Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202197.roa
File: AS202197.roa (raw, json)
Hash identifier: gLwtMHa8f28OzmjHHbYgqX8s+oZmv1v7F0RcXAsT60A=
Subject key identifier: 4F:4F:B0:9F:3B:66:F0:C1:04:20:F7:D0:6C:BB:EF:C3:A9:51:7B:8E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6928988E9342141ED7AF8E8462157F1C43112A3C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202197.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 202197
IP address blocks: 2a06:a005:1fc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:28:98:8e:93:42:14:1e:d7:af:8e:84:62:15:7f:1c:43:11:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=4F4FB09F3B66F0C10420F7D06CBBEFC3A9517B8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:64:4e:c0:6b:ce:da:1e:f5:7a:65:ae:3e:
f6:2a:2c:3c:1a:9e:2f:e7:bf:14:a0:d1:83:7c:76:
3e:a6:8b:fc:0e:26:11:c2:eb:c8:d4:be:05:a8:25:
d1:f0:48:d3:b6:3e:f9:85:4c:8b:61:5f:5a:fa:33:
31:90:d9:a7:ef:f1:df:9a:60:59:c1:fe:3b:33:d6:
ac:44:0a:d2:11:9f:0a:ef:77:62:cb:12:69:fb:79:
3c:b4:54:52:2f:6b:ff:24:f8:4c:5e:70:8a:c8:f2:
59:b1:26:27:b0:db:ed:4e:3d:6f:0c:3b:a4:c3:24:
0a:c8:f5:b1:fc:6f:bd:c6:62:e0:c1:f9:ef:20:b2:
4c:16:fb:2d:ba:b9:3d:35:09:4f:99:4d:04:e4:9e:
6a:0c:da:58:57:39:88:59:5d:fe:a4:4e:74:bb:e3:
fe:91:78:1c:65:d9:24:1c:c5:0e:37:69:c5:2d:76:
e4:65:03:52:4c:6b:b3:76:93:16:3c:c3:e0:26:ec:
0d:a8:4e:02:c7:a3:74:30:bb:2e:9b:e4:9f:c3:ff:
5f:76:f6:0c:e4:fa:d6:02:17:45:de:80:e8:b6:46:
91:fd:dc:c0:3f:13:ee:b8:11:23:f2:cc:c4:4c:14:
38:1e:98:e6:5d:69:4a:f2:64:bb:23:13:16:ea:8d:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4F:B0:9F:3B:66:F0:C1:04:20:F7:D0:6C:BB:EF:C3:A9:51:7B:8E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202197.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1fc0::/44
Signature Algorithm: sha256WithRSAEncryption
60:b4:3d:74:84:b9:a2:ad:46:a1:d6:de:44:f3:7d:83:a5:9a:
9b:0f:49:72:c7:2d:2e:51:74:91:e7:de:df:6f:91:b0:40:da:
74:f2:7a:7d:b4:db:4f:b7:ee:55:a3:db:c3:94:58:29:e8:15:
8b:eb:ba:65:77:d4:51:fd:30:ef:13:d6:ff:41:b3:0e:88:7f:
58:6d:03:ac:31:af:85:62:76:8a:ef:f0:af:f2:53:4f:0d:76:
83:b9:86:41:3e:12:76:ee:48:ab:36:35:dd:cb:62:97:7c:6e:
8b:3f:af:87:7b:31:d9:72:fa:c8:bd:ad:fb:06:7f:64:9f:fd:
7f:a6:ef:45:36:44:90:6e:95:44:dc:c4:ae:f6:53:91:fc:bd:
5a:01:3b:fa:18:03:0f:2a:06:97:f2:57:ba:ab:4d:47:53:04:
dd:63:83:05:af:09:2b:1e:61:84:df:4d:9f:d9:02:62:32:da:
0a:e0:ca:17:2f:e2:07:b7:57:78:97:b2:ab:4a:a8:ab:96:73:
0e:ca:5b:7f:50:a8:8f:41:dd:9b:c0:7c:e0:c7:9e:1c:3a:1b:
e6:50:d7:8f:05:c5:82:b6:54:31:23:da:fb:57:22:2e:92:09:
0c:b3:d6:f3:a3:0d:e9:d8:b7:8a:ff:36:dd:ea:d3:10:b1:49:
1d:5c:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org