Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS9267.roa
File: AS9267.roa (raw, json)
Hash identifier: ZXpohhS6afDrgT4rRnDm529ntAqb4Ov0ozIwXhkTQH8=
Subject key identifier: AF:85:75:36:C3:D5:79:DE:4D:E3:96:1E:BE:D4:38:9C:80:7E:EB:89
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2E9DDF7335BBA81AA57F2D3921C3E7DC7F1BA212
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS9267.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 9267
IP address blocks: 2a06:a005:200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:9d:df:73:35:bb:a8:1a:a5:7f:2d:39:21:c3:e7:dc:7f:1b:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=AF857536C3D579DE4DE3961EBED4389C807EEB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:52:15:bb:78:76:96:f9:9b:31:14:fc:77:
9b:e3:0a:65:c0:65:fc:ce:3e:48:8e:c0:1b:82:09:
35:75:f9:f0:8e:14:31:d9:5b:17:a5:14:64:ea:88:
80:94:59:70:fb:1a:6b:56:1d:c5:46:aa:25:c2:50:
ff:82:6f:8c:bc:90:23:de:21:8c:87:fa:9d:0e:0e:
de:48:31:fd:84:7c:0e:61:8d:a6:05:dd:10:4a:f7:
14:63:c9:b5:27:c1:73:ab:fc:d1:db:fe:b6:ad:f9:
1e:e4:39:e8:3e:32:69:01:39:e8:5b:57:1a:0e:c5:
09:9d:6e:2d:3d:e2:f9:f9:4b:aa:1e:14:02:d5:11:
d9:9c:a8:03:75:34:60:24:c3:69:ae:77:20:0b:57:
e4:63:c5:d4:24:1c:c8:55:97:71:2c:27:9e:c2:81:
f3:d6:d3:db:6e:d3:81:f6:3f:b1:f5:84:ae:da:a1:
eb:7a:ba:bd:bb:44:f2:c8:fc:4d:36:70:3d:c7:06:
92:03:09:76:b5:ce:0d:41:34:7d:ca:f8:f2:62:ff:
e1:13:25:62:63:8d:c1:0c:26:0f:d8:be:84:97:eb:
55:23:1d:9d:17:c1:57:34:23:aa:77:eb:d0:0a:f9:
b9:f2:82:54:cf:f9:77:a7:9d:c9:d9:cc:a7:dd:58:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:75:36:C3:D5:79:DE:4D:E3:96:1E:BE:D4:38:9C:80:7E:EB:89
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS9267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:200::/44
Signature Algorithm: sha256WithRSAEncryption
1d:c6:10:e9:ab:46:f3:dd:ae:fd:a1:09:c5:af:98:27:c7:e2:
b3:e2:d7:50:db:05:da:64:8a:15:92:24:e2:9a:05:7a:bc:49:
07:d7:f4:00:44:35:e5:9f:84:0c:22:3b:68:d0:80:f1:09:4f:
23:cd:7b:8c:4b:63:a7:d0:7a:2c:04:85:1b:f0:11:78:dd:c2:
73:96:46:62:6c:22:fc:13:2c:7e:fc:df:51:9a:56:9d:90:52:
2a:0b:43:7b:9a:a0:3f:19:25:8d:9d:f1:c6:08:e8:3d:0b:cc:
5e:16:64:cb:65:06:ef:5c:af:32:62:c5:57:55:17:85:a5:6c:
05:e2:f9:42:9e:d8:87:7a:45:9a:88:80:fb:6f:0f:87:81:90:
ff:ee:98:56:48:91:40:99:3d:4b:5c:e4:0a:73:26:5a:d7:76:
42:ee:70:ee:27:56:8d:e4:65:d6:bc:e1:2f:17:6d:d4:b9:d1:
37:cd:e7:77:5a:1a:72:2f:55:57:41:25:37:3a:d3:e7:81:87:
52:4b:de:d4:b2:1e:1a:40:6f:1d:f4:0b:81:47:17:c0:20:44:
c4:c3:dc:0d:55:63:6c:b8:5f:f9:e5:a3:98:88:76:fc:22:ed:
77:57:a6:59:7d:dd:8b:15:fa:33:d2:9e:18:95:23:2d:a2:fb:
a2:d3:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org