Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202218.roa
File: AS202218.roa (raw, json)
Hash identifier: Xg4kFL3N9ikQakb+6nIlEcuM2bZe7g+JE/vbW2sdnlw=
Subject key identifier: A0:58:4E:6C:85:4E:AC:D0:F7:00:E6:3C:2A:A9:1A:85:24:76:38:3B
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 12663D863423F0D9F19C5D147C415B5B8D46A782
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202218.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 202218
IP address blocks: 2a06:a005:1c7b::/48 maxlen: 48
2a06:a005:23b0::/44 maxlen: 48
2a06:a005:23d0::/44 maxlen: 48
2a06:a005:23e0::/44 maxlen: 48
2a06:a005:23f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:66:3d:86:34:23:f0:d9:f1:9c:5d:14:7c:41:5b:5b:8d:46:a7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=A0584E6C854EACD0F700E63C2AA91A852476383B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:d3:46:65:2f:87:4d:e5:58:ba:89:c4:f3:
54:54:5d:2a:07:a1:3c:41:85:de:d9:f8:20:9f:4a:
1e:3e:40:94:3d:a6:50:b0:fe:fd:e3:8d:5e:93:9d:
b1:e7:8d:75:0d:b4:e2:f5:df:d7:bc:8d:22:2e:33:
ff:cb:15:df:25:b2:ff:42:87:da:01:7e:af:1c:87:
a6:f0:a0:fc:a3:90:23:42:42:53:4c:14:a9:81:39:
5a:c3:d2:16:1e:18:72:a0:ef:9d:8f:0e:90:48:0b:
fc:c4:9a:ac:5d:cb:90:25:c5:d0:69:86:ba:43:8f:
7d:fb:c4:2c:4a:9a:86:88:23:20:52:b2:19:ae:de:
35:55:04:0e:b2:12:32:88:a7:72:60:2a:c9:f3:07:
a2:cf:e6:0d:12:d6:f0:6b:06:d9:52:a9:88:43:b1:
7f:a7:55:70:82:a9:d7:94:67:8a:de:64:55:79:6f:
c8:58:8c:e5:91:39:fd:5c:66:15:c4:1d:c6:49:81:
6d:a0:cd:28:66:67:7a:44:bc:b4:f6:12:a1:fd:25:
e3:8d:85:df:65:b9:c6:bc:d0:2c:60:37:0c:14:e5:
29:e4:ec:42:a4:e0:39:e9:85:8e:56:f7:21:fb:d0:
a5:2f:c6:6a:3a:2c:f2:39:8e:bc:f0:44:c8:8e:7d:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:4E:6C:85:4E:AC:D0:F7:00:E6:3C:2A:A9:1A:85:24:76:38:3B
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7b::/48
2a06:a005:23b0::/44
2a06:a005:23d0::-2a06:a005:23ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:20:50:35:a3:52:f8:97:26:02:20:30:e4:f3:ac:ba:39:88:
a6:79:78:65:da:3a:d6:56:c1:b3:26:eb:97:6b:2b:1c:4a:de:
3d:f4:c3:75:c8:08:de:28:39:2b:57:d7:cd:ff:ba:0f:da:cd:
83:b5:48:16:15:27:81:9b:d7:f9:64:35:d9:6c:32:50:fa:87:
4b:4e:f5:bb:05:b9:8e:f5:7f:29:54:2f:d6:14:c6:7f:94:4d:
f7:cf:3d:48:1f:92:29:2e:e8:a9:9d:69:b0:9a:e3:95:cf:bb:
37:c2:c2:2a:33:29:bb:53:21:ef:ca:44:f6:40:07:d1:8f:b7:
0b:d3:85:72:05:0a:e2:28:92:ec:14:b0:6f:46:d3:4f:95:fe:
9c:6e:7b:6c:6f:fb:5b:7c:82:03:84:a0:8c:7d:9b:93:a2:57:
5f:fb:ea:76:38:8d:00:4d:6d:a7:d3:8b:7e:cf:08:83:ec:08:
67:02:ea:03:3b:ea:ce:44:7a:82:44:83:da:79:6d:db:06:3f:
85:63:fc:7b:8d:fd:12:bb:14:fd:76:21:18:e4:3e:6f:e7:85:
23:6e:4c:00:b4:82:d2:54:95:42:1a:5f:2d:78:f7:00:7d:6d:
e7:52:e0:f2:91:87:3c:d5:49:d6:8a:9a:c9:e3:0f:4c:70:d4:
e3:5f:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org