Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202732.roa
File: AS202732.roa (raw, json)
Hash identifier: gH7kcZI+WYc9TrJUpLCOl9tqStXeCq20E0liP8eOj7o=
Subject key identifier: 78:01:BA:C6:9D:C4:1D:27:71:C4:29:68:E8:E9:8C:BF:F2:1E:FD:51
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 45723D008EADB95F252CC97B9EBDA41A9274C71E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202732.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 202732
IP address blocks: 2a06:a005:1163::/48 maxlen: 48
2a06:a005:1501::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:72:3d:00:8e:ad:b9:5f:25:2c:c9:7b:9e:bd:a4:1a:92:74:c7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=7801BAC69DC41D2771C42968E8E98CBFF21EFD51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:9a:88:33:93:70:81:59:40:1d:a4:fb:7c:
b8:d6:33:a0:83:68:99:09:c6:ce:d2:87:c7:ca:50:
96:22:ef:ad:6a:3b:33:63:05:dd:2c:5b:5f:de:13:
88:0c:3d:05:f2:b3:34:9b:c3:a2:3a:29:bc:97:59:
fc:21:12:2a:78:58:8d:32:79:48:16:dc:15:a0:a0:
d0:0f:94:e3:4e:a4:6c:57:33:6d:6b:70:ac:bb:d2:
27:05:03:5c:ab:1b:dd:0d:57:15:22:f3:af:02:b5:
2c:20:08:54:a2:10:b4:89:7f:7d:73:c0:c8:f2:93:
0b:51:1d:f3:06:5c:be:d4:76:c6:dd:72:c4:06:9f:
c4:4e:d1:32:48:6c:38:79:28:4d:16:44:b7:b0:34:
fe:ec:00:fa:d0:94:c9:53:85:96:84:b3:e8:00:7d:
a7:42:7d:4a:77:43:42:a5:4b:a2:85:f3:d1:77:a3:
25:f8:c2:26:a5:99:28:8c:fb:dc:cb:3d:c9:91:43:
3f:21:66:3c:4f:98:12:8a:fe:51:2d:51:10:d4:5b:
4e:c9:2e:c3:8b:ee:38:0d:76:67:ae:55:79:c6:a7:
b0:f3:1f:0e:67:d1:2f:3b:5b:21:52:34:2a:63:e5:
0d:03:2e:50:bc:24:c5:1f:f6:c9:ea:ac:92:b2:93:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:BA:C6:9D:C4:1D:27:71:C4:29:68:E8:E9:8C:BF:F2:1E:FD:51
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1163::/48
2a06:a005:1501::/48
Signature Algorithm: sha256WithRSAEncryption
29:3c:98:d6:ae:12:df:3d:39:35:04:cb:0b:3a:f4:30:f6:b4:
d2:3c:e9:c5:3f:ea:9f:a2:33:0a:7e:e6:b5:7e:71:75:29:04:
61:ec:c7:17:1d:7a:e5:29:81:ae:cd:1c:a8:95:dd:a3:24:be:
91:12:9c:ba:3c:d4:7f:0f:cf:4a:41:a4:80:88:9c:66:90:83:
09:b4:a5:ad:93:15:9a:39:c1:30:0f:ab:1d:58:cb:ea:ec:a8:
60:c1:bb:26:0b:d6:f1:3a:d7:bf:71:90:b3:b3:a7:0e:dd:02:
12:4d:be:d6:9a:f0:ea:35:05:66:04:95:ae:73:9c:33:b7:48:
7c:a9:01:3c:bd:a7:ea:2d:cc:e6:64:d9:6f:46:62:90:94:d8:
7d:1e:94:b2:b9:4b:0f:fd:e5:f4:7e:22:5a:82:26:dd:2b:05:
fe:45:cb:e0:85:a7:24:47:60:6e:34:e7:fd:34:b5:ab:02:c3:
c0:6a:50:75:7e:69:95:f2:0c:5a:ca:64:40:7c:51:e5:59:15:
79:3c:1c:01:fe:28:0c:4c:e7:11:72:54:1b:cd:55:a1:90:26:
0a:68:68:92:fb:23:a0:16:79:23:e2:67:ec:05:61:e1:a8:65:
cc:d6:00:9e:b8:2c:ef:cd:6e:12:2c:a3:3e:4f:b1:04:3c:65:
24:1a:fa:fb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIURXI9AI6tuV8lLMl7nr2kGpJ0xx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDc4MDFCQUM2OURDNDFEMjc3MUM0Mjk2OEU4RTk4Q0JGRjIxRUZENTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb5qIM5NwgVlAHaT7fLjWM6CD
aJkJxs7Sh8fKUJYi761qOzNjBd0sW1/eE4gMPQXyszSbw6I6KbyXWfwhEip4WI0y
eUgW3BWgoNAPlONOpGxXM21rcKy70icFA1yrG90NVxUi868CtSwgCFSiELSJf31z
wMjykwtRHfMGXL7UdsbdcsQGn8RO0TJIbDh5KE0WRLewNP7sAPrQlMlThZaEs+gA
fadCfUp3Q0KlS6KF89F3oyX4wialmSiM+9zLPcmRQz8hZjxPmBKK/lEtURDUW07J
LsOL7jgNdmeuVXnGp7DzHw5n0S87WyFSNCpj5Q0DLlC8JMUf9snqrJKykxMPAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUeAG6xp3EHSdxxClo6OmMv/Ie/VEwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAyNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgag
BRFjAwcAKgagBRUBMA0GCSqGSIb3DQEBCwUAA4IBAQApPJjWrhLfPTk1BMsLOvQw
9rTSPOnFP+qfojMKfua1fnF1KQRh7McXHXrlKYGuzRyold2jJL6REpy6PNR/D89K
QaSAiJxmkIMJtKWtkxWaOcEwD6sdWMvq7KhgwbsmC9bxOte/cZCzs6cO3QISTb7W
mvDqNQVmBJWuc5wzt0h8qQE8vafqLczmZNlvRmKQlNh9HpSyuUsP/eX0fiJagibd
KwX+RcvghackR2BuNOf9NLWrAsPAalB1fmmV8gxaymRAfFHlWRV5PBwB/igMTOcR
clQbzVWhkCYKaGiS+yOgFnkj4mfsBWHhqGXM1gCeuCzvzW4SLKM+T7EEPGUkGvr7
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org