Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202627.roa
File: AS202627.roa (raw, json)
Hash identifier: FFTCxXxLj1WZtYgGG91prNH/+LwzT5hgNxKsSMrITwA=
Subject key identifier: E4:48:20:C4:DE:20:19:CB:4A:E4:03:6C:E8:62:8F:54:5E:E7:EA:64
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 77589E0A87DEEEF505320BEEF64E6586773E9FC3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202627.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 202627
IP address blocks: 2a06:a005:1f00::/44 maxlen: 48
2a06:a005:1f10::/44 maxlen: 48
2a06:a005:2330::/44 maxlen: 48
2a06:a005:2340::/44 maxlen: 48
2a06:a005:2350::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:58:9e:0a:87:de:ee:f5:05:32:0b:ee:f6:4e:65:86:77:3e:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=E44820C4DE2019CB4AE4036CE8628F545EE7EA64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:75:91:8a:b8:08:62:fa:4c:39:b4:7a:57:
2b:80:6c:5f:f9:a2:bd:93:92:8d:2b:50:88:a3:59:
db:10:e3:d1:9b:24:ac:3a:3f:d1:c7:1f:3b:43:f6:
09:00:16:ea:a7:67:d2:a1:55:d7:41:65:89:10:6b:
3c:2a:a9:e3:b0:13:42:5b:c8:bd:39:8b:e9:7f:93:
b4:15:87:63:8a:af:fc:26:e8:1d:10:99:5d:6c:97:
de:2d:e5:a8:8a:34:9d:d2:0d:9b:0c:7b:ee:b5:26:
07:dd:29:68:1d:fe:e1:63:ad:fb:85:db:d5:22:0f:
85:ea:e7:c0:37:be:5f:98:63:41:c3:e9:0e:76:b1:
0a:45:55:5a:61:eb:74:af:46:a0:d2:09:14:7e:76:
bf:69:cc:45:5f:98:c4:3a:77:dc:f1:3e:8b:a3:18:
2f:60:bf:2c:b6:26:c7:3c:36:2b:ee:44:d1:b7:bf:
eb:cf:77:d2:3b:0f:a1:1b:c7:72:35:5c:d8:0c:64:
c7:26:b8:30:0b:78:78:d3:fe:1b:34:2d:1e:38:0a:
55:09:ae:19:21:28:eb:b0:71:c4:81:66:e0:75:c8:
c9:e9:40:34:63:12:8f:52:85:f5:34:44:09:6b:64:
a6:8f:07:d4:2e:8d:c8:b7:75:a4:04:72:07:61:1f:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:20:C4:DE:20:19:CB:4A:E4:03:6C:E8:62:8F:54:5E:E7:EA:64
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f00::/43
2a06:a005:2330::-2a06:a005:235f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:c5:77:ef:ba:37:c5:53:04:7e:c5:23:93:55:59:af:5d:b6:
f5:1f:47:0e:d1:9f:74:94:d1:1e:54:06:d6:27:8c:65:34:f5:
95:83:e5:dd:ad:34:d5:72:3a:7e:1d:6e:70:eb:97:d0:82:7f:
33:f0:5c:b5:96:20:26:67:d0:2e:3c:96:e8:5b:3c:64:18:4b:
46:43:b1:cc:9c:bf:36:9e:b6:83:99:b3:09:78:8b:12:ce:a3:
ba:61:43:6b:16:75:02:79:72:92:6e:51:d7:4f:47:f5:dd:a0:
ed:18:69:14:41:c7:09:22:96:07:3b:35:ee:c9:f6:7a:53:53:
d5:94:43:ad:ef:bc:a4:7c:31:d0:ec:b6:b0:96:37:5e:2f:68:
58:ba:a2:bc:91:74:48:d0:11:6c:79:6d:29:bb:3f:da:8e:c9:
b8:ba:a9:b1:4b:b2:c1:0a:b7:ce:ca:d4:3b:38:3a:38:80:cf:
bc:00:4a:28:27:91:60:7b:db:67:12:b6:41:8a:92:78:72:72:
f7:7a:8c:d6:b2:38:87:81:bc:65:8b:ee:6b:01:89:86:ac:00:
88:b7:d7:f3:91:fd:b0:00:f4:0f:28:bb:5a:67:5f:06:03:84:
f4:56:96:8f:ab:74:c9:63:95:96:ca:5e:68:8a:64:17:e3:cc:
52:08:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org