Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203098.roa
File: AS203098.roa (raw, json)
Hash identifier: TpzF5hbl1Ica1AVNpLG2bOPpOqZH/s+XrNu6daRJZMU=
Subject key identifier: 92:0B:15:2B:AF:9D:8D:A0:74:2A:C8:AE:99:8A:DC:94:91:83:E9:1C
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1236F1515589B7B2C66C90E77CAD92E03CDE1A3B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203098.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 203098
IP address blocks: 185.90.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:36:f1:51:55:89:b7:b2:c6:6c:90:e7:7c:ad:92:e0:3c:de:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=920B152BAF9D8DA0742AC8AE998ADC949183E91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:00:c3:fc:fd:87:66:20:6a:c6:70:32:da:
46:2a:af:03:76:34:0f:1d:67:10:0f:32:85:86:86:
c6:e3:18:43:f9:e0:fb:cf:07:25:02:71:6c:13:64:
ff:7e:fd:60:2c:2b:98:8c:3c:98:24:ff:92:96:f4:
22:3f:80:57:26:9e:48:c9:aa:0c:3f:dc:9d:8a:e7:
ca:7e:22:99:5a:74:14:f8:06:64:e7:7c:db:fb:3a:
82:a6:b1:f1:5b:45:0a:bf:c5:f6:8a:f0:92:6f:62:
1b:cc:53:e2:68:19:d6:85:5b:2a:0d:1a:d1:74:f1:
ee:86:16:1d:dd:c9:a9:65:03:cc:6d:7c:17:45:06:
04:63:4e:09:28:dc:14:fc:2b:27:64:a4:73:5f:75:
5f:00:bf:7c:33:c5:19:21:7f:98:9f:4b:69:5b:86:
3a:7f:de:5b:e4:7e:57:70:e9:3d:41:f2:3c:8c:d7:
e5:ac:e9:40:07:1a:d1:15:4a:b5:d4:1b:7b:07:91:
aa:ec:68:f0:25:6e:ee:f3:ce:b6:65:6c:d7:68:e1:
d6:9f:0c:7b:19:e3:bb:f7:e4:58:29:43:d2:26:82:
7d:d9:03:a6:00:6c:7b:4b:76:4d:56:4c:f7:0f:ca:
5a:4a:aa:6e:b0:78:91:7e:39:1a:7c:c0:fc:79:9e:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:15:2B:AF:9D:8D:A0:74:2A:C8:AE:99:8A:DC:94:91:83:E9:1C
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f5:e7:8c:85:39:42:be:56:00:d7:96:13:21:e6:f1:65:de:
85:f4:84:49:38:35:c6:2f:b6:97:c7:d4:e0:e6:e3:cb:bd:ac:
d6:e1:d9:15:ae:a9:44:3b:fe:36:58:fb:5a:eb:d0:a8:2c:80:
5e:1a:e2:f9:dc:77:d0:3c:e3:a5:5d:85:6b:38:3e:29:b0:25:
57:69:ad:af:88:42:c7:3e:43:a2:ad:95:20:da:f0:3c:a0:e4:
a6:9b:73:07:6e:48:cb:7a:4c:8a:f0:5e:7c:dd:0e:48:71:10:
12:5e:f7:b3:6a:08:41:87:41:19:7a:fd:4c:3a:de:e9:07:f9:
f7:d9:08:2a:13:ea:43:52:e8:32:e6:cc:7c:90:ae:36:a6:44:
8b:b2:42:4e:4e:56:1c:26:a1:7d:f3:99:1d:85:2d:39:87:5f:
1e:0a:82:2a:fa:6d:10:df:c9:b8:c9:d5:79:01:21:87:dc:f5:
77:b5:1b:ce:50:ab:55:1e:86:30:9d:29:59:f0:a9:05:e6:21:
0b:e4:6b:61:2c:fb:23:5c:1e:1e:6d:c4:be:e7:a4:e0:49:c2:
a6:39:b8:23:7f:da:a6:dc:3a:50:65:e5:92:56:b8:c0:cc:b6:
02:db:ad:ca:f0:cc:a8:90:c0:16:0f:4b:9b:b3:96:be:58:bb:
0b:dd:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:51 2025 by rpki-client