Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202776.roa
File: AS202776.roa (raw, json)
Hash identifier: Nvh5eG69LhPuuV0m2VpkcGXXyo/g3FieT+Mohy38Yvw=
Subject key identifier: F3:6D:A6:15:06:A6:C0:F8:E2:CE:7D:CE:9D:2A:32:A7:22:A5:94:15
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7A9161D0050E97CAC2E1D1CA0A3A4DEE9C446191
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202776.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 202776
IP address blocks: 2a06:a005:5a2::/48 maxlen: 48
2a06:a005:1d57::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:91:61:d0:05:0e:97:ca:c2:e1:d1:ca:0a:3a:4d:ee:9c:44:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=F36DA61506A6C0F8E2CE7DCE9D2A32A722A59415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:1d:98:cf:01:26:ba:80:bb:fa:3d:28:2f:
1a:79:ed:73:cc:85:ce:07:54:47:dd:81:d4:5b:4b:
7c:b2:ad:cd:6c:5c:24:39:a2:7d:39:6d:f9:b1:57:
02:95:5e:96:69:d3:42:3b:d1:ac:c5:1c:de:e4:e9:
df:fd:7f:d6:32:ce:9c:c6:01:3c:72:d9:dd:f9:dd:
16:cb:37:b6:1b:ad:cf:96:26:12:e6:f9:b7:0e:b8:
7d:4d:82:5a:fb:b1:f2:f7:51:8d:8b:0d:af:52:e4:
e1:f1:cd:d2:8e:20:0f:50:0c:d7:42:a1:ab:18:e0:
cf:ab:f4:27:9c:fb:d8:6d:4f:39:78:d9:70:94:b7:
86:a4:5f:1b:52:4b:af:c0:45:b9:d2:c8:ae:0d:51:
15:6d:4e:f3:dd:be:a7:34:5a:cc:a7:0f:85:e0:b8:
93:89:29:ef:46:fa:b9:52:bc:a1:f8:a9:fc:d1:89:
26:5e:c4:d9:0a:a9:e0:df:57:59:77:d1:e0:50:d0:
f2:72:f9:1f:55:46:23:c8:12:7c:81:2a:c7:c3:03:
c2:c2:1f:08:5b:ce:44:ef:d8:b4:73:ea:cc:f4:50:
a2:60:e7:01:47:4a:61:ad:86:c8:94:9d:6f:ed:04:
89:62:cc:21:79:44:6d:17:06:65:63:53:3f:42:35:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6D:A6:15:06:A6:C0:F8:E2:CE:7D:CE:9D:2A:32:A7:22:A5:94:15
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a2::/48
2a06:a005:1d57::/48
Signature Algorithm: sha256WithRSAEncryption
37:ae:22:9b:a8:91:0f:cc:b6:a6:61:cf:c1:62:3b:68:64:93:
44:24:aa:4c:6d:00:8a:b5:3c:1b:c3:c1:4d:8a:d9:2b:ab:cf:
b8:8b:02:d7:29:bc:b6:b9:5a:93:b2:d9:ed:a9:da:cb:15:5e:
73:3d:c4:c0:eb:8f:55:fd:18:1f:77:8d:15:b6:33:aa:de:6d:
83:a4:55:e7:59:6c:ed:1c:67:cf:db:9a:ba:c4:e6:10:29:27:
e1:82:49:16:9c:5c:c8:18:8b:da:1b:9b:3f:93:2a:02:a3:d2:
f0:6d:1e:9c:bf:73:64:63:c5:e9:b6:9c:aa:b5:2d:04:13:af:
17:15:b4:35:cf:f1:00:37:a4:ce:97:d1:a2:e9:6a:1b:61:6b:
ec:df:e6:c4:3f:ab:33:81:84:f6:a7:b9:f4:24:41:4d:2d:23:
73:4b:da:9b:4c:40:7d:97:e1:97:24:0a:38:d6:b8:8a:c5:ba:
99:a7:88:cc:b1:0c:5a:ce:79:66:f7:61:08:9c:40:1d:41:90:
b0:9f:9b:b8:b1:81:80:81:36:e5:08:a5:05:c9:bb:50:0a:ae:
9a:77:de:17:59:99:0e:20:6e:d7:a8:d0:8f:7f:30:b9:44:73:
3c:26:bf:e3:e9:ff:30:d7:8c:09:24:41:b9:bb:51:c2:4f:3a:
04:42:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org