Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202559.roa
File: AS202559.roa (raw, json)
Hash identifier: rm+yesQ2DpxtB+4C/9JCy7bymCVCzfpIFiM1vBu3QB4=
Subject key identifier: 12:88:E2:40:86:5D:1C:43:72:97:66:5C:A3:97:05:47:5E:D0:D0:95
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2525002ABCBC1F17C7389D42793FD0CCBF3AD4DA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202559.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 202559
IP address blocks: 2a06:a005:1940::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:25:00:2a:bc:bc:1f:17:c7:38:9d:42:79:3f:d0:cc:bf:3a:d4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=1288E240865D1C437297665CA39705475ED0D095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:7a:a9:c1:08:71:86:63:06:71:80:21:c6:
f4:55:5b:c4:11:f6:bc:77:82:42:1a:40:37:16:be:
a4:ec:10:b4:1e:e6:8d:7c:9d:c4:cf:f8:4b:67:7b:
37:5e:21:90:25:3d:b0:77:e5:5b:af:8c:d1:bf:b0:
14:5b:09:8a:53:64:80:da:1b:df:1a:5a:63:e1:48:
26:2d:1b:1f:4a:28:d6:e7:95:fa:31:9c:03:cd:f8:
4a:c2:35:51:82:71:1c:76:1c:8d:29:40:7a:51:82:
f2:5c:62:76:01:1b:59:ee:78:e1:42:b8:93:d2:d3:
56:d7:f4:aa:a5:9b:14:62:29:f3:32:a8:f1:03:34:
3f:3f:60:f6:b5:c0:e7:13:c9:d3:53:f3:43:fb:9b:
91:0f:07:f3:72:a0:bb:96:0f:40:0e:e4:d4:6f:ef:
52:98:ea:77:a3:21:c0:3b:32:51:1b:f8:77:f3:4c:
76:45:ce:52:63:b3:e5:10:11:70:d5:89:56:ec:35:
d6:c9:ec:14:66:1d:a3:f2:27:1d:f5:7b:ef:b9:a0:
88:4d:ca:f0:8b:2c:4e:41:1c:a4:b2:ed:c9:41:96:
f5:9d:53:b3:d2:c0:79:9c:ed:b5:64:50:57:f9:66:
f7:91:69:9f:a1:c9:36:4e:d7:61:14:84:b8:ef:5a:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:E2:40:86:5D:1C:43:72:97:66:5C:A3:97:05:47:5E:D0:D0:95
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1940::/44
Signature Algorithm: sha256WithRSAEncryption
38:33:1f:c4:58:14:59:44:d5:45:7e:2f:0c:7b:03:4a:71:23:
ab:67:47:1b:89:cf:01:7c:29:d1:b5:86:da:69:e8:fb:b6:08:
28:e9:d8:91:9f:8e:f9:64:cb:13:d8:36:b9:ad:f4:1a:d8:cb:
0b:4a:02:4b:a5:b1:05:25:61:6b:62:d5:34:4e:f8:85:75:cb:
43:c1:e6:f3:3f:29:2a:dd:f1:80:66:64:7f:89:00:0e:02:20:
2a:71:df:ca:ad:2c:91:17:21:d7:d2:5a:fe:1a:cd:a9:a6:7a:
4e:9d:ca:89:1a:f2:55:75:2b:50:23:f2:69:ac:65:6d:9b:32:
13:69:eb:89:d4:73:38:9f:c2:9b:30:e2:87:09:97:9c:80:07:
59:ff:c0:e5:7f:f8:4c:30:77:e7:b5:af:1d:88:e8:66:c6:5a:
75:14:d5:7e:77:19:5d:6c:d3:80:e4:1a:5f:b3:ca:ec:c2:86:
70:f8:f6:6f:14:6a:2b:ca:8a:f9:28:35:07:2b:63:1d:68:8e:
4d:19:c5:79:8f:b4:bf:21:31:92:f9:f1:cf:a0:93:d6:ae:af:
a6:e1:18:55:6f:5b:45:bf:bb:80:0c:b2:28:b9:2f:2e:6a:5d:
70:c7:c3:0e:74:86:f2:97:9e:e5:c9:8c:db:77:a7:b8:03:11:
d3:08:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org