Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202685.roa
File: AS202685.roa (raw, json)
Hash identifier: gP0y31Z8OWOiib08RrTblloBPjYLeWHHmILn3o3ycJE=
Subject key identifier: CB:6B:28:A2:BA:45:EF:04:64:F2:CE:DB:E0:83:A1:D4:9A:DE:2B:04
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 323C8215DBE227DDE6B8D002E252766873004960
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202685.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 202685
IP address blocks: 2a06:a005:1e80::/44 maxlen: 48
2a06:a005:1e90::/44 maxlen: 48
2a06:a005:1ea0::/44 maxlen: 48
2a06:a005:1eb0::/44 maxlen: 48
2a06:a005:1ec0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3c:82:15:db:e2:27:dd:e6:b8:d0:02:e2:52:76:68:73:00:49:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=CB6B28A2BA45EF0464F2CEDBE083A1D49ADE2B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:bb:d2:8b:d6:8a:c3:29:6f:7a:8a:78:49:
d4:b9:bd:7b:71:ad:c4:07:c0:ab:45:a5:7c:38:37:
96:73:7b:b1:e0:d3:b2:e8:35:4b:3b:26:fa:49:e2:
60:21:cc:76:62:12:8c:2c:ee:be:e5:04:06:e7:d4:
ab:41:a4:e9:9d:89:2e:9a:5d:94:b0:ac:ad:a6:d5:
60:33:ca:e8:d6:6e:94:89:7b:24:52:28:9f:c4:af:
a9:fc:89:45:02:b7:67:4b:98:12:0f:08:f6:dd:72:
af:88:46:b4:89:3f:2a:c6:fd:a1:64:16:7e:01:fa:
6b:c3:b7:86:50:ca:fe:d7:5e:f5:2b:1c:08:09:59:
cd:b9:06:e6:a6:6d:68:70:53:a5:1a:be:1b:3a:9f:
86:8b:53:1a:df:1e:d8:33:04:79:90:79:e8:ba:be:
44:24:38:65:7b:0a:45:78:8f:31:df:26:64:18:84:
c1:ad:e3:11:21:40:ed:ed:e2:80:b1:d7:a6:b5:4b:
1b:94:df:2f:80:6d:b0:8c:d2:80:e9:48:ba:c4:3c:
22:55:92:a4:a1:51:7a:3b:33:47:1c:58:33:e5:a9:
ee:4e:34:c2:a4:92:46:67:ab:bd:93:9c:ac:ac:a4:
2d:20:ed:32:c1:b8:af:09:bd:25:de:b7:d3:4e:75:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:28:A2:BA:45:EF:04:64:F2:CE:DB:E0:83:A1:D4:9A:DE:2B:04
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e80::-2a06:a005:1ecf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:4a:12:1a:f5:52:49:93:50:a3:e9:8d:ab:c4:32:38:f4:6d:
32:3b:a3:0a:c1:ce:9d:a5:a4:7d:87:88:ea:25:85:29:cd:42:
80:cb:81:cf:e2:83:eb:ea:1c:d5:bd:b1:63:fd:84:c0:a7:25:
9b:bd:f8:e1:50:96:22:5c:cc:01:b4:77:98:95:ab:26:8a:a4:
76:88:42:19:a5:de:2a:67:11:2b:9e:70:c2:f3:5c:21:12:be:
51:f5:7c:51:eb:ac:68:40:26:bb:ee:fc:df:90:72:f4:a2:a3:
80:5e:63:fc:2d:b3:0c:2c:c8:cd:2b:05:af:6f:5e:37:10:fe:
92:21:73:ef:e8:c0:d0:3c:5f:38:bd:f2:c3:35:f6:67:2f:45:
aa:f6:b2:87:5c:a4:8a:c0:c4:4d:c0:af:8e:74:ad:32:5d:ee:
32:71:25:89:54:22:45:a0:6f:5b:fc:6d:4c:d3:8e:ee:53:ae:
7d:e4:3b:82:c2:9a:2f:d9:90:34:20:6f:94:99:6d:e8:7d:f6:
b0:92:2c:28:a2:9d:dd:d7:1c:ec:bf:06:b6:f1:79:4b:30:b9:
11:8d:8a:47:ca:44:d7:14:35:fd:d5:ff:ec:84:e2:c0:cc:f2:
69:a8:1c:ca:35:e8:93:e7:66:47:7a:89:e5:68:a0:92:08:9a:
98:d7:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org