Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209512.roa
File: AS209512.roa (raw, json)
Hash identifier: BEXgUR5uKL9d0epsOMCQNQIb1MD058d6+TKtmnRoiu8=
Subject key identifier: 25:EB:4E:CD:2C:07:1F:1B:5D:CE:D5:BF:1E:2F:58:38:CC:07:3D:0E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1C1E047CBF488D3DE70FAD3E087B2F4E599FF537
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209512.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 209512
IP address blocks: 2a06:a005:80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1e:04:7c:bf:48:8d:3d:e7:0f:ad:3e:08:7b:2f:4e:59:9f:f5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=25EB4ECD2C071F1B5DCED5BF1E2F5838CC073D0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:82:ea:1e:93:a2:6a:3a:41:7d:6a:22:38:
9d:d9:6b:10:20:be:bc:ca:7b:9e:62:58:d4:98:1b:
41:a1:7e:03:43:b1:85:45:1e:65:06:03:66:60:49:
9c:7b:3d:f9:bf:64:3a:75:28:58:74:36:22:0b:d4:
21:a8:37:3d:c8:9f:5a:72:7c:82:d9:27:32:b7:ff:
3a:80:39:49:2b:fe:d4:d0:f1:03:86:76:5a:33:42:
82:94:ab:b4:d7:dc:a5:4b:fe:ad:d5:a8:cc:f0:c9:
33:9a:fd:1a:12:cb:c8:d3:cb:e6:46:e0:76:e6:ab:
d8:7e:c2:37:6e:f7:0e:44:5e:6d:96:93:66:18:bc:
0f:53:9a:9e:e2:b9:33:3a:84:e3:20:90:77:d8:55:
28:dc:44:78:18:39:7c:dc:73:21:a4:17:14:4c:ef:
63:f1:ac:bc:c1:6f:de:61:1d:1f:82:23:81:52:fc:
fb:9b:2a:91:d2:be:cc:12:5c:8a:af:1c:d4:24:08:
cc:2f:d2:6f:e4:58:40:ac:8b:a0:50:5a:3e:f5:9e:
90:a6:4c:38:5e:57:57:67:68:21:56:bb:f8:8f:d1:
ae:53:15:b2:be:39:28:40:b2:38:d9:f3:7c:20:9b:
00:9a:71:d9:35:cf:8f:c3:a3:94:9c:a9:60:70:e0:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:4E:CD:2C:07:1F:1B:5D:CE:D5:BF:1E:2F:58:38:CC:07:3D:0E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:80::/44
Signature Algorithm: sha256WithRSAEncryption
00:df:c1:a3:46:de:64:80:0c:c5:9b:5f:cf:e7:44:1c:d5:98:
58:de:d1:e2:4b:7e:fb:13:49:d0:37:a5:90:dc:3e:a6:aa:88:
a2:16:15:66:fc:f3:93:93:da:62:f9:a1:f2:67:cf:0c:04:c4:
12:a9:fe:9d:c2:73:8b:58:d8:79:37:e7:91:26:18:76:b8:24:
d3:b2:c4:0f:de:cc:5b:02:73:3f:f5:e5:f5:54:67:61:54:70:
c7:48:7b:df:37:f6:80:9b:2a:5f:80:6a:01:e2:97:4e:29:26:
a5:17:54:13:ad:21:46:77:11:d8:ff:4b:c7:c0:a1:9e:af:31:
7c:b4:07:e7:a6:9b:f8:c0:fc:84:7b:68:2e:74:6d:f7:a1:86:
3d:27:27:41:39:d4:13:c3:f6:2e:3b:ec:16:81:cc:f0:e0:b2:
4d:20:8a:bb:fb:35:21:7e:af:ed:a0:75:34:0b:cd:04:cc:7f:
b2:6a:a6:b7:34:b7:84:a9:60:6f:6f:f1:a3:ba:86:e2:dc:56:
b7:9e:47:a3:c1:bf:9f:c6:3f:52:e4:a0:e7:c3:fc:aa:55:99:
88:f3:98:b6:70:5d:53:3c:6b:bd:fa:5a:ee:65:03:bd:67:0f:
33:af:d1:94:c2:cd:a6:d7:af:94:e1:47:99:32:c8:a7:6d:32:
3f:5f:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org