Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209218.roa
File: AS209218.roa (raw, json)
Hash identifier: EplCXMM95rfPsjkaEAI0My+FFpsdHqiBpBaLQK5S2bQ=
Subject key identifier: BB:C1:B2:A7:23:5C:5F:D5:81:9A:09:CA:F7:1F:5B:8F:56:51:91:6F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 06FA5416695F8FBD7EAFBF99905E4E80F7BAACDE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209218.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 209218
IP address blocks: 2a06:a005:910::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:54:16:69:5f:8f:bd:7e:af:bf:99:90:5e:4e:80:f7:ba:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=BBC1B2A7235C5FD5819A09CAF71F5B8F5651916F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:13:0e:a0:cf:df:78:dc:d8:bd:a4:3c:71:
76:6e:04:7b:4a:0d:a6:df:f5:94:b7:2d:ed:46:0d:
79:a7:0b:e4:56:02:36:55:23:ac:93:9d:4c:05:e4:
2a:7f:01:bd:56:6d:7f:9e:48:bd:ff:69:2e:d7:b6:
31:2b:21:3e:0b:f1:71:26:fe:bc:ca:09:06:f2:ff:
1f:94:42:50:81:e3:34:21:42:1d:3b:69:48:04:99:
b6:a5:4f:20:9b:f9:39:e3:45:28:1c:e7:02:43:0c:
ec:87:31:bb:81:66:19:a8:c9:e1:20:ec:50:fe:6d:
24:cf:35:20:11:8f:1f:21:28:66:33:78:a3:6f:9d:
4d:ef:18:85:77:c1:37:95:28:af:93:72:ca:98:90:
88:51:fe:08:5c:29:75:a3:45:a8:b9:37:db:2f:b8:
18:78:61:0a:b5:5b:d7:87:83:1b:93:e6:83:b2:a0:
86:42:a8:fb:09:b0:7b:c0:b5:4f:3e:f3:a7:ae:19:
2c:60:e0:06:d0:3b:fa:9f:b6:53:14:09:80:0d:53:
79:0b:10:39:c8:ff:94:cb:9a:6b:9b:bb:f2:55:9d:
aa:d8:a8:49:fc:b1:53:76:f8:bd:f0:ee:23:5d:6e:
e3:0b:4d:ed:06:1c:4b:8b:a7:35:a9:bf:30:88:a3:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C1:B2:A7:23:5C:5F:D5:81:9A:09:CA:F7:1F:5B:8F:56:51:91:6F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:910::/44
Signature Algorithm: sha256WithRSAEncryption
3b:9b:f4:48:6e:d8:ab:e6:64:2a:75:ff:6e:d8:de:cf:0d:ee:
e8:90:df:a1:18:32:5f:56:a0:e2:98:74:52:e2:77:b7:0d:ab:
dd:9a:98:ca:cd:30:c3:97:af:b8:bf:b0:fe:fb:61:0e:60:d0:
50:7f:cb:f4:68:cf:ff:50:b3:13:37:d3:ab:41:54:72:6f:46:
8b:f4:7d:35:49:d8:a1:b3:d9:c3:51:cd:d8:01:70:f4:52:1e:
e1:c0:eb:d4:22:ae:38:cc:e8:6f:45:40:1b:4c:25:d9:e4:b6:
4d:ab:5e:2a:aa:29:e8:b6:c8:b9:97:d8:02:3b:51:f7:30:3c:
80:b3:7d:c1:5c:6a:b0:80:f1:e7:cd:c9:83:ad:a4:2c:ff:df:
eb:d6:52:d1:6d:b2:54:96:27:8e:4a:3a:f5:fe:16:d3:6b:44:
b1:eb:93:87:bb:fa:60:5a:1a:11:0c:86:ee:f6:0d:15:46:d7:
32:a6:ad:89:6e:6f:1f:e3:38:fe:31:1d:46:87:ec:a2:7e:76:
da:02:62:ee:7c:be:f4:c7:c9:e6:10:27:21:af:e9:82:09:e5:
ad:2a:ad:e9:f6:65:e9:f9:01:42:c8:08:48:96:cc:58:0d:68:
0c:11:9b:b8:db:17:dd:e8:a9:9c:34:9c:b9:a4:40:2e:61:26:
44:b2:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org