6XGK7phVmWKAyD5OcVBd3c+kn5FOlBzenL
UROD9WJROaa/jtMRCWR648eD1uLsrJOwsiPjht3U+0NGLGW79Lj3e+ItEqxeka50
ZlxSAvzvr/cTB3e8SFSd31fN+hHPkMHxJyxKvHNB0cz+qcIEINv8eb/0Nc3cEKRL
hkR8g1W4Q/2xsHeSa4I4r/f+DSD0TY95kFfemW1Bo6gklp/1YKpZyArSSBDbyV+q
RUf+1TsvEf5LD/MMHwPlgtuCR3YN1/ooxybdvCE2n6ekY8Z/96xuOleyQI/9LLsg
Kos=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org