Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209933.roa
File: AS209933.roa (raw, json)
Hash identifier: eFCUG/f2SCnmSnl3+x3Iobk4PYHKzsOLSUFpA1SjHZQ=
Subject key identifier: A6:16:AC:3A:26:63:DE:89:17:60:F0:B8:1D:3D:24:16:41:38:89:3E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 72F61E344F568E1A95564F450B8AF381FCB5FCCA
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209933.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 209933
IP address blocks: 2a06:a005:1164::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f6:1e:34:4f:56:8e:1a:95:56:4f:45:0b:8a:f3:81:fc:b5:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=A616AC3A2663DE891760F0B81D3D24164138893E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:25:50:d7:7a:b8:07:ae:1a:d6:bf:b6:2f:
ab:a8:58:62:cd:92:3d:af:28:59:67:e0:27:d9:fc:
10:9b:8d:5e:c6:b6:70:df:2e:f9:d0:b4:71:bb:39:
22:63:ca:8d:1e:ca:3e:eb:28:7e:4b:1a:65:5b:5b:
09:b1:b1:f6:e5:1d:65:18:7b:a1:79:48:db:ea:21:
a5:cd:74:17:35:e3:14:7e:77:91:90:05:4d:be:8a:
d8:82:ab:44:eb:c8:33:95:77:65:34:dd:10:8b:df:
ce:6e:4d:47:70:19:0e:97:ca:f6:7a:fe:f5:2f:71:
26:2e:47:91:68:cc:45:01:d5:1d:bb:9c:7d:13:8d:
6d:a8:7b:a7:3b:6e:21:31:56:40:81:ac:c3:a0:7e:
23:e8:b3:40:04:15:fb:74:bc:80:26:c0:6f:57:06:
8d:e4:5c:cf:c7:48:57:89:bd:70:fd:b5:7b:e9:26:
66:cb:bf:44:91:8d:4b:84:3f:a9:5b:99:92:9e:c1:
4f:75:4e:0b:5a:ae:66:d9:9e:33:61:77:dd:c2:6c:
4a:27:9d:f2:d5:03:d6:74:3c:27:be:45:86:fa:61:
56:17:6b:1b:ef:39:6f:55:a1:a2:19:ef:5f:2e:b8:
e6:ce:bf:58:aa:cd:ad:dc:71:00:23:62:e7:59:6b:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:AC:3A:26:63:DE:89:17:60:F0:B8:1D:3D:24:16:41:38:89:3E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS209933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1164::/48
Signature Algorithm: sha256WithRSAEncryption
44:4c:6e:da:60:ab:83:77:77:fd:32:2d:89:16:03:b3:46:71:
5f:df:bc:3d:2f:a8:f0:7e:94:00:b7:9b:1d:f7:fd:23:c2:f3:
a0:f5:a3:9e:74:29:da:04:5d:4f:62:3f:c6:b0:db:66:da:5e:
4f:ac:2d:ee:75:87:ff:35:06:22:fb:1c:11:d1:67:eb:2b:85:
bb:de:e8:df:83:af:3f:ca:04:32:65:f1:58:06:ed:ad:50:ed:
b0:00:0c:f3:08:5b:e5:90:60:4f:8a:7c:39:bb:98:17:31:f3:
54:6c:89:27:98:d4:1a:9b:ff:ed:d6:51:7b:c0:2a:e0:73:70:
9e:3a:43:7c:b5:1f:5a:71:9f:1e:b3:2f:4e:65:c5:92:6d:2d:
8d:90:1d:ab:30:17:78:77:b9:33:ef:31:bb:ab:ab:d0:1f:d7:
4d:e2:e5:ca:c3:b9:06:7f:4b:31:f2:f5:1a:78:f9:ef:53:df:
93:b5:a6:0b:60:4d:f7:ca:a4:5a:6f:25:1d:f3:db:09:06:e9:
62:fa:4f:55:63:d7:15:29:9f:ce:14:43:14:09:82:e4:28:37:
ef:39:ad:5b:77:bd:55:44:e8:69:2a:d9:1c:ae:ae:18:24:60:
c2:b5:e6:ed:11:a4:2e:b3:66:77:24:c7:24:92:4f:a1:07:91:
9e:5e:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org