Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207852.roa
File: AS207852.roa (raw, json)
Hash identifier: My8rTEvZ4pyv8O7VCerx10NxEcXk3dfebKZDXG3xo3A=
Subject key identifier: 0A:E7:9D:F4:02:15:14:26:DE:05:94:04:F0:E7:12:14:A8:8F:EE:67
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 56CFF22699FE87712984A86CC10B2DD17A6B0A7C
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207852.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 207852
IP address blocks: 2a06:a005:4b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cf:f2:26:99:fe:87:71:29:84:a8:6c:c1:0b:2d:d1:7a:6b:0a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=0AE79DF402151426DE059404F0E71214A88FEE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:82:0c:12:ed:ba:2e:86:38:1b:5b:6f:c0:
40:fc:c5:07:1f:50:25:0d:52:12:d1:1c:1a:23:4b:
bf:73:1f:54:19:e7:ae:7e:2f:ce:67:be:08:3c:d6:
fa:ac:40:5f:35:e4:d1:af:29:66:84:3b:80:ab:bb:
3b:6f:40:60:b2:d3:23:e5:7e:39:0a:70:65:9e:00:
c3:bc:6f:e1:ae:8b:52:ec:7a:c9:0b:00:40:22:71:
96:81:e5:6d:ce:ca:10:7b:e7:02:a0:4a:15:ac:5b:
7a:4a:44:60:bd:8e:17:2c:fb:ca:e0:2c:a8:0c:46:
58:3e:6e:59:f9:ce:e3:12:e1:a0:fe:ac:57:73:b0:
d0:a5:19:44:fc:bd:b7:7a:0f:12:6b:c3:ee:51:7f:
62:8f:ad:36:89:0e:3c:ef:6e:3e:dd:58:9c:67:55:
b3:40:f0:dc:95:0e:3d:1c:25:8f:ec:ad:27:4d:a1:
16:56:86:e6:92:2c:24:be:2f:51:83:25:3b:8e:b6:
9b:99:72:cd:e9:0f:18:12:8d:52:a4:62:71:14:e7:
49:99:ad:24:a9:c0:f5:e8:fa:f9:10:95:5e:16:fc:
72:38:0c:69:01:dc:6f:db:2c:91:7b:18:2e:cb:6d:
14:07:82:68:b9:8e:ad:60:b7:02:66:40:67:00:93:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E7:9D:F4:02:15:14:26:DE:05:94:04:F0:E7:12:14:A8:8F:EE:67
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS207852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4b0::/44
Signature Algorithm: sha256WithRSAEncryption
70:96:74:8c:57:82:d5:1f:fb:a5:ff:1c:e1:3e:90:0c:23:ea:
50:ca:3d:19:37:dd:f7:02:ba:02:41:33:a4:be:3b:7f:ff:83:
90:4b:10:99:88:55:fe:75:29:af:da:d1:14:43:66:bc:af:22:
47:5b:d5:05:77:ad:f0:39:30:60:b3:ab:38:87:fd:fa:f9:fa:
5e:1d:7b:82:b0:a8:2e:a0:f9:8b:ba:85:2f:12:79:33:39:48:
ba:ce:6b:8f:67:6b:6a:61:21:0f:e2:0b:08:09:9e:f2:84:4b:
ae:21:fb:df:6d:3b:47:ed:b7:57:bd:2c:e0:bb:f5:3a:56:eb:
ef:9a:f4:84:09:6f:ef:6e:9d:60:0e:84:df:ef:af:86:9d:8e:
de:68:e0:1f:2d:fd:e4:66:f8:d2:ba:5d:5c:06:ad:b2:30:71:
f8:36:ce:13:a6:b1:08:37:ac:4e:05:d3:97:ba:3c:d6:9c:25:
da:dc:f6:52:3a:d6:a7:20:06:8d:17:60:23:98:f7:fa:50:78:
e3:3a:5f:29:ba:4d:b9:a5:fd:99:c8:54:d8:92:84:62:ca:41:
87:a0:d4:e6:c5:e7:9f:fc:f2:0b:58:22:ca:2f:cb:86:32:50:
b0:d8:54:42:24:ef:21:93:18:3d:36:eb:55:43:33:72:7f:73:
4e:38:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org