Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207142.roa
File: AS207142.roa (raw, json)
Hash identifier: ob7OZxeORi3ZMlgrfFy3l7OTcaoaivqbOZRy6KOhvvQ=
Subject key identifier: 49:0D:59:A4:3A:80:42:E7:27:4C:80:00:6D:5A:06:58:70:3B:83:5A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5E1E25C483CA222AC71A34DCE6D85C26A400C498
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207142.roa
Signing time: Sun 01 Jan 2023 23:59:21 +0000
ROA not before: Sun 01 Jan 2023 23:54:21 +0000
ROA not after: Sun 31 Dec 2023 23:59:21 +0000
asID: 207142
IP address blocks: 2a06:a005:2580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1e:25:c4:83:ca:22:2a:c7:1a:34:dc:e6:d8:5c:26:a4:00:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:21 2023 GMT
Not After : Dec 31 23:59:21 2023 GMT
Subject: CN=490D59A43A8042E7274C80006D5A0658703B835A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:49:b1:f9:f8:ac:5d:48:9f:6f:d6:32:ac:
01:a6:45:04:22:15:b3:89:06:84:5a:fc:b4:b6:5d:
97:cc:49:8b:8e:98:3f:c3:2f:d0:43:90:87:ae:8a:
d2:c2:50:74:da:89:7f:8b:84:b9:d4:fd:c9:57:8e:
d2:40:c1:71:8a:5f:8c:4f:45:a6:d0:ba:ec:69:31:
46:b2:bf:c8:ac:43:b8:e1:04:31:b9:78:98:93:09:
5f:1a:af:1e:f1:78:c4:6b:35:7f:ea:84:de:44:f5:
77:f6:f8:77:94:c9:a6:6a:ae:7b:2e:6e:23:78:51:
35:92:75:53:0e:b8:ca:55:04:23:5d:bc:dc:f7:36:
92:8f:4d:e1:0e:00:88:c1:80:5c:2a:b2:2c:30:ba:
08:9c:23:85:be:a1:e8:b8:a4:69:a6:d0:4f:a0:c2:
10:ba:c5:48:49:47:91:f6:98:cf:45:48:d0:25:aa:
22:c7:5e:44:d9:7b:2f:4e:bd:ef:e5:e3:f9:6b:8b:
62:c0:f6:50:53:ba:e8:a0:c0:f4:84:ad:79:63:40:
26:95:cd:84:95:a9:48:5c:3a:8b:fd:61:ae:64:63:
7a:a0:1f:d0:a0:77:0b:e8:a2:b0:f6:a5:ce:06:24:
ed:5a:c7:be:2f:70:52:dd:ea:39:0d:bf:2a:f0:87:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:59:A4:3A:80:42:E7:27:4C:80:00:6D:5A:06:58:70:3B:83:5A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2580::/44
Signature Algorithm: sha256WithRSAEncryption
75:a5:6d:01:13:fd:de:58:82:30:9a:b5:ac:1e:2d:c5:3e:ec:
ae:97:69:07:c7:e2:0b:d6:e5:a8:33:36:71:a9:91:e9:2a:74:
fe:66:13:68:0e:c0:ab:88:30:8b:fb:30:5b:d2:12:6f:4f:f1:
2d:89:20:aa:0a:93:41:6e:80:58:64:ff:da:ca:e3:e3:ad:68:
06:90:df:40:e4:44:2c:0f:06:91:60:3c:27:3f:0c:33:27:9a:
cb:66:b7:63:dc:8e:fa:f5:41:34:ba:b3:7d:3b:38:51:74:72:
e6:27:5f:c6:61:5e:94:b8:92:4c:f7:bd:66:8b:9e:c9:c3:7d:
48:e2:6c:28:4e:22:2d:b1:2e:18:95:9c:61:ed:92:bc:a4:03:
35:1c:30:c9:c0:56:ae:e1:95:2a:ed:b0:9e:25:88:33:a1:6a:
97:37:10:6f:e0:73:e0:07:fe:7c:61:47:59:30:9c:c1:a2:7a:
0f:43:96:7a:ba:58:ae:92:0b:d7:3f:f7:f3:ea:52:2a:c9:11:
a4:a7:22:28:13:10:49:34:33:f8:5d:7e:63:2b:2f:1d:38:ff:
d5:c9:52:cf:84:af:71:e6:41:54:53:b0:09:cd:04:bd:34:e8:
f1:a2:94:d1:81:e5:24:98:24:7e:12:4f:2f:26:24:75:57:b6:
bd:98:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org