Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209100.roa
File: AS209100.roa (raw, json)
Hash identifier: aIhcDnV1f07nyr5+EUk7hzeC9872EeXS6AxlTxJ5BUQ=
Subject key identifier: A0:B5:35:18:99:70:60:C6:73:F3:62:88:F6:4F:E8:D2:0A:47:15:95
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 57BCDD9AF9E5269747F9A865D9DA909AD2F34386
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209100.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 209100
IP address blocks: 2a06:a005:d50::/44 maxlen: 48
2a06:a005:d60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bc:dd:9a:f9:e5:26:97:47:f9:a8:65:d9:da:90:9a:d2:f3:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=A0B53518997060C673F36288F64FE8D20A471595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:d1:7c:93:a0:b9:a8:fc:ac:73:7f:82:e7:
64:65:01:5c:9a:0a:3d:da:a5:ec:31:13:a4:c6:d7:
1d:a1:ec:ee:93:7e:c5:16:7c:6f:bc:cc:17:9c:41:
84:95:ba:e8:c7:43:69:7d:de:81:fd:c0:44:c6:dd:
ab:ec:9a:6b:6c:32:3c:bb:36:4a:4c:8f:1d:3e:e8:
e4:22:29:2f:8c:d1:87:fa:73:4d:03:a7:9f:88:8a:
65:56:e7:c5:8d:08:03:67:e0:b0:b5:2f:c4:ce:c2:
a9:58:21:1c:9d:46:f1:1e:52:b9:9d:01:4f:f7:5b:
f3:c9:33:ca:f2:e1:90:73:12:e5:99:04:5b:b7:d3:
61:e4:66:8d:51:29:3b:bc:63:51:31:e4:c6:fa:09:
0b:75:66:b4:ba:08:a8:38:fd:b9:5d:57:02:77:e9:
bf:cf:77:62:4a:c2:6f:db:ae:76:48:fe:03:11:58:
29:73:2c:a0:07:58:f0:44:4a:df:5c:c3:4e:72:be:
4f:5a:66:73:08:6b:15:7b:07:a7:92:ef:06:f9:05:
3e:43:8e:37:c5:d7:f2:e3:3a:ac:96:b0:ab:e5:7a:
71:7d:82:f5:98:b6:78:cc:03:0f:e0:1c:e2:9a:2c:
3e:a5:40:50:25:73:d2:4f:40:87:90:68:48:c8:53:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:35:18:99:70:60:C6:73:F3:62:88:F6:4F:E8:D2:0A:47:15:95
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d50::-2a06:a005:d6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:58:65:35:01:e7:f1:bb:25:ea:99:ba:6a:bb:60:90:df:bb:
40:26:32:cf:fd:09:aa:d6:ed:1c:53:cf:e6:b8:b7:60:b2:2f:
0e:a1:4b:51:81:c6:db:7e:83:3f:63:27:2a:37:cb:11:98:30:
9e:e6:27:5d:80:3b:6a:e1:4a:56:ec:39:e4:7b:f3:68:9e:ed:
cf:83:41:9d:a8:78:55:14:65:eb:a7:22:86:ec:5e:ac:a7:ca:
10:f8:3b:da:44:42:c7:8e:a8:41:2d:7a:6e:ad:e9:44:42:f7:
83:d5:88:9c:af:8e:da:c3:50:2c:81:9f:99:67:6e:37:75:d9:
4f:1f:57:6b:5d:4b:86:1b:12:3c:b4:05:1b:3c:7a:be:de:31:
b6:92:46:f9:c8:c0:b2:f2:87:bd:06:bc:9a:8b:86:f9:cb:5b:
c4:e4:37:51:b4:b5:09:a2:b1:44:77:09:2f:2b:b8:bf:10:47:
67:93:a8:e1:5c:88:1d:03:81:90:76:29:e6:ba:bd:46:7f:62:
0c:8d:b4:9e:93:2a:ac:24:c4:45:60:ce:df:51:8f:b2:a2:83:
bd:6f:94:5b:cc:98:3b:e9:3b:1a:3a:c3:8e:20:f4:43:2e:57:
6a:cf:75:05:6a:de:46:5b:95:c5:b1:0d:04:a3:e8:17:e6:cb:
2b:a1:74:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org