Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: s980OD+KjZGCTmXedu9UzsOaMKedHSPrSYCs52JkPf4=
Subject key identifier: 51:AB:6E:A9:CB:6F:83:4C:29:14:49:F8:92:A7:6E:C1:09:30:9B:10
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 64D7EE204E32CD35503DC6812C3E2B667D35C9E5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202224.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 202224
IP address blocks: 2a06:a005:108d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d7:ee:20:4e:32:cd:35:50:3d:c6:81:2c:3e:2b:66:7d:35:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=51AB6EA9CB6F834C291449F892A76EC109309B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:05:77:85:96:ed:00:af:d3:92:fe:b9:63:
13:10:15:ba:2b:22:8d:a5:b7:13:15:0f:15:da:87:
8c:67:f8:26:84:20:c2:57:2b:b2:16:4a:bc:d8:56:
cf:e4:9a:0d:39:08:71:3c:0e:09:a6:da:50:91:9a:
1f:0f:9b:1f:df:a4:23:e6:53:55:73:c8:e1:e2:d4:
0b:f5:ba:78:d3:ec:14:ba:cf:01:50:81:28:8d:b2:
62:08:ec:01:50:6b:5c:a5:f4:1c:35:cb:fb:aa:d9:
0c:ac:c1:37:c0:10:d7:3c:0d:2c:29:f0:a8:1a:f5:
3c:9d:4b:02:58:dd:25:2d:16:2e:d2:fc:d7:6a:bd:
cc:0c:61:00:e7:90:d4:f8:86:6f:b9:b7:37:80:ac:
f8:a5:76:d9:c3:c5:12:17:f9:71:7a:0a:fb:56:db:
f3:ca:1e:5e:16:16:f7:73:d5:33:b7:20:54:a3:f7:
4d:d6:09:b9:b4:22:c4:62:f5:d5:1c:4e:67:5d:b6:
e6:52:9c:34:ce:3f:9f:d0:0c:c0:99:a9:01:5c:8b:
a9:6e:46:a0:ec:24:0d:c2:16:65:5a:ec:93:75:2a:
b5:fa:2f:fd:cd:b7:ff:54:2b:71:04:67:ce:b2:21:
20:51:98:51:65:2f:f7:5a:19:41:6b:75:f6:b1:99:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AB:6E:A9:CB:6F:83:4C:29:14:49:F8:92:A7:6E:C1:09:30:9B:10
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108d::/48
Signature Algorithm: sha256WithRSAEncryption
7f:55:8a:dc:ea:d4:69:fa:c2:c9:74:aa:2d:c3:8a:10:35:26:
b2:f1:c7:b5:e4:51:39:40:15:7c:e8:53:3d:82:df:e2:57:20:
27:ad:f8:a9:55:d3:e6:de:5a:42:3b:40:cf:46:33:d4:86:25:
0b:9d:4a:1c:a6:8e:92:92:82:f4:8a:3e:26:dc:85:d9:77:32:
56:ba:e8:c6:57:e1:4b:8a:89:92:21:a7:26:6e:59:1e:9f:fe:
4e:97:a6:39:85:09:ff:34:09:0b:42:82:49:9b:92:7a:ae:3e:
9d:67:4c:06:ce:42:70:f5:fd:5e:07:88:46:b8:bc:99:1d:d5:
f4:a5:ad:3a:31:f4:48:5c:10:bd:65:ca:79:17:40:7b:dc:9b:
f8:63:7a:57:d0:b2:43:c5:69:2f:be:e3:9f:9e:c8:f9:1d:3e:
37:32:ed:6d:a9:4d:0f:60:91:ec:f4:05:e5:e6:8a:3e:d0:4d:
5f:fd:e7:b6:91:85:b4:c2:8b:a3:35:75:5c:b4:58:a5:fa:4e:
59:0b:fe:94:58:8e:d5:a1:29:e0:13:9a:c2:51:82:98:a2:37:
24:f6:ef:c1:18:f7:97:21:bb:7d:2f:dc:89:fe:19:06:e4:4a:
df:39:20:12:d0:3f:c9:86:d3:42:bd:69:be:84:53:48:a7:29:
0c:14:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org