Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202827.roa
File: AS202827.roa (raw, json)
Hash identifier: 5IktwRFAgL/znVWYM3bqRXZWpIp1mk+rUUzm2XoIqIk=
Subject key identifier: 98:49:C8:44:09:9D:F7:74:27:C5:0D:CA:09:45:CA:35:EF:6F:61:41
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 482B67F1E26303A2DFC6C69F22E6BB1B2992F31D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202827.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 202827
IP address blocks: 2a06:a005:1bc0::/44 maxlen: 48
2a06:a005:1e30::/44 maxlen: 48
2a06:a005:1e40::/44 maxlen: 48
2a06:a005:1e50::/44 maxlen: 48
2a06:a005:1e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2b:67:f1:e2:63:03:a2:df:c6:c6:9f:22:e6:bb:1b:29:92:f3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=9849C844099DF77427C50DCA0945CA35EF6F6141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:ee:0c:6f:3e:22:5e:55:24:87:2a:f6:1c:
ee:5f:e4:ef:d4:0c:48:99:af:ee:91:44:2f:67:bf:
b5:d5:73:ad:56:62:3f:a3:1b:f2:bb:44:33:1a:41:
b8:3d:8f:e6:3d:ff:c7:6d:aa:7a:d7:35:24:e2:35:
27:56:e4:11:a5:81:2e:ac:6e:de:4b:4a:38:3d:61:
6c:54:d3:bf:6c:72:b8:df:29:f3:e1:77:f5:cf:cd:
04:d4:c0:81:d5:ae:86:f0:4a:30:bf:93:54:0d:6c:
a2:9e:d2:7a:29:b3:f4:88:76:43:eb:2e:9a:7a:da:
77:21:73:58:e0:35:a6:5a:c6:fa:db:b2:cf:4c:b6:
56:7f:96:a8:89:7a:ac:d3:2b:80:51:8c:96:69:c7:
be:5f:cb:0c:fe:2c:f0:71:e7:28:d1:8a:77:e1:e1:
46:7f:9f:51:6b:b7:fb:02:40:30:e1:b5:e8:3c:fa:
b0:4d:75:33:42:c4:61:3c:4b:59:f0:54:64:aa:be:
41:ab:1b:ca:3a:d0:25:a0:bb:87:cb:a0:60:ed:f3:
4d:11:d9:db:94:76:30:a6:8e:25:88:5d:36:0c:d5:
ef:a4:46:23:b3:f2:c0:a8:c6:47:e0:de:0c:eb:f5:
99:a1:fa:5f:d4:48:1a:30:58:8c:c3:b5:5a:f3:a8:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:C8:44:09:9D:F7:74:27:C5:0D:CA:09:45:CA:35:EF:6F:61:41
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1bc0::/44
2a06:a005:1e30::-2a06:a005:1e6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:06:f4:11:a4:bd:09:61:73:00:3e:3c:99:20:72:3b:a7:98:
94:07:a7:cc:04:b8:e1:bb:1e:90:56:e3:b7:5b:b7:b5:42:15:
77:c9:ee:7b:a9:08:a9:66:39:8c:56:fc:6c:61:32:a4:4b:31:
09:b6:10:7d:8f:c1:d4:e3:86:6c:40:99:79:16:c3:8c:4e:15:
ff:52:26:3d:09:6f:a6:a9:55:15:20:f1:2f:7c:15:a2:38:c9:
4b:50:e8:db:b8:9b:40:5d:14:97:e2:2c:ce:ce:7e:ca:3c:7f:
1e:b6:36:13:d5:16:59:59:e6:bc:58:cd:a8:e8:57:36:86:64:
b4:8b:20:00:e2:84:41:83:60:45:80:50:69:a6:49:d2:0e:b7:
b2:69:2b:e3:fe:19:e1:7a:91:66:e9:87:d6:93:4e:05:4c:b6:
70:00:21:1b:8f:6e:13:e8:d6:d8:bd:39:f2:f5:a5:cb:e4:04:
ff:3a:02:6d:18:89:11:41:b5:f1:28:0b:02:9c:f1:7b:b0:7a:
3a:a7:5e:eb:95:b6:7b:a7:d7:c4:90:cf:2e:58:86:3b:54:74:
49:75:ae:f7:de:b3:60:be:16:d5:7b:45:cb:0a:fd:85:f1:77:
4b:7a:48:13:4c:46:05:07:49:e2:46:03:bf:5a:b2:d7:e6:ad:
0b:ac:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org