Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202528.roa
File: AS202528.roa (raw, json)
Hash identifier: +K2ZIBbPU/m3BHtywug5RutqC2XEOhuPCUTmDZWM05s=
Subject key identifier: 5F:8A:1D:01:AF:17:32:0D:C0:71:03:0F:7D:BB:09:75:7F:D1:2B:0A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0EF52CCAB671F8E297306A0C5120B3DDE9F67CAD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202528.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 202528
IP address blocks: 2a06:a005:1d56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f5:2c:ca:b6:71:f8:e2:97:30:6a:0c:51:20:b3:dd:e9:f6:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=5F8A1D01AF17320DC071030F7DBB09757FD12B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:0a:fb:db:16:a7:ab:c2:df:37:67:5e:2f:
85:3e:e1:2c:f4:39:2d:87:94:14:5d:18:b0:e8:27:
92:b3:63:a1:44:2e:79:f2:73:1d:e5:0a:04:f2:9d:
83:f9:2d:58:0c:95:73:01:d6:33:bb:fd:a5:dd:a3:
26:ba:c6:69:27:fc:5b:bf:9b:23:d6:0c:41:b3:d7:
0d:47:bd:db:99:a4:f5:2a:a2:ef:bd:ca:f6:6f:d6:
61:57:b4:ea:4d:25:5e:07:73:df:ae:be:1f:31:a3:
70:7b:bf:31:2e:b4:25:83:7d:b0:22:5f:4a:5e:0b:
3f:e9:98:04:4c:b6:ab:aa:60:05:db:e5:84:11:03:
fa:0c:0a:e3:3f:5c:dd:76:31:01:f9:f5:04:66:81:
19:da:8d:ea:d5:05:0c:17:10:29:2c:d8:57:08:6a:
61:95:48:fe:22:66:f7:21:c0:47:e1:88:62:09:a0:
47:78:8f:55:4f:19:e4:a0:6a:32:cb:ed:90:56:c6:
0b:2b:21:fe:c3:9f:d8:1d:5f:69:1c:53:12:45:db:
c6:f0:b8:f6:0d:83:79:63:1c:e9:09:2d:8f:09:11:
d5:f6:f0:41:33:1f:54:7e:0a:ab:82:cc:1d:fd:b3:
75:3d:7e:2e:71:6e:67:2f:7a:f2:8c:cd:a9:b7:ab:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:1D:01:AF:17:32:0D:C0:71:03:0F:7D:BB:09:75:7F:D1:2B:0A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d56::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f2:f7:4f:7d:8d:f0:11:15:4a:eb:bf:d7:74:21:67:60:49:
43:02:72:52:72:1f:f4:37:d9:5a:3d:51:35:a0:d4:a2:28:58:
97:9f:03:c8:a4:e3:82:4a:38:d1:58:d4:c6:22:a7:40:00:e1:
80:46:42:e0:91:35:f8:e7:96:9b:c7:a3:26:8d:73:35:01:41:
a9:36:03:98:55:3a:e6:8f:6a:ec:ea:91:2a:cf:a4:7c:58:0c:
94:55:44:90:fc:a5:02:cb:32:39:8b:18:d2:f2:48:82:7e:eb:
11:37:84:8d:e3:a6:01:15:71:21:1d:33:0f:57:a4:38:f5:6a:
bd:6c:23:ef:e9:49:32:c0:6e:07:5b:7d:7d:99:99:a1:1e:2d:
04:fb:20:9f:78:90:85:75:9b:d0:ca:9b:88:88:14:73:c2:ca:
6a:83:73:67:e0:d0:4a:f4:fd:3e:27:fb:4f:0e:cd:e0:9c:e0:
4f:38:64:9c:7a:08:cd:a0:d2:c2:92:64:96:ba:90:67:a4:74:
50:6e:9b:14:1e:bf:a8:60:97:91:f1:81:b5:6a:16:d2:d0:67:
84:95:a0:b9:89:e4:b8:ff:c3:79:5a:0b:88:f3:6e:e8:23:23:
2e:a0:fb:99:14:1f:13:18:f2:72:09:d6:a4:47:e9:78:78:88:
56:eb:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org