Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207317.roa
File: AS207317.roa (raw, json)
Hash identifier: t/UEra+LsJcdlc7cUPHjqZyiuyt5XVjyt5SVvgYl/pU=
Subject key identifier: 88:5D:5F:DB:CD:CD:28:2D:9E:AB:8D:0E:4A:D3:39:04:2E:D5:09:0C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2A09AA63520ED379662734CA893E179265270323
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207317.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 207317
IP address blocks: 2a06:a005:2800::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:09:aa:63:52:0e:d3:79:66:27:34:ca:89:3e:17:92:65:27:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=885D5FDBCDCD282D9EAB8D0E4AD339042ED5090C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:c4:7e:06:cf:da:0f:ff:45:6d:aa:08:a8:
4d:5e:3f:09:f9:c4:50:28:89:66:10:67:8e:21:e6:
de:06:c7:ae:c3:1c:54:bc:b9:d9:73:3a:5a:29:fe:
0b:73:64:8c:fc:14:43:8d:4b:6d:a6:1e:7c:17:3c:
04:25:23:ba:2a:bb:9b:fe:04:c7:9a:97:fb:55:d6:
7c:ce:fa:f2:06:f9:5c:6b:cc:c5:ca:57:10:86:e4:
6c:5b:5e:d6:de:08:ee:46:74:51:2e:e9:b9:29:df:
4c:3c:ab:7e:1a:45:ce:a6:18:0d:20:f9:47:34:b8:
47:0f:3a:96:cd:3b:8e:b3:5c:86:22:c9:ff:78:5f:
57:15:12:12:56:e4:ff:bc:36:36:f4:d1:b1:23:f0:
27:33:47:1f:93:b6:a4:e0:17:65:e9:62:06:ca:75:
74:72:e3:1a:a9:8c:77:ba:f5:3c:ed:20:f8:55:cb:
c8:6a:69:99:26:d6:79:41:52:0d:ae:d5:e2:c8:36:
be:f3:a1:aa:37:19:ef:73:03:f8:14:03:93:aa:49:
b6:eb:3f:1d:b7:da:f2:28:cc:93:57:4a:19:e3:8f:
01:17:b4:58:cf:bf:f5:84:1a:0e:fb:28:97:6d:21:
14:8a:c6:69:31:82:fd:68:d5:9b:71:76:0e:99:f3:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:5F:DB:CD:CD:28:2D:9E:AB:8D:0E:4A:D3:39:04:2E:D5:09:0C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2800::/44
Signature Algorithm: sha256WithRSAEncryption
54:0b:58:8c:a4:31:97:e2:c1:f5:02:a5:60:c6:6b:ae:3e:6e:
b9:ac:4b:a5:32:84:12:2e:36:13:c7:e2:bb:a2:3f:07:95:af:
77:95:a7:dd:95:1f:2b:5a:5e:6c:c4:9d:62:71:5c:5f:52:84:
34:59:43:b8:26:ef:23:57:50:44:98:da:c1:29:52:77:b5:7a:
a1:71:14:12:d3:2a:3f:41:25:42:27:79:2a:30:6f:28:55:9a:
57:ed:46:d6:d3:d8:07:8b:30:51:00:f8:0d:ad:1c:fe:cd:ac:
62:c7:21:81:75:07:4b:00:d8:93:d0:ad:4b:ae:ed:08:21:76:
a5:a5:fd:db:68:ad:57:5d:4a:ae:b7:c8:66:00:81:21:8a:56:
4d:41:eb:56:b7:98:31:0e:0c:2a:4d:ee:d2:5d:2c:4b:e1:4a:
54:7b:9d:8b:a9:ad:d1:65:23:4a:d2:c9:dd:bc:4c:81:d6:f8:
32:ed:5b:86:6a:c2:19:a9:e8:ff:3f:93:54:f0:a8:7f:c8:58:
ea:d7:b5:9b:15:cd:bb:b4:60:34:d3:b7:dd:1c:74:15:5d:d5:
16:54:5a:12:54:ed:47:2a:83:8b:d2:df:98:31:55:cf:93:07:
cb:0f:03:da:0f:ac:53:a9:88:7b:fd:db:18:24:fb:f6:5b:8d:
23:bf:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org