Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202828.roa
File: AS202828.roa (raw, json)
Hash identifier: QREjU+U4kzXEHPSaeHZ584fbKRI24aTF6yxUe3tAY8k=
Subject key identifier: 83:B4:F7:93:E3:00:DC:73:20:16:5C:8E:5C:BF:C9:8B:F1:60:29:7E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 21BFA682EC9C4FA70508A5DE03DB776FBF56F847
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202828.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 202828
IP address blocks: 2a06:a005:2dd::/48 maxlen: 48
2a06:a005:43c::/48 maxlen: 48
2a06:a005:bae::/48 maxlen: 48
2a06:a005:baf::/48 maxlen: 48
2a06:a005:17a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bf:a6:82:ec:9c:4f:a7:05:08:a5:de:03:db:77:6f:bf:56:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=83B4F793E300DC7320165C8E5CBFC98BF160297E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:4c:8c:2e:c0:da:38:71:52:cc:93:79:ab:
24:29:f6:e5:ad:0d:58:0e:a7:97:3f:cd:dd:ad:f1:
92:32:00:c1:a3:f3:7b:82:e4:3a:a4:09:f4:72:78:
16:9b:93:f0:7f:36:89:4f:50:a6:ea:4f:c9:08:32:
0c:ac:02:82:52:e9:8d:75:9a:2a:2d:92:97:8e:86:
1c:7f:b9:d9:c1:60:5f:4d:2a:5f:04:01:50:cc:b5:
8b:4d:8d:93:16:a5:91:5e:2f:28:08:56:43:fa:af:
28:7c:1f:15:99:e2:b8:30:d1:f1:b5:25:9f:b2:ab:
2c:be:41:7e:c6:be:90:8e:44:66:a7:0f:fc:61:bc:
f4:8a:b1:43:c7:01:85:81:e6:66:00:35:ec:00:38:
89:ed:6a:da:a7:53:1b:66:6e:b9:e4:cf:d8:e5:60:
21:ba:19:59:59:cd:1b:73:25:8e:c3:36:d7:a5:23:
45:19:a3:d3:f5:20:4d:af:a7:3e:9a:ec:94:b5:28:
3d:ad:f6:5c:e0:da:3e:2a:cd:83:03:22:59:0d:3c:
b4:b4:3d:56:3f:49:05:97:1b:a2:81:94:43:9f:cd:
95:54:2a:02:09:f0:90:01:c7:8a:d7:38:1a:35:d3:
a7:d6:e7:59:25:57:00:7f:c7:7c:52:d8:69:2b:e9:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:F7:93:E3:00:DC:73:20:16:5C:8E:5C:BF:C9:8B:F1:60:29:7E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dd::/48
2a06:a005:43c::/48
2a06:a005:bae::/47
2a06:a005:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:80:85:b4:36:76:53:6c:88:63:fe:39:4f:76:00:fc:be:67:
aa:b5:41:b9:48:f4:00:01:f7:5d:d7:d3:3d:fd:c9:f3:8d:12:
4a:73:68:3c:64:32:56:5a:96:33:d2:6e:2a:25:15:b6:36:4a:
e8:61:21:b3:b2:38:0e:00:5e:46:5b:70:ce:eb:ca:01:34:8f:
32:1c:02:9b:3a:33:87:bd:17:fb:e5:27:ac:70:98:d9:53:36:
8e:c6:69:99:4d:37:c7:b9:b0:35:71:0c:8e:3e:af:b8:c0:52:
14:a5:9a:fd:0b:31:4d:c2:4d:31:41:3e:15:87:44:b3:a1:9f:
de:47:aa:36:06:b6:cd:33:87:2f:04:51:e2:ac:d2:cf:12:1c:
8b:37:53:55:b1:02:ea:b7:92:dd:61:82:3b:e4:7e:4b:dd:a7:
bd:d8:ae:5f:6e:fd:b1:7c:b5:f2:67:54:84:8c:1d:8b:07:6a:
58:e3:e6:ce:4d:2e:0c:67:6e:68:1f:7b:95:0e:94:5a:83:28:
10:d2:d8:2a:bd:12:a7:c3:d3:cf:63:08:ca:5f:2b:2d:27:14:
79:2a:0d:9b:a0:2b:9c:d8:0f:97:2c:ec:83:40:34:15:c2:98:
09:74:9e:e8:33:bb:14:66:cf:88:67:01:cd:e5:52:d5:e8:7f:
2b:c8:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org