Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: q9CkFOxHbBqgC50BtQbKw65fyUxqyvLWkbHjS4R3jyA=
Subject key identifier: 0A:A6:5C:B9:A3:93:DD:08:9F:B2:E3:77:8A:1A:99:A2:9A:D3:0D:5D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 771C0E2B19106A0CA17696D19C2E5CD630BC2616
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207778.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 207778
IP address blocks: 2a06:a005:1e20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1c:0e:2b:19:10:6a:0c:a1:76:96:d1:9c:2e:5c:d6:30:bc:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=0AA65CB9A393DD089FB2E3778A1A99A29AD30D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:a9:4f:44:9c:fe:57:50:ed:31:37:30:89:
17:35:5e:95:ca:fe:d6:1c:ae:5f:6d:bb:17:0c:4b:
96:36:7c:77:6d:e9:94:dd:ca:ae:6a:d9:c9:d4:4e:
1f:52:be:d4:e5:30:35:db:5e:3c:16:e2:87:be:b5:
e3:bb:22:90:41:06:54:b3:ee:c4:d4:12:e8:71:61:
02:b0:95:ee:9b:19:46:ed:95:b7:f8:db:16:c8:c1:
d4:24:be:84:3c:4c:c9:f2:25:58:5f:6f:e4:0f:e8:
d4:2c:79:b7:4f:f0:68:78:df:b6:8e:45:af:7e:b4:
a9:5e:58:10:b0:05:89:ed:f3:cc:81:f2:75:31:54:
b7:27:32:b7:52:ca:07:bc:2a:1f:a9:3a:fd:ab:87:
7c:7c:6f:49:27:ad:00:ae:96:1d:57:0c:c0:0d:b4:
e7:46:54:93:6d:d3:c7:3d:fe:5d:65:14:a5:7a:9b:
6c:ca:df:bc:d9:81:49:17:95:06:be:6b:54:df:85:
b5:b4:90:7f:50:72:4c:b5:c5:31:78:9f:13:ce:6c:
c9:36:fa:b3:31:53:71:6c:67:e8:f1:e8:9f:23:e3:
b3:31:d2:b7:93:5a:e6:9e:8f:9c:e7:95:2e:a1:52:
a9:28:7c:d2:ae:cf:31:87:1f:d8:5c:b0:d3:ab:bb:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:5C:B9:A3:93:DD:08:9F:B2:E3:77:8A:1A:99:A2:9A:D3:0D:5D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e20::/44
Signature Algorithm: sha256WithRSAEncryption
42:f2:5f:70:4b:53:31:58:af:39:e5:45:b7:bb:df:76:36:18:
62:03:f2:6a:47:ce:8a:2b:ae:06:34:1d:da:94:99:8b:09:4b:
6e:cb:fc:9a:f8:a9:52:62:f1:da:6e:64:5c:4f:1c:3e:41:58:
87:92:13:99:fb:62:6f:a4:c4:e5:e2:86:f7:a3:c1:3a:8e:87:
04:f3:c1:b1:c3:d2:36:50:a5:ef:bc:73:ff:02:a3:56:b5:9c:
c5:73:73:b3:27:13:13:35:87:d2:a6:9c:ba:a4:3f:4d:53:a4:
d1:69:fe:58:de:f6:57:d2:3a:ac:78:a3:2f:0d:9e:a5:c2:90:
b9:f9:54:1b:62:23:ea:dc:cc:24:0d:73:15:02:c2:94:ff:74:
c0:4d:bb:06:3f:e2:2e:8a:50:18:72:ad:f6:c8:90:aa:a2:d5:
55:54:8e:46:28:dd:61:53:3c:b5:3f:88:55:b0:24:a9:b2:ba:
22:7a:8a:8b:80:6b:4d:be:f1:ed:b6:bb:5c:79:7c:4c:db:4d:
12:f0:ae:e0:74:3b:bc:18:89:4e:28:37:79:50:e7:f1:e1:a5:
d9:8f:2f:4c:70:35:3b:3e:3c:d7:5a:28:68:6c:9d:ff:6f:3b:
0c:aa:c2:d6:64:7e:b1:69:5f:4d:43:03:ee:c1:30:ac:38:a8:
03:93:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org