Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202340.roa
File: AS202340.roa (raw, json)
Hash identifier: J/P4d93suoN1FdUlvH/5m+YRhIAMwsqKj2oeLZD9auw=
Subject key identifier: D3:D5:04:4F:A6:9C:87:AB:9E:68:4D:D1:16:38:B4:99:4D:F1:8C:71
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 41559C505F42DAF029328AB4329AB8CA46A7F65F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202340.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 202340
IP address blocks: 2a06:a005:45c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:55:9c:50:5f:42:da:f0:29:32:8a:b4:32:9a:b8:ca:46:a7:f6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=D3D5044FA69C87AB9E684DD11638B4994DF18C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:72:93:f7:0f:a8:1b:39:98:e3:dc:3c:f6:
32:85:69:4e:5b:1e:18:a5:54:83:c3:b4:2a:a3:70:
ce:b7:ef:3b:6c:a6:cb:d2:4e:58:9b:8c:7c:83:d2:
95:ad:e6:ad:f2:ec:82:e8:b1:d0:3e:fc:ba:ba:03:
20:70:0e:04:c4:e5:96:8b:fd:f9:ab:38:21:fc:b5:
d4:dd:67:de:7d:49:49:46:ca:1e:75:87:82:99:af:
c8:1a:b6:af:1d:c0:0d:e2:05:6d:31:50:98:29:6d:
1c:e6:c6:91:08:cc:fc:18:d0:1c:8f:33:56:d6:df:
c3:d7:8e:6a:3c:39:ee:e8:14:6e:7a:06:86:16:5d:
64:5e:30:f0:e1:d7:bf:7c:c7:d4:5c:8d:d0:83:9c:
ce:9f:5f:e2:98:13:08:48:bc:f3:f7:4a:36:3d:df:
96:fa:fb:5b:2b:bf:c6:49:50:5b:12:31:04:0f:fa:
66:21:e1:e4:78:56:c5:ea:ce:06:17:9a:1e:c5:a4:
fc:f3:04:33:33:da:b7:88:bb:05:ae:47:9c:14:b0:
7f:5e:47:7d:a4:2e:5a:af:3d:bf:bb:be:c7:b2:e9:
f9:f5:ef:bd:b1:9c:0e:dc:69:cc:53:be:c7:23:87:
bf:fc:d7:24:d5:d5:06:1c:3f:87:95:8a:15:f8:6b:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:04:4F:A6:9C:87:AB:9E:68:4D:D1:16:38:B4:99:4D:F1:8C:71
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45c::/48
Signature Algorithm: sha256WithRSAEncryption
56:13:39:6b:96:97:da:57:78:76:f0:b4:3e:4a:af:9d:c7:04:
6e:16:59:72:e4:95:ad:b6:69:52:8a:6c:10:57:5b:a0:19:c7:
9b:8f:91:95:54:ce:0f:da:6f:e2:63:8a:f3:e5:64:68:ca:a4:
62:d3:c0:b0:ba:6f:71:0d:9f:40:14:55:6f:02:59:fb:ab:b9:
ad:d4:02:55:22:88:41:f4:35:7a:7f:f7:e8:05:0b:61:71:c6:
ee:f1:cb:c3:fc:da:72:ac:03:fd:39:25:7f:d5:71:95:97:0a:
86:ee:8f:8e:5d:4b:1b:37:15:50:d3:da:bc:17:49:4f:33:b9:
63:e3:b0:c8:6f:7a:00:18:08:ef:59:76:a3:48:68:6c:ac:88:
f6:97:f1:bc:a8:f0:6e:60:5f:e2:c2:fc:a9:51:5e:21:9e:84:
1c:90:33:f5:a9:8c:f7:90:c7:4a:f4:a4:36:f8:6a:d7:eb:1c:
d5:56:71:e9:c0:24:0f:d1:7c:c3:bb:2a:65:8d:ad:8c:cf:b4:
cb:23:32:8b:95:c1:4a:d9:85:09:5e:2b:77:8c:4b:1a:a8:76:
c0:2b:90:5b:64:4b:a6:86:19:c7:92:aa:e1:cb:66:bd:6d:67:
cd:43:d7:7c:ec:63:98:8a:ea:cf:e7:c3:d5:0d:1b:c2:fc:1d:
ef:cc:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:55 2025 by rpki-client