Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207445.roa
File: AS207445.roa (raw, json)
Hash identifier: RCaSRiDjNgxkQmXmxTwOXJLsmNRnTovRO+jSoLfw2ZY=
Subject key identifier: 30:01:F4:F2:C8:F6:A1:95:9E:B7:E8:47:A8:8B:22:B1:31:81:79:6A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 56D291FE788F7FC03F23B52B07A01817AE11FC27
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207445.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 207445
IP address blocks: 2a06:a005:f90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d2:91:fe:78:8f:7f:c0:3f:23:b5:2b:07:a0:18:17:ae:11:fc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=3001F4F2C8F6A1959EB7E847A88B22B13181796A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:0e:1b:60:5f:c7:f7:b2:08:2b:72:a2:19:
f0:a0:4f:e8:ea:ad:46:7f:7b:e6:d2:b8:79:fa:65:
34:5c:37:42:b1:87:fc:89:4a:f6:e2:c4:a5:97:04:
89:e9:70:31:84:a8:24:f5:ea:ee:15:94:e2:db:3a:
a3:2a:21:b6:96:6d:7a:0b:85:5a:af:52:95:b7:d5:
58:47:23:e8:98:50:4a:87:62:02:1f:04:e6:99:a2:
71:b2:e0:e3:ce:6c:3b:48:a1:7a:14:a0:7a:7f:63:
af:ce:b6:fc:d4:af:be:a1:5d:9d:b1:6e:b6:29:1f:
82:04:40:ab:bd:a7:d4:4c:ca:57:ad:8c:1c:72:49:
fe:2a:b2:71:7f:25:8f:c0:be:8c:e0:cc:2c:32:d7:
c4:5f:f9:45:3f:e5:8b:d4:2a:f1:9c:90:36:cc:eb:
80:c5:a6:5f:5f:85:17:32:0f:4b:48:c4:1e:a1:c3:
ca:48:e4:f7:ab:0e:67:21:40:fd:49:9a:9b:26:fa:
93:65:20:42:e2:75:8a:81:18:1c:45:34:8c:70:dd:
ad:c5:d7:e1:6f:9e:4f:a6:aa:c6:aa:94:f0:0f:39:
7c:f3:41:f8:78:5c:23:44:ea:65:8f:df:4f:ef:e7:
96:43:79:19:22:26:38:77:0d:4f:67:ae:ce:8e:29:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:F4:F2:C8:F6:A1:95:9E:B7:E8:47:A8:8B:22:B1:31:81:79:6A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:f90::/44
Signature Algorithm: sha256WithRSAEncryption
67:53:4d:1e:8f:32:6f:9e:f1:9a:bc:a9:fa:36:08:a3:50:f4:
cd:0b:46:7e:bc:1d:c4:32:d9:86:c1:e9:ff:af:5f:6c:a0:7c:
81:ec:63:bf:92:a4:56:1d:b8:0b:b4:ba:f7:96:c2:58:d2:24:
8f:e4:fe:b2:af:75:b1:85:c0:30:ea:0a:b1:99:a9:29:e4:61:
99:84:e9:ff:ef:af:a7:8d:01:9e:94:60:b7:d5:b1:ab:92:21:
00:86:bf:89:6b:0c:7b:87:5c:da:1a:a9:be:90:16:31:7e:11:
76:20:d3:49:1b:98:97:66:07:5f:ed:be:ba:fa:c9:50:8d:f6:
63:73:3d:bd:4e:6b:85:c8:d9:a9:69:a1:a1:d5:d8:b4:09:d5:
32:2f:b2:e4:72:d7:75:11:31:b6:9b:fd:97:6e:22:16:56:b3:
ea:4c:0c:ce:a6:8b:21:88:28:b8:52:49:0e:88:77:75:2b:27:
62:fc:a9:97:e5:fa:68:6d:82:98:94:e2:12:a2:bf:5b:b2:32:
cc:c4:93:70:49:bc:1a:fa:98:e0:47:b8:b9:ab:86:44:fe:39:
ac:6a:a4:73:be:86:3c:a4:49:f5:41:a3:a9:54:29:e5:f5:7f:
85:7d:70:dd:f2:30:0f:cb:88:2d:e5:26:07:31:31:de:99:73:
1b:6b:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org