Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202941.roa
File: AS202941.roa (raw, json)
Hash identifier: mXR8iGRdWTYs+SKL5DMaGr1rQk3MqfhY8bPiBnypGPY=
Subject key identifier: A0:84:5F:48:63:87:28:AF:47:97:C3:44:32:4D:10:7F:98:77:96:27
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 106EF43B03718E7F817FF006A8ADE7EEEEDA95AD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202941.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 202941
IP address blocks: 2a06:a005:21d0::/44 maxlen: 48
2a06:a005:21e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:6e:f4:3b:03:71:8e:7f:81:7f:f0:06:a8:ad:e7:ee:ee:da:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=A0845F48638728AF4797C344324D107F98779627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:fe:6b:ae:6a:7b:fe:45:72:28:84:d3:56:
71:7c:43:ec:75:9d:a4:73:e9:4e:4f:21:4c:16:9d:
27:ac:03:e0:7d:13:8b:85:84:f0:83:e0:e6:dc:92:
4b:7f:60:ae:21:a5:f7:a3:a4:4d:6c:3e:80:b8:a1:
41:82:9c:4d:a2:fa:96:58:05:86:c0:69:4a:cb:05:
49:f0:1f:c5:3c:11:5b:00:90:c6:c6:44:ce:66:e1:
bb:f9:ad:bb:08:84:15:66:b7:ad:fb:2c:d1:3e:c1:
9b:eb:2c:6a:c9:2c:42:b4:e8:cc:f6:14:68:e0:25:
fe:3a:89:86:9e:40:a5:39:20:65:23:53:e2:5d:7a:
31:d8:e5:aa:91:8c:74:6c:1d:b7:e7:65:4d:fa:79:
30:2d:50:d8:30:9b:5d:62:ad:df:df:74:16:f5:60:
ba:33:fe:df:a1:41:a1:d1:d1:f2:98:4b:e0:22:fa:
7f:2c:5b:07:0d:d5:d5:ff:ff:08:bd:bf:c0:df:17:
3d:fb:7a:01:3b:26:8c:08:5c:11:28:86:36:27:86:
d1:48:43:79:1c:19:0d:df:89:ef:cc:69:c3:65:10:
39:dc:c0:11:a3:97:f2:42:fc:d6:fb:39:f4:dd:8f:
d5:76:59:8a:d1:b8:36:2c:a0:4f:3c:08:39:08:ee:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:5F:48:63:87:28:AF:47:97:C3:44:32:4D:10:7F:98:77:96:27
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:21d0::-2a06:a005:21ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:46:10:10:a2:43:e2:01:22:6f:63:7d:24:ac:e2:ac:bc:91:
d2:ce:41:10:07:57:47:c9:bd:ff:43:e8:07:33:ce:3d:ac:85:
a1:ea:2d:aa:dd:5a:ae:64:c1:15:5e:18:a6:a7:e2:c0:9e:19:
54:28:b1:30:63:d7:79:1c:41:4e:65:3d:8b:dd:28:0b:03:6c:
90:3d:14:48:2d:7b:bf:28:7a:f3:6b:9c:c7:32:bc:9e:ab:3f:
8b:f4:43:b1:44:8a:14:85:4c:b8:c8:d2:59:55:97:95:ed:81:
b3:1d:64:ee:82:84:a2:49:9a:58:14:6e:8f:3c:ff:be:6d:d3:
20:22:dd:ae:83:a2:34:95:41:ef:d2:19:92:be:2f:17:c9:51:
25:98:c4:d2:cb:e4:f7:f5:de:18:ab:16:bb:7f:2f:d5:d0:d7:
bb:6d:64:99:3c:bc:34:bd:0e:45:42:bb:cb:b7:48:13:8e:25:
51:76:11:84:88:90:3b:d7:89:94:b7:8c:7a:1c:e4:f6:1e:76:
2a:5a:82:47:1f:ef:cf:e9:80:1d:f0:f2:69:a1:42:53:c3:7f:
cc:aa:95:60:bf:0e:0e:ab:ec:9b:20:b3:52:60:45:c2:8a:86:
8f:db:94:98:0c:89:1d:f7:9d:1d:9a:08:c9:08:59:21:75:cb:
bc:7e:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org