Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209862.roa
File: AS209862.roa (raw, json)
Hash identifier: V8i8gvCzdpL47krDOtAp5+UaOc8VQ2UmMEY9q67fNWE=
Subject key identifier: 2A:C1:F1:33:20:36:F3:D7:C3:26:80:5C:72:55:9F:D2:5B:1F:99:EB
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 332583C0EF2E052824C4AF33B34F871EC0675F7E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209862.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 209862
IP address blocks: 2a06:a005:45b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:25:83:c0:ef:2e:05:28:24:c4:af:33:b3:4f:87:1e:c0:67:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=2AC1F1332036F3D7C326805C72559FD25B1F99EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:f4:0e:4e:e8:a6:91:61:29:e2:fa:91:89:
01:e0:a0:7c:d5:f4:60:4a:72:60:ee:ba:89:09:fe:
bb:eb:69:b9:46:73:95:11:b5:61:0f:b2:3a:4f:d4:
eb:b1:e5:5f:d5:f3:8e:23:25:2b:c1:19:e7:a5:d5:
61:f2:1e:3f:45:87:38:8a:eb:d0:20:ac:ea:f3:ee:
ba:39:de:66:6a:f3:03:19:7a:a0:6d:ad:06:83:1a:
67:8b:f9:c6:25:30:1a:25:46:5e:e6:cd:f3:f4:c0:
0b:be:70:98:b7:70:e0:6c:09:bc:26:54:d2:b9:1c:
df:30:88:bd:a9:38:49:c7:4d:fc:4c:c0:ed:ee:ee:
26:98:12:82:3d:7c:37:23:28:8a:e5:2e:ca:5a:a5:
54:1c:10:67:b3:c5:54:f8:bb:c4:b8:79:19:68:6f:
e3:4a:9e:51:41:71:22:0d:58:8a:43:b8:4c:63:39:
64:3b:ea:7d:56:44:1e:32:60:71:3b:33:dd:20:a5:
a6:be:94:bd:9a:e5:66:02:0c:7c:b3:06:aa:3b:93:
fd:16:2c:56:1d:5d:3f:be:a7:b6:8c:5f:b1:3b:12:
7a:7e:d4:ee:84:0e:42:12:9b:0e:59:27:72:6d:e4:
7c:c7:70:be:52:ad:2f:b6:e3:3e:1c:e4:07:38:94:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:F1:33:20:36:F3:D7:C3:26:80:5C:72:55:9F:D2:5B:1F:99:EB
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45b::/48
Signature Algorithm: sha256WithRSAEncryption
83:f7:99:e8:61:3a:70:1e:57:8c:48:8e:dc:30:89:fe:5a:fc:
61:ef:30:49:a5:8b:18:24:40:d6:43:71:0e:d7:6c:28:ad:bb:
7c:d5:a0:d6:1a:b1:8c:fc:78:01:76:ab:0a:b3:42:43:7c:f2:
86:ba:20:8f:dc:e9:74:83:25:d6:4c:6e:7a:37:24:32:37:88:
48:b8:f1:2b:f7:0e:d2:27:bc:f6:44:10:2a:f2:c2:7f:4c:c5:
cc:d8:1b:ae:0d:27:f3:db:25:d2:50:2d:e1:67:17:46:29:c6:
f2:71:4f:ce:bf:7b:36:fc:36:1e:fa:ca:ba:2f:8d:6f:f2:83:
65:63:84:f2:1b:35:92:41:cd:97:32:7b:df:72:c1:75:8d:0c:
67:a8:7d:ad:0d:2d:3b:e5:c6:0d:13:34:23:8b:82:74:16:0a:
c4:49:c9:d5:8a:9e:fb:af:f9:7d:88:99:e6:4a:f3:c2:5c:bf:
de:82:68:fa:64:f5:27:91:32:0b:56:34:c9:4f:29:6a:d1:69:
4f:b2:58:2d:e5:86:57:d5:13:29:8b:81:c4:6b:7c:e6:91:03:
49:01:5b:02:f3:5a:53:23:d4:98:bb:fa:c6:15:38:76:7a:3a:
36:c2:48:91:14:4b:d6:47:df:22:71:7b:65:31:ea:04:47:8b:
6b:4d:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org