Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203005.roa
File: AS203005.roa (raw, json)
Hash identifier: WMj+d8XBv/h+B+t2ZA3wNMWMreAFTDv3GieYj5b43Y8=
Subject key identifier: 3D:78:AB:49:DD:3A:AB:AA:26:36:88:02:27:BF:F4:4F:1B:D6:27:B1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 357946D0F6493A6071878FCA5EBD07D1234FD5C5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203005.roa
Signing time: Sun 01 Jan 2023 23:59:10 +0000
ROA not before: Sun 01 Jan 2023 23:54:10 +0000
ROA not after: Sun 31 Dec 2023 23:59:10 +0000
asID: 203005
IP address blocks: 2a06:a005:d2a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:79:46:d0:f6:49:3a:60:71:87:8f:ca:5e:bd:07:d1:23:4f:d5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:10 2023 GMT
Not After : Dec 31 23:59:10 2023 GMT
Subject: CN=3D78AB49DD3AABAA2636880227BFF44F1BD627B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:5a:1e:34:61:b3:27:2d:5e:d3:36:c7:f3:
29:fa:1f:e7:80:3b:b2:eb:9c:78:9a:89:9d:93:60:
a9:5b:ee:16:8f:3b:6b:09:be:cf:7d:d9:cf:9c:1c:
ff:87:67:d8:63:76:4b:a4:fe:7a:98:b6:de:42:85:
20:d1:75:86:fa:1a:f6:d3:b1:50:d9:f6:2d:c6:24:
5e:72:9e:98:e6:5f:8b:3d:d3:d3:9a:89:49:99:42:
83:4a:55:c5:88:1a:ae:9f:4a:46:3a:c4:5a:8a:4c:
21:fc:17:28:43:8e:30:a7:21:94:84:21:90:ec:44:
6c:cc:de:00:f4:43:c7:e0:ec:74:09:c7:ca:b7:f9:
3b:1e:ba:4c:56:5b:28:ea:fc:d4:35:83:ac:3b:38:
14:02:3a:f5:ce:b1:06:8e:06:f4:54:aa:e0:b9:e8:
37:f5:7f:fb:6b:4e:b7:e6:57:fd:ab:c6:60:35:12:
bd:af:b9:0b:4a:a4:d6:f5:8e:32:03:a4:78:4b:31:
09:8a:39:19:5b:2d:4f:5f:c6:bb:7f:bd:c0:38:df:
ca:f2:61:c6:f2:7b:96:63:fd:bb:6c:c9:68:45:99:
4f:26:71:d6:03:c0:e7:ff:58:6c:90:97:0c:70:61:
be:f9:63:1e:21:1f:11:4a:e1:cd:9e:b4:bb:89:45:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:AB:49:DD:3A:AB:AA:26:36:88:02:27:BF:F4:4F:1B:D6:27:B1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2a::/48
Signature Algorithm: sha256WithRSAEncryption
14:95:c4:13:da:ec:ba:53:97:f1:3e:64:c5:86:bd:3a:86:6f:
0c:d1:65:b1:45:4d:d7:29:75:50:50:9e:56:32:0d:f6:c3:08:
6e:0a:8c:45:26:d6:a9:a0:f0:9b:2e:90:c1:b7:1b:b2:cb:25:
99:2d:2c:a6:10:a9:75:93:0d:a9:02:a7:56:d9:78:1c:65:c6:
b4:5d:0f:2b:0f:05:16:86:81:5f:48:50:6c:1e:b3:79:df:68:
4a:65:97:b9:9c:4c:50:b5:c8:f1:91:c7:b3:b3:f6:b9:49:80:
4d:4a:c5:12:9c:6e:8c:ed:c3:d9:83:6d:a4:96:c2:c1:57:c4:
38:2f:bf:c2:21:a1:a6:3c:4f:27:b7:be:db:b0:fd:7e:59:30:
1c:5b:9a:b1:1d:85:6b:e7:da:3b:38:97:1a:43:91:83:08:48:
8c:e5:26:bb:98:b4:f2:c3:4a:ae:49:c1:da:50:54:90:23:b3:
32:6e:3d:bc:79:ea:b9:59:1f:d1:42:3a:44:cc:cc:88:7d:c6:
d4:db:d5:7d:ee:10:c6:7d:ab:b6:85:5c:58:38:08:3d:05:fb:
e7:ec:71:bc:16:0f:32:be:3c:23:80:65:37:dd:1f:8e:de:4b:
c1:94:a6:38:21:9f:7f:c2:e1:0b:88:a3:a6:1e:4a:42:aa:9a:
2d:f6:61:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUNXlG0PZJOmBxh4/KXr0H0SNP1cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MTBaFw0yMzEyMzEyMzU5MTBaMDMxMTAvBgNV
BAMTKDNENzhBQjQ5REQzQUFCQUEyNjM2ODgwMjI3QkZGNDRGMUJENjI3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A1oeNGGzJy1e0zbH8yn6H+eA
O7LrnHiaiZ2TYKlb7haPO2sJvs992c+cHP+HZ9hjdkuk/nqYtt5ChSDRdYb6GvbT
sVDZ9i3GJF5ynpjmX4s909OaiUmZQoNKVcWIGq6fSkY6xFqKTCH8FyhDjjCnIZSE
IZDsRGzM3gD0Q8fg7HQJx8q3+TseukxWWyjq/NQ1g6w7OBQCOvXOsQaOBvRUquC5
6Df1f/trTrfmV/2rxmA1Er2vuQtKpNb1jjIDpHhLMQmKORlbLU9fxrt/vcA438ry
Ycbye5Zj/btsyWhFmU8mcdYDwOf/WGyQlwxwYb75Yx4hHxFK4c2etLuJRT9PAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUPXirSd06q6omNogCJ7/0TxvWJ7EwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAzMDA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgag
BQ0qMA0GCSqGSIb3DQEBCwUAA4IBAQAUlcQT2uy6U5fxPmTFhr06hm8M0WWxRU3X
KXVQUJ5WMg32wwhuCoxFJtapoPCbLpDBtxuyyyWZLSymEKl1kw2pAqdW2XgcZca0
XQ8rDwUWhoFfSFBsHrN532hKZZe5nExQtcjxkcezs/a5SYBNSsUSnG6M7cPZg22k
lsLBV8Q4L7/CIaGmPE8nt77bsP1+WTAcW5qxHYVr59o7OJcaQ5GDCEiM5Sa7mLTy
w0quScHaUFSQI7Mybj28eeq5WR/RQjpEzMyIfcbU29V97hDGfau2hVxYOAg9Bfvn
7HG8Fg8yvjwjgGU33R+O3kvBlKY4IZ9/wuELiKOmHkpCqpot9mGs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org