Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203069.roa
File: AS203069.roa (raw, json)
Hash identifier: JJTNUGmJwoWxNDghjJtOcx/I4DUsRs36RI8RGMo4U6Q=
Subject key identifier: C1:63:C4:49:53:51:DD:07:D3:0B:4A:BC:04:4C:6B:AC:0F:EB:05:39
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4079B0FFFD73F37617A5EEE7D2CCFECDF123C679
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203069.roa
Signing time: Sun 01 Jan 2023 23:59:16 +0000
ROA not before: Sun 01 Jan 2023 23:54:16 +0000
ROA not after: Sun 31 Dec 2023 23:59:16 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:79:b0:ff:fd:73:f3:76:17:a5:ee:e7:d2:cc:fe:cd:f1:23:c6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:16 2023 GMT
Not After : Dec 31 23:59:16 2023 GMT
Subject: CN=C163C4495351DD07D30B4ABC044C6BAC0FEB0539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:7b:eb:8b:75:2c:0a:03:09:9e:86:c3:a4:
48:84:e0:6a:90:b0:82:a5:89:79:fb:4d:37:82:f2:
1c:7a:9d:f2:5b:ee:bc:8b:df:74:4c:01:84:02:47:
b4:14:3c:b6:d0:56:06:35:0a:24:5f:af:aa:57:4c:
09:8b:a4:18:68:05:f1:53:bc:04:e9:38:bb:03:02:
6a:ca:09:f3:44:91:69:a1:c9:f5:37:f2:6a:4a:fb:
94:8a:db:dc:19:e1:37:b7:1a:31:39:bc:1c:aa:fd:
ba:33:97:17:e3:3d:8f:83:2f:0c:8b:e2:a0:59:2e:
1c:b1:07:22:57:62:b5:12:91:7e:20:ba:84:ce:38:
7c:fd:c2:de:67:1d:8b:13:74:18:00:55:d1:ec:32:
29:8b:7d:a5:23:7f:3f:65:d4:d2:54:8f:0d:e5:31:
8d:96:fa:1c:df:2d:b6:96:a1:3b:a9:33:15:44:88:
1d:04:14:37:ca:66:dd:b1:06:de:23:b9:90:d3:75:
eb:ff:34:33:ad:18:ff:5a:6f:04:fd:73:12:fc:84:
c0:9f:7a:32:dd:1f:8b:33:8f:e4:31:63:02:b0:f7:
9f:b2:4a:b4:4e:e8:37:ce:e6:5c:f5:d2:d8:ef:f0:
f0:da:c2:37:8e:45:aa:85:aa:e9:61:c2:7d:72:39:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:C4:49:53:51:DD:07:D3:0B:4A:BC:04:4C:6B:AC:0F:EB:05:39
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
96:86:97:8f:e1:ed:dd:08:78:f5:a5:e8:19:bd:65:82:91:1f:
96:b1:28:0a:56:01:44:a4:e7:8c:66:e6:55:1d:ec:67:5e:2e:
b5:99:a0:cc:6d:82:66:d8:54:0f:38:6c:c5:28:20:0c:19:68:
90:fa:07:d4:61:9b:6d:67:e0:22:e3:de:a7:3f:27:8b:c3:f1:
81:04:01:d6:3b:06:1b:c7:c3:30:20:0a:a8:a4:f3:58:16:21:
d4:eb:53:12:19:94:db:8f:89:ae:3a:06:e4:fc:0b:3b:a1:c6:
7b:1f:6e:1c:32:0a:67:55:25:e6:3f:21:7d:c9:ae:02:ff:1c:
b3:05:ba:dd:93:6d:d1:ba:f3:c5:2c:15:ca:be:66:4d:3f:2d:
52:7e:b6:c4:31:da:3b:0a:0b:82:01:eb:f9:dc:96:8d:cb:d6:
c9:e0:27:3c:24:02:74:99:85:0f:d9:2d:81:d2:9c:14:8e:27:
89:6b:1d:0d:b5:fb:64:6c:70:62:46:aa:f3:b6:44:a6:d6:0c:
49:96:2b:ad:76:22:15:86:f2:55:b5:34:50:15:0a:d3:4e:a1:
90:4e:a9:48:a0:84:c9:ca:47:da:f0:dd:01:ed:30:2e:0c:b4:
0b:13:f8:86:f1:e8:98:92:74:16:f4:c5:11:57:5d:1e:c7:e2:
a5:4c:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org