Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202939.roa
File: AS202939.roa (raw, json)
Hash identifier: OVIH49ir93tB1nfrMTlWMV03R3W4X+Jn5CLA7qPpJGc=
Subject key identifier: A8:33:17:BC:87:49:AD:47:76:77:21:75:D7:4B:FF:96:0A:7C:B0:37
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 49704214C9AAB421742A0BDC0A62222705C2828D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202939.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 202939
IP address blocks: 2a06:a005:1ba0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:70:42:14:c9:aa:b4:21:74:2a:0b:dc:0a:62:22:27:05:c2:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=A83317BC8749AD4776772175D74BFF960A7CB037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:06:ec:93:73:93:bf:22:a5:9c:df:6a:72:45:
cf:6b:30:2d:5d:89:2f:f1:c0:65:31:67:98:eb:d3:
df:b5:5e:2f:55:a6:a0:7d:a5:d4:0b:0c:37:4c:5a:
c7:96:94:0d:99:55:eb:da:c0:90:5f:e0:d6:53:44:
7a:ef:ff:05:63:33:fe:75:e6:66:39:4c:31:5a:7d:
cc:b9:90:c4:0e:a6:94:1c:bf:61:8d:02:5f:a5:7e:
eb:90:f0:2a:b4:2c:62:4e:32:84:3a:2d:83:d9:05:
5f:f2:3d:df:62:21:6f:f7:fb:e4:6c:9c:64:79:c9:
81:2d:12:8c:85:35:7f:04:56:63:eb:64:b3:70:6c:
65:53:4b:0f:1d:3f:6d:86:e6:c6:43:28:2f:cb:54:
fb:9a:a5:bc:e5:ff:6d:4b:4b:2a:03:c0:47:cb:e4:
28:5c:83:84:1e:6e:81:95:d1:b6:1b:a1:54:9d:1f:
40:82:9b:77:b8:59:c4:ec:97:f0:2e:8c:1b:cc:42:
23:b1:6e:5c:f9:8a:60:32:69:77:29:20:1a:8c:e8:
fe:a8:c8:fc:40:7a:a0:9f:3a:e7:a2:a8:3f:62:f8:
a1:64:bf:c9:d3:1b:96:44:2c:6a:63:58:5c:13:de:
9a:da:57:7b:59:87:11:7b:cb:35:05:86:b2:65:71:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:17:BC:87:49:AD:47:76:77:21:75:D7:4B:FF:96:0A:7C:B0:37
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ba0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:e7:24:7d:c7:9a:9a:05:77:50:30:fe:ed:5a:2b:cf:92:83:
4a:61:4c:0e:2c:6d:df:1b:ad:25:53:71:36:15:96:e0:eb:f4:
81:b3:5e:be:fe:4b:4b:67:70:a6:9e:54:fb:fc:fa:22:76:6a:
c4:17:a6:d6:d4:0f:17:29:a4:89:f8:b3:d0:43:78:b3:c5:f5:
c8:34:fc:34:bd:cf:ba:81:6f:97:b6:06:1c:0a:cb:16:07:54:
dd:6f:e2:e9:30:b8:5d:c2:30:cc:d5:77:bf:f8:d1:b7:13:16:
19:e4:83:90:81:79:a0:bd:43:bb:54:42:c5:7b:e4:4f:92:c8:
61:80:25:1b:be:bc:d2:98:44:29:6c:55:62:59:0b:ce:93:79:
ed:88:e8:3b:0f:4f:82:3e:c0:0c:2c:78:a7:f2:dd:c8:72:9b:
21:5f:44:6d:1c:b5:cd:83:9e:82:b8:bb:1f:2f:66:4b:09:c0:
08:34:08:be:e1:61:5f:26:ba:37:1d:60:e4:5d:d7:aa:9b:1c:
69:b8:20:85:3b:b3:a4:48:bf:58:c2:38:2c:9a:12:f4:9c:cd:
fa:52:d5:bb:97:fe:4b:b4:d8:75:22:2d:30:c7:84:b2:95:d3:
7c:7d:60:0b:4b:96:8b:e9:44:e6:c4:7a:d8:90:6c:12:e4:8d:
ab:5c:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org