Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202988.roa
File: AS202988.roa (raw, json)
Hash identifier: qUc1Nfc8QgtSth08kX+jZll96Fc0FIhy7iwy6uuE30k=
Subject key identifier: 9F:41:FB:6E:6C:E5:06:7C:04:60:4E:83:F5:D9:4E:80:3A:81:6F:87
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2D64E3EB573EB734AC9C7790A38A71D44769533A
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202988.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 202988
IP address blocks: 2a06:a005:857::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:64:e3:eb:57:3e:b7:34:ac:9c:77:90:a3:8a:71:d4:47:69:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=9F41FB6E6CE5067C04604E83F5D94E803A816F87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:31:dc:6b:a1:a7:5e:98:5c:38:29:bf:f1:
2e:d5:5f:71:5e:02:7b:c9:49:55:70:64:a3:db:3a:
9b:50:7b:6a:05:bc:8d:13:0f:87:75:c8:53:34:93:
14:38:a6:f8:1e:f5:6b:d9:e4:9d:5d:67:03:82:41:
40:4d:20:d9:3b:c7:10:73:3d:12:e8:57:82:c8:c9:
2e:b6:1f:f5:02:87:63:ad:71:22:83:84:3f:58:03:
b5:57:ce:f9:5b:07:5d:98:8f:c3:dd:52:0f:78:c8:
de:cf:61:19:23:35:33:8d:29:3d:e3:ce:b9:86:ca:
6b:9e:50:e5:b5:83:98:53:92:92:4d:7d:15:62:ae:
21:7c:2b:f5:1c:28:12:fe:71:18:a0:93:1a:1c:1a:
11:25:1a:9e:58:13:c4:ff:b0:0b:74:e7:db:98:64:
5d:85:14:f0:43:15:f0:d9:6c:bd:7f:c3:cf:8d:69:
63:30:49:04:4e:c6:34:7a:91:f5:2e:c6:21:b8:92:
0a:54:05:92:31:f7:a5:9d:34:da:66:2f:9d:a7:f0:
58:7a:1d:ae:b3:22:61:3d:b1:22:45:81:20:2b:b6:
d9:b1:ce:23:15:59:cf:44:bb:99:0e:92:06:fc:28:
0a:fc:3b:02:6e:74:72:4d:82:2a:05:ad:f6:98:cf:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:41:FB:6E:6C:E5:06:7C:04:60:4E:83:F5:D9:4E:80:3A:81:6F:87
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202988.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:857::/48
Signature Algorithm: sha256WithRSAEncryption
43:3a:20:57:e3:c3:d0:d1:44:f9:c8:8b:af:dd:2e:53:84:c8:
ab:94:6c:11:9a:dd:ad:65:a3:82:52:33:83:b4:15:2d:c2:5a:
fd:65:78:ad:06:f1:ab:54:18:94:71:a9:7f:0c:ed:4b:3f:31:
5d:0c:c3:28:7b:6c:a6:b6:31:2d:e8:29:2f:f6:48:da:9e:c7:
3f:80:3a:89:56:5e:d9:24:06:7b:3a:bd:3a:f2:7a:c0:30:a3:
56:f9:3b:67:b9:02:d7:47:16:3b:92:9e:6c:7d:ca:e4:ec:77:
57:d9:d8:75:f5:46:ea:1d:7c:8e:46:bd:5e:31:48:82:1d:ab:
90:bb:d1:ba:c1:9b:37:18:bb:a5:16:e8:34:3c:b6:2d:a8:21:
22:09:ca:2c:66:a2:c5:dc:7b:44:e1:bb:cb:65:70:3d:e7:80:
a3:ac:1c:c6:84:a8:30:8b:bd:51:f2:21:cf:95:37:f7:fd:96:
5e:c1:bc:3c:2d:1e:37:df:e7:ac:c8:a7:b2:46:df:69:38:2e:
c2:be:18:8d:04:6f:1c:5f:f7:d4:57:ae:f7:97:29:b2:dd:8b:
3f:a6:07:23:80:65:7b:57:11:79:f3:e0:32:c0:3c:05:1c:c7:
53:17:10:76:4b:e5:30:d8:55:82:57:f9:e8:3e:87:e0:e9:a7:
67:44:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org