Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202996.roa
File: AS202996.roa (raw, json)
Hash identifier: i+ZsD8kqpMJByN34jlW9wE8XQFhpQwi99Gzdacxiyx8=
Subject key identifier: EC:1B:27:A7:24:40:D5:10:30:B5:25:12:A5:A4:AB:21:57:9E:F0:A4
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 50647BB219A4ED378BF1F7F6E2E43BC2EBB760E7
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202996.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 202996
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a005:d2b::/48 maxlen: 48
2a06:a005:1680::/44 maxlen: 48
2a06:a005:16b0::/44 maxlen: 48
2a06:a005:1c00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:64:7b:b2:19:a4:ed:37:8b:f1:f7:f6:e2:e4:3b:c2:eb:b7:60:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=EC1B27A72440D51030B52512A5A4AB21579EF0A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:69:0a:69:f3:c8:e4:5e:07:77:95:97:35:
c8:f5:ac:19:1a:cc:14:d6:45:84:b2:fa:0f:7f:c1:
71:e8:41:a7:d9:9c:69:a3:82:5c:e2:28:e2:66:86:
c7:73:c2:f0:ef:c8:9f:c1:fe:d6:df:d6:67:ec:61:
71:86:32:9c:4d:1f:4c:b4:c2:38:56:c7:53:ac:db:
10:10:9d:ac:67:4f:da:4a:90:e8:a1:f5:c0:32:27:
cd:fa:01:35:6f:4f:13:93:36:a4:92:67:f8:94:41:
78:df:eb:0b:a4:b7:38:fc:e6:b4:7c:be:12:a7:42:
56:23:f9:c7:0f:36:3c:fe:c8:61:b0:cb:7d:19:4f:
f0:dc:49:64:d4:62:ce:e7:72:ab:17:ef:f1:65:44:
25:8f:0c:f7:1d:9a:c5:c6:53:8d:08:9f:39:79:ff:
82:a9:81:ec:9b:57:f6:50:ea:2f:bd:86:c0:17:08:
f3:85:6a:9a:02:f3:92:b7:82:da:bc:cd:cb:11:e7:
17:fc:1e:4d:c3:8c:2a:e8:2c:d0:14:bb:de:9a:67:
69:1c:82:fa:55:f6:f5:b8:61:d2:d2:d3:3d:c1:98:
75:02:fc:b7:61:80:85:b9:e9:28:f4:39:fe:15:7d:
21:73:90:ec:2f:f3:d0:2f:0d:af:b1:b5:2c:e1:43:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:27:A7:24:40:D5:10:30:B5:25:12:A5:A4:AB:21:57:9E:F0:A4
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS202996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:d2b::/48
2a06:a005:1680::/44
2a06:a005:16b0::/44
2a06:a005:1c00::/44
Signature Algorithm: sha256WithRSAEncryption
00:2d:cb:1b:1c:c7:ef:12:c2:f2:ca:f9:d4:15:0c:2e:c3:09:
b1:37:28:a5:91:15:08:26:8f:61:de:23:9d:82:32:71:8e:11:
35:51:f7:3c:9d:3e:7d:14:7b:38:1a:05:6c:24:8f:7f:d8:a2:
c6:32:b5:fd:2e:c0:64:e5:fa:71:a6:67:a5:91:f7:49:a3:b6:
cf:fa:2e:90:39:d8:eb:8c:c3:f7:3a:91:f8:dc:21:a7:5f:bd:
5d:9f:33:ad:bd:38:f6:28:c4:63:8e:4d:57:c0:3a:a3:3e:85:
8e:fd:49:4d:26:d6:0a:fa:68:cf:c6:26:70:fe:bc:29:37:05:
c6:26:04:b9:8e:42:9a:f0:ac:33:da:75:a7:10:b9:bb:0a:99:
82:48:c8:c8:c5:d9:45:16:88:11:b4:f1:dd:6a:af:38:7c:52:
3c:29:f8:70:f9:0b:76:fb:8f:7c:5c:78:16:2e:a6:12:7e:a1:
d5:ab:77:58:65:bb:5d:98:bf:e7:30:7e:14:0e:a7:9c:b3:95:
38:dc:16:76:b5:6b:58:2c:74:10:05:4b:22:66:2e:76:41:65:
50:cf:2a:b8:40:ce:2f:20:88:d8:01:03:3e:db:05:fe:00:c5:
89:96:08:74:5e:69:99:a3:7e:74:aa:d2:a7:e3:fd:6e:1b:d9:
54:b4:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org