Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203061.roa
File: AS203061.roa (raw, json)
Hash identifier: KgkvYg32aI+Oxfg0S27Uxaoyd5eiL0fwSeJZKMrf+ao=
Subject key identifier: 0B:22:0C:15:B7:BE:7E:C7:FB:5F:76:F1:3D:94:0C:D5:CE:B1:60:5D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1AA6236F8A2E238D4A3DBC19E05B83B856E447F0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203061.roa
Signing time: Sun 01 Jan 2023 23:59:25 +0000
ROA not before: Sun 01 Jan 2023 23:54:25 +0000
ROA not after: Sun 31 Dec 2023 23:59:25 +0000
asID: 203061
IP address blocks: 185.121.171.0/24 maxlen: 24
185.147.32.0/24 maxlen: 24
185.147.33.0/24 maxlen: 24
185.214.172.0/24 maxlen: 24
185.214.173.0/24 maxlen: 24
185.214.174.0/24 maxlen: 24
185.214.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a6:23:6f:8a:2e:23:8d:4a:3d:bc:19:e0:5b:83:b8:56:e4:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:25 2023 GMT
Not After : Dec 31 23:59:25 2023 GMT
Subject: CN=0B220C15B7BE7EC7FB5F76F13D940CD5CEB1605D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:6f:6e:fa:dc:d3:17:cf:c0:b3:dc:71:54:
c7:e0:ab:d6:e0:3e:b3:b6:57:ee:0f:57:db:6b:29:
29:cb:c1:a8:99:3b:c6:6b:de:cd:75:09:36:b0:d9:
b8:b3:4e:e2:d2:09:18:5d:87:98:7c:9c:07:6c:74:
e1:83:fe:39:d9:96:62:72:04:24:d7:0b:34:2d:0c:
09:01:f4:23:d0:f0:a6:75:c5:d5:c7:51:1d:69:d3:
6c:1d:af:e6:f4:63:c0:29:f3:51:44:d0:06:ff:16:
30:e9:d9:50:d8:6c:da:22:09:b1:f9:91:b5:3a:2e:
02:ab:dc:dc:1d:6c:1e:71:4c:2d:88:c4:0f:11:23:
f9:a2:ad:75:2d:5a:d8:b8:5c:26:eb:ff:07:83:9c:
f3:9d:6c:59:70:d0:e3:9c:b9:f9:7b:a6:a4:38:9f:
f9:37:47:86:9a:45:b8:8d:b7:de:61:32:ca:a1:1a:
cb:8f:88:67:48:0a:76:41:17:69:9f:12:c1:29:2d:
5f:85:35:d1:65:d7:06:b1:82:18:cb:93:42:79:6f:
b2:cd:5a:07:0d:25:7d:74:25:78:a9:ae:79:39:02:
14:0a:a8:c4:3b:be:df:48:1a:a9:db:9e:12:d2:67:
a0:f4:a3:7f:c8:a0:10:9a:51:27:16:27:52:1a:e4:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:0C:15:B7:BE:7E:C7:FB:5F:76:F1:3D:94:0C:D5:CE:B1:60:5D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.171.0/24
185.147.32.0/23
185.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
94:7f:c9:f5:a0:91:1e:3e:17:4b:a5:6f:d0:e8:e6:2c:8f:1f:
24:82:01:f0:26:ee:5a:5e:ee:e1:ce:cf:93:d1:fb:20:90:12:
ca:70:9f:b6:84:c6:86:8f:07:bf:bf:05:c8:f3:be:08:da:c5:
29:5c:89:bf:b2:c4:4d:85:ca:ef:9b:07:f9:eb:80:0c:14:73:
96:88:69:c2:bb:c6:82:da:03:e5:19:66:8c:78:a9:80:73:59:
cd:e6:68:77:27:ab:04:03:a7:a6:19:9c:9d:55:df:27:31:b5:
d2:10:67:4e:29:b6:9d:2f:de:97:36:86:3f:ef:73:8e:2e:ff:
2c:7a:ae:54:98:9e:33:83:ab:bf:a6:e2:d9:21:e0:b8:c6:9e:
da:4e:76:b5:40:f1:96:ec:58:ae:a6:4d:a8:29:4a:cb:fc:12:
3c:25:55:17:9d:7d:89:a3:ab:1c:cd:ab:2e:85:c1:56:4b:55:
41:71:22:92:e5:54:b6:5b:b9:94:ce:b5:b9:d0:7b:cc:43:63:
13:d0:a9:4d:c4:3e:7a:4d:e2:8c:dc:f1:e4:c6:e7:85:cf:1a:
01:eb:18:6b:42:4a:69:6b:00:b0:3e:e8:5d:70:af:02:77:6d:
d3:fb:96:b9:b7:4b:99:ab:41:0f:04:68:69:28:64:19:a1:3f:
04:1d:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org