Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202518.roa
File: AS202518.roa (raw, json)
Hash identifier: FjI+8z8aHMcEGcQHqdn2bRiwcoUPBD4M0cUDqHwkRIY=
Subject key identifier: 49:41:4D:73:82:F2:F4:57:B1:13:35:B4:76:82:46:B5:85:33:28:DD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6D200423460FC1895CB49A791B525B7F4CA0A287
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202518.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 202518
IP address blocks: 2a06:a005:1504::/48 maxlen: 48
2a06:a005:1d50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:20:04:23:46:0f:c1:89:5c:b4:9a:79:1b:52:5b:7f:4c:a0:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=49414D7382F2F457B11335B4768246B5853328DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:0a:fb:36:a5:b2:ee:15:53:fb:30:0a:c0:
50:76:0f:54:04:76:e7:51:31:e4:34:85:0b:0e:ca:
b2:30:21:20:be:ca:21:20:5b:d1:25:c2:e3:ee:9e:
ef:c8:cd:3e:ef:51:6b:94:bd:43:55:4b:9d:87:87:
86:b2:09:32:5a:17:14:4a:89:1e:3f:a7:47:81:70:
32:39:80:4e:f2:55:a7:5d:b1:cd:c4:ae:b7:d1:d1:
f9:4c:2c:0b:0b:fc:67:6e:b9:15:5b:f7:15:f8:57:
18:c3:53:13:2c:95:39:53:e2:55:ff:5c:6e:db:83:
87:6c:32:0f:ba:72:04:c3:81:ea:9c:55:fe:f8:15:
22:74:89:cf:5d:91:32:1f:f0:32:b4:a5:f9:23:1d:
28:b6:72:75:d3:b8:6c:f3:74:90:0f:e9:07:18:44:
62:3a:aa:35:4b:72:88:d9:db:f0:da:ca:d2:2a:e3:
a3:af:71:c4:ef:b8:64:1b:2b:82:1f:21:6b:67:62:
32:50:67:5d:91:27:0a:f9:67:f8:b8:8f:a2:7e:5c:
51:c7:2c:2d:30:b2:5c:36:ff:8d:ac:7a:e7:50:be:
17:09:44:86:56:76:5c:77:f0:ce:8e:91:d3:3f:71:
c6:f3:a1:f6:79:95:79:5e:d9:92:5c:9f:1c:6b:a5:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:4D:73:82:F2:F4:57:B1:13:35:B4:76:82:46:B5:85:33:28:DD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1504::/48
2a06:a005:1d50::/48
Signature Algorithm: sha256WithRSAEncryption
0a:ca:36:b4:67:b3:9c:be:4a:c2:dd:d3:79:ca:a3:b1:c6:0e:
3b:66:77:ad:b6:f3:a6:31:9f:6c:dc:9f:aa:4b:04:48:e0:b4:
ac:2b:a0:d2:0b:5f:a7:eb:88:fc:0d:53:1c:95:e7:c9:a9:eb:
69:a1:77:95:49:2c:39:98:52:32:e4:ea:29:0b:bc:79:e3:0b:
b7:36:3d:80:cc:f1:78:a3:9e:78:88:8a:fa:1f:fa:26:f8:0b:
7c:64:26:9f:5e:12:94:cd:93:81:43:35:bc:13:5a:21:0e:cf:
2d:83:79:c2:7e:3b:c4:03:a4:55:dd:33:41:f8:b0:e3:7a:41:
a8:54:e8:21:0c:3c:9c:6e:00:de:84:cf:14:52:e3:c4:a7:e7:
34:02:60:85:28:6b:d5:43:06:90:bf:18:3d:d4:9f:bf:b4:73:
7e:b1:19:b0:54:c2:ac:39:c8:3a:f0:df:e7:81:b1:cb:16:97:
0b:6c:94:dc:db:3f:c4:46:55:c6:8c:df:17:46:4b:53:30:a9:
bb:39:62:c9:7b:68:80:74:3d:5e:be:b5:50:51:31:56:3e:c9:
2f:c3:96:a1:98:bc:c9:78:49:50:e7:15:82:b4:19:0a:31:e6:
45:c4:d6:01:37:df:2e:6c:7d:7f:a7:f2:26:1e:1d:77:98:9e:
af:72:20:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org