Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202338.roa
File: AS202338.roa (raw, json)
Hash identifier: G5r7YLmR1eYPG5Fj9WfQzpSdDV1AYtk+inK0+hj5UFA=
Subject key identifier: 84:22:88:67:F6:22:06:E6:93:2F:EB:87:48:94:3C:6D:64:C5:68:68
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 090BD51D33BF75C72FB98522CE36499E3A1B9B59
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202338.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 202338
IP address blocks: 2a06:a005:bac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0b:d5:1d:33:bf:75:c7:2f:b9:85:22:ce:36:49:9e:3a:1b:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=84228867F62206E6932FEB8748943C6D64C56868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:af:09:1a:d0:ac:67:9c:09:76:b5:22:6a:
84:c4:d1:2c:01:c9:f2:cf:0e:73:df:19:19:92:7f:
76:d6:f6:79:15:a0:be:a4:12:c1:0a:41:7f:8e:ef:
e1:a3:1c:84:86:17:a9:c4:e6:fc:f2:7d:55:f6:a2:
bd:49:ec:c8:0e:52:1a:89:25:e5:28:38:3c:ed:0a:
f9:31:33:78:b3:a3:71:18:ef:a1:3c:19:41:1d:c7:
8b:48:2c:6f:5a:69:dd:40:96:1c:a3:8d:27:bc:60:
b2:b9:36:25:d0:02:4d:a6:af:e0:f7:e1:6c:32:fd:
8f:65:eb:db:13:ed:cb:06:a5:39:9e:77:b6:42:e8:
19:3c:05:08:e6:f4:62:27:28:76:dd:a6:e5:71:a9:
12:0d:3d:ca:06:13:76:40:cc:3e:2e:63:cb:cc:c4:
88:4f:2e:77:2b:b1:df:59:65:87:27:18:a2:94:b4:
03:98:d7:9b:ce:74:8a:6c:34:65:f4:67:c9:62:e5:
fa:90:18:00:2e:db:94:28:1c:d3:fc:83:a6:ab:26:
e7:bd:f1:04:0f:d7:cf:5a:ba:07:a1:d9:f3:6c:cd:
fe:a1:19:21:41:3f:86:04:00:4e:d1:70:b1:6e:ca:
f6:96:0d:5c:b8:55:54:23:7d:f9:b2:5b:8f:f0:48:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:88:67:F6:22:06:E6:93:2F:EB:87:48:94:3C:6D:64:C5:68:68
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:bac::/48
Signature Algorithm: sha256WithRSAEncryption
46:b8:0e:4a:97:49:a3:da:ea:18:67:27:82:2e:c8:98:8c:82:
15:2c:66:c7:4d:6a:5f:eb:85:46:9b:ac:e8:8d:fb:22:4a:d9:
22:ee:84:f1:f0:23:e5:93:07:a3:7a:c1:87:5f:f2:07:79:a4:
8c:93:3c:3a:3d:43:57:7a:04:b1:f4:6a:d6:78:28:38:58:e3:
fa:0a:2f:c7:62:16:3b:a2:15:47:4e:ca:56:ef:d6:b0:98:5e:
d8:b0:27:86:f4:94:11:86:9c:14:d7:20:a7:71:a3:63:b1:02:
54:bd:54:81:0b:83:13:cf:28:da:32:0a:0f:e7:3b:96:9c:68:
0f:7f:d2:59:ee:73:56:56:88:97:be:69:d1:68:f2:d9:ea:f8:
de:73:30:1d:61:3f:df:71:19:65:83:91:dd:15:c0:2f:6c:57:
e2:8d:7c:ef:60:e7:b0:50:30:62:59:86:f2:61:0b:6d:1b:69:
0d:54:d5:19:23:9a:e8:f3:61:f6:4e:df:02:8d:6f:be:97:e0:
a4:9f:5b:d4:64:e0:3e:89:78:da:e7:7b:6a:22:c1:db:82:f0:
7f:98:08:1b:57:74:bd:78:9b:b7:75:1e:5d:2e:f9:8b:47:a6:
a0:80:e8:78:be:23:d3:96:95:42:af:62:32:04:a1:18:24:42:
f7:91:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org