Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202002.roa
File: AS202002.roa (raw, json)
Hash identifier: 7ojwTsb2HtroubFLx0DUO7mcPwcanbfVsaX+m+FO5Jo=
Subject key identifier: EB:D7:F9:99:D2:5E:FC:F2:B9:4E:02:1D:36:D1:F1:03:B9:3E:23:A0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 78CFC2F3DCA8CAE82E815BFD41F4D0B628B395CD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202002.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 202002
IP address blocks: 2a06:a005:2090::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cf:c2:f3:dc:a8:ca:e8:2e:81:5b:fd:41:f4:d0:b6:28:b3:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=EBD7F999D25EFCF2B94E021D36D1F103B93E23A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:8b:2c:91:27:dc:3f:e9:47:13:94:7d:f8:
13:3a:1e:11:22:ad:09:72:af:57:f4:a1:26:98:1f:
01:da:0d:b8:1a:11:b1:6e:bb:20:f8:b8:ab:86:34:
c2:1e:d3:64:5c:dc:d5:38:2d:3e:c2:7f:da:d8:c0:
ec:b0:26:2a:37:cd:80:fa:2b:11:98:bb:d7:7d:24:
0f:c3:ca:24:7f:c3:21:2c:bf:e1:c0:18:5f:15:43:
d7:85:e6:ea:e8:8e:1b:08:de:8f:55:0b:7e:f8:9f:
3b:6f:86:0b:5c:91:24:89:92:bc:87:59:c2:0e:1a:
3b:6d:bc:fb:67:02:76:75:2e:53:50:a0:1a:79:f3:
3d:06:71:6e:64:5e:9f:31:76:b5:36:ee:24:87:fc:
9c:3c:5f:be:ee:85:63:94:fa:66:81:98:6e:be:80:
35:1b:52:20:4c:f7:41:2b:6b:9e:ce:f5:30:79:65:
93:ca:5f:13:ca:7f:5b:e7:98:a4:51:40:ff:4d:db:
df:0a:33:51:a0:9e:06:18:9e:91:1b:50:07:9a:06:
6d:cf:5c:6f:da:96:33:51:20:2e:ef:f2:67:ff:48:
51:8d:78:eb:d6:8f:f1:e2:61:fb:ea:76:03:ee:f5:
8a:a4:2f:ae:63:41:c8:00:e3:fd:68:b8:df:b2:21:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:F9:99:D2:5E:FC:F2:B9:4E:02:1D:36:D1:F1:03:B9:3E:23:A0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2090::/44
Signature Algorithm: sha256WithRSAEncryption
5b:58:12:e6:02:3a:ab:d4:05:70:68:39:f3:a3:38:db:b9:99:
26:a1:7e:a2:19:fa:e1:e0:f5:58:4f:6f:6d:1a:2f:87:5f:95:
fa:7a:70:28:72:47:3f:4a:8a:25:f5:59:86:37:f0:f1:cb:50:
ca:1c:fc:a4:af:39:e7:e5:d7:89:5e:fd:b3:bb:af:f2:74:f8:
d8:4f:59:02:79:71:a5:7a:65:15:c5:52:c1:6a:c6:2e:66:9d:
70:69:bf:fc:a5:3f:f9:e3:01:96:40:77:dc:ae:00:ad:99:cf:
fb:af:b9:78:f0:16:e8:64:e3:64:9c:bc:4b:1e:e2:2a:55:d1:
19:c8:1a:a6:c7:9e:1c:ca:6f:94:5b:12:69:9f:70:36:2f:85:
49:62:c6:af:d1:a7:c4:4c:78:18:5f:c4:48:61:ad:9a:03:36:
45:92:9d:24:7e:33:74:15:3c:51:17:56:4e:e3:f0:02:c3:74:
a2:06:6f:95:81:87:fd:8e:c3:9c:51:91:c4:7e:9b:14:17:93:
dd:5a:66:ab:b5:09:b7:ed:da:cf:55:9f:7e:ee:68:37:21:8b:
64:f5:9b:a3:2e:37:b3:06:66:38:ab:7b:08:a9:fd:5f:a5:57:
47:c8:2c:6f:32:97:48:f7:22:5f:00:3c:02:22:d2:1c:b6:ac:
05:40:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org