Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202952.roa
File: AS202952.roa (raw, json)
Hash identifier: AKk8qaFlECPSN0Fk4ziwEntFWYZRHU6AT8D/Rt2eP00=
Subject key identifier: B3:04:7A:47:B0:C9:15:30:95:74:81:6D:01:F4:B2:5D:1E:B8:8B:65
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0CCBD5EC8690B98D65F72EF979DA7EBE01A08F66
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202952.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 202952
IP address blocks: 2a06:a005:1b90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cb:d5:ec:86:90:b9:8d:65:f7:2e:f9:79:da:7e:be:01:a0:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=B3047A47B0C915309574816D01F4B25D1EB88B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:6f:d5:b5:19:78:c9:0f:d5:ce:89:c5:13:
a2:17:58:b1:af:d3:93:9f:79:de:73:5b:dc:70:73:
97:73:38:64:62:c8:ee:93:41:ef:19:65:bf:22:0b:
95:e6:c3:39:48:b4:f2:87:a8:86:ac:4f:41:53:52:
0b:85:31:a5:70:b7:30:a4:a5:1f:c7:89:bc:dd:ee:
78:0f:ee:b0:6a:80:47:ef:f6:48:89:62:94:29:13:
90:e6:0a:17:9e:70:4d:81:d2:dd:e3:ba:c3:f2:db:
9b:65:1e:3c:f5:e1:c1:56:6d:fc:83:a4:41:9b:13:
61:a3:32:07:53:57:d3:0e:98:d2:a9:e3:35:97:dd:
12:fd:e5:b9:dd:b5:99:28:c6:53:94:58:f8:7e:3b:
72:47:be:19:2d:cb:54:4e:e1:78:4f:2e:14:54:d0:
3b:da:ad:ba:3e:e2:e6:10:a3:9f:ac:6f:69:9b:a7:
0a:c5:db:e0:09:14:71:52:32:b9:c4:20:eb:ed:a7:
3f:a9:45:a9:1f:2a:3b:7e:66:a1:8d:70:ca:1a:54:
73:84:13:ff:89:5a:78:60:30:44:b5:3e:59:5d:e5:
03:35:35:ff:d7:da:ef:40:52:5e:21:ac:5d:22:a7:
26:52:57:86:ab:9c:39:3b:31:f0:96:e2:32:f3:37:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:7A:47:B0:C9:15:30:95:74:81:6D:01:F4:B2:5D:1E:B8:8B:65
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1b90::/44
Signature Algorithm: sha256WithRSAEncryption
83:49:e2:fd:28:85:dc:8d:96:ed:18:b9:b6:bd:b3:a6:77:91:
02:ab:97:1d:b0:73:8c:ab:d1:07:34:51:3f:4d:ed:04:a8:6a:
69:1a:b8:e2:04:5a:fe:86:1f:08:d8:61:ce:65:f8:ae:b1:d1:
16:69:f9:01:a2:f8:a0:41:7f:81:73:c3:f5:26:1a:c4:c4:ed:
ba:ed:c4:dc:7b:a8:cd:2e:c0:de:1b:85:b7:ef:f5:43:c3:70:
2c:ba:c8:4b:c1:30:13:e6:21:88:06:54:4b:8a:e5:b3:7a:ad:
68:df:55:df:d6:3e:f6:2a:31:f2:f7:68:bf:15:1a:58:b3:a7:
35:a5:2f:a6:42:2e:fa:8e:2b:12:74:03:02:8b:3b:94:f3:b5:
34:0f:ac:65:3f:e0:c5:9b:93:94:d5:00:4c:6a:af:88:22:c2:
50:89:31:5c:a5:10:4b:87:3a:86:d5:ee:2c:29:a4:87:f2:c7:
59:5f:33:ff:03:49:59:a8:fb:55:62:71:33:6e:70:e5:8e:f8:
f5:74:c4:56:76:dc:06:39:1e:3f:f6:7b:4b:7b:9f:af:bb:a0:
5f:45:f7:97:bd:4d:88:69:18:eb:ec:55:4e:82:8f:84:af:1e:
5d:fc:6b:d2:38:f1:af:e4:6b:8f:42:7e:01:cc:5e:b1:13:6e:
c5:9f:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org