Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207762.roa
File: AS207762.roa (raw, json)
Hash identifier: U2p0cBeVKizaYyKfyhJyEiCo3TYkQTqNTt0bTMEGY5Q=
Subject key identifier: 1C:FA:37:CC:04:BA:FB:CD:BE:5E:14:74:48:43:2B:F3:C6:E5:25:CC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 26E2599B65405AB5EC43186E22EDEB4FD0542EA0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207762.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 207762
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e2:59:9b:65:40:5a:b5:ec:43:18:6e:22:ed:eb:4f:d0:54:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=1CFA37CC04BAFBCDBE5E147448432BF3C6E525CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:ce:73:e3:7e:e3:ce:5e:8f:c5:61:da:3a:
72:96:59:2d:1f:f0:0c:3d:df:1e:76:92:3d:72:5d:
bd:9d:32:d8:f1:56:1c:2a:06:8f:fa:86:5a:67:3c:
4e:53:b7:fd:ab:72:98:de:e6:c8:c0:38:81:56:ad:
e0:9c:cb:b3:34:7e:59:b9:8b:eb:6a:33:17:88:12:
6c:34:31:b1:5e:5e:f3:5c:aa:e5:4c:29:e3:2b:c8:
34:df:74:78:8d:1c:c4:2b:6b:85:50:07:e6:01:4a:
0c:7b:f3:b9:b1:59:04:f2:80:63:02:0b:d9:f6:f7:
26:be:36:00:e3:9b:d2:c2:3b:02:05:8f:93:80:e2:
41:ba:15:76:b7:1d:ae:70:94:65:66:cd:64:3a:ac:
94:c7:72:4c:bd:39:a5:ac:23:59:ec:3e:ee:ae:8d:
f9:d5:31:ef:6c:99:53:3c:c9:f6:81:10:fb:23:67:
47:de:fe:0b:00:4f:75:4a:cc:b3:73:6c:87:b5:84:
af:3a:4d:3f:d8:bc:a3:6b:3d:b1:1c:e9:8e:b8:1b:
35:97:a8:dd:2d:eb:87:69:2a:ff:63:93:e1:f0:2e:
21:02:4e:ef:4d:b3:b3:16:25:32:6f:eb:63:bf:0a:
0f:4b:10:59:83:e6:86:57:a8:c5:1b:dc:5d:4e:83:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:37:CC:04:BA:FB:CD:BE:5E:14:74:48:43:2B:F3:C6:E5:25:CC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0c::/48
Signature Algorithm: sha256WithRSAEncryption
24:97:2f:de:ea:d8:82:0a:94:28:96:55:6e:15:0f:65:e7:b9:
b7:b5:25:15:5b:1f:d4:71:2c:d3:dd:b1:9c:d4:73:19:2c:7d:
71:83:1d:32:16:73:c9:38:fe:1f:79:13:91:73:c6:9d:d5:56:
1f:a7:b2:1b:b2:54:5c:b1:27:af:5f:ff:cd:29:71:35:51:cd:
4f:ab:44:83:8f:cc:07:15:af:fe:78:1f:20:66:d0:bc:a5:c9:
c3:91:f7:fa:c0:c3:ce:e3:73:f1:0b:cc:7e:19:0a:ec:04:60:
a0:23:8a:9d:90:15:2e:38:8a:f5:30:59:8c:cc:01:d3:e2:35:
5d:8a:b2:f3:af:fe:8b:96:22:9a:d9:19:1d:63:c4:be:2f:ef:
08:03:95:c8:fb:1e:ba:70:77:7c:d8:ef:b0:2b:15:d8:9e:9b:
fd:f9:9c:d0:f1:3c:cf:f9:7a:1e:15:3e:bb:d4:a9:2d:a1:07:
98:85:b9:d1:9b:8a:26:99:cc:77:7d:89:9e:d6:f6:8f:3a:f1:
fc:2f:4e:b2:a5:53:de:41:80:88:89:a4:30:df:e2:29:1e:ed:
6d:96:08:6d:bb:ff:ee:f6:6e:e7:6f:9f:c8:d6:c4:e4:7d:18:
c8:e1:05:09:f1:87:e1:a0:34:6e:b7:27:d0:8d:5d:bd:1d:7e:
66:8a:28:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUJuJZm2VAWrXsQxhuIu3rT9BULqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjVaFw0yMzEyMzEyMzU5MjVaMDMxMTAvBgNV
BAMTKDFDRkEzN0NDMDRCQUZCQ0RCRTVFMTQ3NDQ4NDMyQkYzQzZFNTI1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQs5z437jzl6PxWHaOnKWWS0f
8Aw93x52kj1yXb2dMtjxVhwqBo/6hlpnPE5Tt/2rcpje5sjAOIFWreCcy7M0flm5
i+tqMxeIEmw0MbFeXvNcquVMKeMryDTfdHiNHMQra4VQB+YBSgx787mxWQTygGMC
C9n29ya+NgDjm9LCOwIFj5OA4kG6FXa3Ha5wlGVmzWQ6rJTHcky9OaWsI1nsPu6u
jfnVMe9smVM8yfaBEPsjZ0fe/gsAT3VKzLNzbIe1hK86TT/YvKNrPbEc6Y64GzWX
qN0t64dpKv9jk+HwLiECTu9Ns7MWJTJv62O/Cg9LEFmD5oZXqMUb3F1Og1hjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUHPo3zAS6+82+XhR0SEMr88blJcwwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjA3NzYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQoMMA0GCSqGSIb3DQEBCwUAA4IBAQAkly/e6tiCCpQollVuFQ9l57m3tSUVWx/U
cSzT3bGc1HMZLH1xgx0yFnPJOP4feRORc8ad1VYfp7IbslRcsSevX//NKXE1Uc1P
q0SDj8wHFa/+eB8gZtC8pcnDkff6wMPO43PxC8x+GQrsBGCgI4qdkBUuOIr1MFmM
zAHT4jVdirLzr/6LliKa2RkdY8S+L+8IA5XI+x66cHd82O+wKxXYnpv9+ZzQ8TzP
+XoeFT671KktoQeYhbnRm4ommcx3fYme1vaPOvH8L06ypVPeQYCIiaQw3+IpHu1t
lghtu//u9m7nb5/I1sTkfRjI4QUJ8YfhoDRutyfQjV29HX5miiil
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org