Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202199.roa
File: AS202199.roa (raw, json)
Hash identifier: lPvz1RnpZFJ+Ea10UFjWFFyhmrfP2fOy2F2MarZhMT8=
Subject key identifier: 25:B4:80:3E:7F:A8:E8:28:1D:DC:61:C2:40:F1:21:30:C2:8F:AF:1B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 16A6DAAE4E4E093D95DAFD810B5EF0CA3E89E02A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202199.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 202199
IP address blocks: 2a06:a005:1161::/48 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a06:a005:1640::/44 maxlen: 48
2a06:a005:1c7f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a6:da:ae:4e:4e:09:3d:95:da:fd:81:0b:5e:f0:ca:3e:89:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=25B4803E7FA8E8281DDC61C240F12130C28FAF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:4e:b2:8d:b0:4e:36:a7:e3:cc:e8:bf:53:
cc:ff:81:c5:0a:8a:5f:3c:30:16:c3:b2:c2:84:ed:
57:25:c7:e8:db:8f:2a:df:ba:1c:bf:74:8f:ad:14:
2a:12:b6:12:7f:82:90:af:ef:6c:b1:14:b0:c0:26:
ba:d2:0a:8b:a8:31:e1:40:c1:1a:4b:80:b0:84:62:
b1:34:df:e6:98:1a:ae:65:62:5f:63:f5:4f:28:00:
93:ca:a8:ba:ba:41:60:4b:bf:f6:71:26:59:5c:b3:
27:c9:2e:51:c8:92:46:bb:1d:c8:8c:c9:bc:07:2b:
85:9e:4a:75:c8:4b:28:c9:7f:08:a2:15:3e:20:45:
26:ca:5f:1c:f0:bc:dc:41:7a:d5:4e:f1:89:56:e1:
ca:27:8a:df:7a:cd:b9:ec:88:ee:58:70:16:a9:db:
0a:02:96:4f:96:a4:64:c3:a2:c4:45:8b:fb:79:08:
2b:84:87:57:d6:e6:39:12:cd:47:86:e5:8b:3c:4a:
8c:c1:9a:3b:f4:e9:67:d6:41:86:9f:b8:d4:88:11:
e2:c3:14:3c:4f:7c:97:f8:cf:7a:7c:50:e2:5f:26:
f8:78:47:3b:59:77:72:a1:57:2c:a8:a0:57:54:28:
89:8a:5f:cb:d1:22:12:ad:54:7d:f9:b5:09:3b:b7:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B4:80:3E:7F:A8:E8:28:1D:DC:61:C2:40:F1:21:30:C2:8F:AF:1B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1161::/48
2a06:a005:1505::/48
2a06:a005:1640::/44
2a06:a005:1c7f::/48
Signature Algorithm: sha256WithRSAEncryption
8a:29:19:41:e1:8a:94:d4:06:c0:13:5b:d5:f6:91:e5:4d:0b:
28:84:3c:fd:9d:dc:37:0b:f2:e6:8b:ec:5f:22:59:6b:61:83:
20:1c:19:80:0d:4d:6a:08:76:f9:70:46:b1:43:f4:f8:41:99:
40:c3:2f:60:0a:76:8e:c8:f3:23:7b:92:67:0b:58:40:88:ae:
7f:6d:c9:df:b8:f8:0a:5e:33:05:6f:e8:10:aa:1b:12:d5:74:
95:71:37:05:e6:be:7f:65:44:7f:87:87:c2:31:e6:71:b3:da:
9c:21:87:ca:93:b2:9d:76:d0:fc:6f:b0:f7:0c:08:c5:42:f6:
0c:1c:5a:7b:80:22:ee:1d:27:f1:49:ae:45:be:87:3d:a9:47:
2b:fe:9c:e9:bf:c7:c1:90:10:7a:77:26:cb:5c:30:9b:50:d0:
1d:05:1e:d6:a8:68:55:67:9b:b1:08:86:5c:d8:61:4d:fa:a5:
6c:7e:e9:dd:51:7e:54:da:49:91:01:e1:3a:61:38:23:04:fb:
bc:70:97:7d:b9:bd:76:bf:b6:bb:2c:21:b5:26:7f:18:5d:01:
f7:ce:bb:93:a9:28:12:09:c4:99:dd:29:7c:19:67:c9:56:84:
82:1a:fa:c8:e1:7e:54:de:83:b6:28:77:af:c2:bc:a0:fc:2b:
40:72:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org