Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202255.roa
File: AS202255.roa (raw, json)
Hash identifier: vCVe6ChNcwCotFXE9UgC3kb24cecy7Re4buVuUpoqCw=
Subject key identifier: 98:EE:83:70:16:57:59:46:03:80:B5:3E:67:42:55:06:3C:F3:A4:28
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 038C75A65D897AEA78EA34498B1E79DABDFE1A07
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202255.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 202255
IP address blocks: 2a06:a005:1503::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8c:75:a6:5d:89:7a:ea:78:ea:34:49:8b:1e:79:da:bd:fe:1a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=98EE8370165759460380B53E674255063CF3A428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:6b:df:90:3e:99:cd:ff:3f:15:67:2e:ea:
57:2e:aa:3c:0b:f7:e3:cd:4c:4f:bf:be:8b:21:34:
19:35:ab:b6:e9:e1:39:f6:98:81:b7:8e:a2:7e:bb:
f2:46:22:c4:ea:48:b4:66:e1:be:cb:40:c8:2d:49:
70:de:6e:b2:c9:13:f0:88:5c:1b:cd:28:e2:ca:34:
51:1e:ae:af:94:20:b0:09:3a:e2:de:83:2e:0b:8f:
4d:55:7b:6c:15:a6:05:10:6d:c0:f2:f9:d2:d8:e0:
db:4c:56:ec:ff:93:ae:e8:e7:8e:81:65:48:1e:d6:
8e:69:e4:4f:34:1c:d1:1e:ed:a3:5a:e2:bc:5d:69:
9b:d3:48:3e:6c:6a:26:86:9f:44:f5:c4:33:8f:da:
a4:20:1f:94:8e:ad:f1:91:21:05:c8:58:89:63:db:
05:34:a6:51:1d:de:63:d4:ef:75:cd:a0:3c:57:1a:
db:76:42:c2:07:a2:c2:64:ec:85:af:24:ff:79:bf:
fe:a6:82:12:1e:f0:14:db:6c:61:b3:bb:9b:71:49:
5b:9c:31:ad:de:7d:09:8d:66:a3:7c:dc:59:c5:87:
0f:ad:96:70:65:63:9d:3e:f5:ca:b3:cf:17:b2:2f:
6c:c2:63:ff:99:21:e6:d9:53:e8:75:e6:58:38:6e:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:83:70:16:57:59:46:03:80:B5:3E:67:42:55:06:3C:F3:A4:28
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1503::/48
Signature Algorithm: sha256WithRSAEncryption
96:44:a1:62:a2:72:a0:d6:ec:bd:f5:60:0b:35:db:37:f0:47:
b6:98:6c:83:78:34:b6:cc:4f:a0:41:31:96:42:64:7f:9a:be:
cb:ba:31:16:68:6b:7c:4a:c9:e2:50:56:6a:57:f5:0f:73:55:
e4:39:64:5c:68:93:a4:f2:cb:2f:26:ff:55:1a:71:d9:75:f2:
70:41:55:91:15:f4:6e:34:8d:06:c0:c6:11:d3:34:3e:5d:a2:
f1:35:29:e4:6e:d1:11:b2:d9:97:f0:2d:d0:d3:1e:02:16:66:
44:b7:e9:21:fa:87:2e:fc:db:b7:b7:b0:f7:33:8e:e9:5d:af:
09:b9:60:0c:49:ca:21:f9:09:e6:60:3a:1e:37:ff:23:88:a8:
63:aa:fe:e6:8f:10:8c:2a:5b:4c:17:7e:9c:46:ab:1d:2b:3d:
c2:b2:b3:9c:6c:ea:81:e5:c1:88:7a:8c:16:e9:bf:e1:55:0c:
0d:65:f1:98:0e:54:9a:e3:f0:ce:5d:24:f9:c6:70:5a:b2:71:
d9:d8:16:d6:47:57:34:c2:d1:6f:10:dc:c9:67:ef:c6:d2:2f:
05:14:59:e5:9d:ba:47:b9:43:01:89:fe:e7:ad:24:b4:33:44:
34:f8:1a:d8:9a:a0:5c:00:b8:ca:a5:6c:75:01:ee:c9:7a:df:
8f:f0:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org