Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203113.roa
File: AS203113.roa (raw, json)
Hash identifier: hGxYfF28itLhaYaoSHUfxLuvWxmt6skcl3Xj4WmRwf8=
Subject key identifier: 44:EC:BF:EE:23:FB:D7:C8:15:0A:E3:00:06:E6:95:C3:89:EE:79:6E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0266A69EB9A204336804060DBAF5A79C2E26EC4B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203113.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 203113
IP address blocks: 2a06:a005:8c0::/44 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:2260::/44 maxlen: 48
2a06:a005:22f0::/44 maxlen: 48
2a06:a005:2310::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:66:a6:9e:b9:a2:04:33:68:04:06:0d:ba:f5:a7:9c:2e:26:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=44ECBFEE23FBD7C8150AE30006E695C389EE796E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:64:7f:07:24:7c:9e:68:96:5d:e6:1d:59:
27:fc:e1:a2:96:7d:8f:04:08:4a:ac:dc:07:ac:16:
e8:ba:50:e1:12:f5:a5:f2:9e:06:ef:3c:d6:94:5d:
b1:5b:81:21:95:56:3b:06:fb:b4:fd:24:fc:34:92:
8b:15:f0:ba:1e:6d:ec:02:33:f2:6d:75:2b:86:e5:
53:99:4a:44:05:fe:f2:92:f9:c4:c4:b8:37:85:fa:
c7:81:20:63:72:f3:16:f2:e1:85:1a:41:05:96:65:
4d:02:b1:2c:3e:49:7f:d8:47:be:08:6f:5d:47:7c:
3f:5c:e1:86:26:ee:c7:f8:89:45:04:48:4d:84:f4:
db:cc:fe:0e:c2:91:a3:3f:95:1d:80:9d:9b:af:7c:
c4:67:74:62:9c:9e:e0:eb:61:e0:04:88:75:1a:00:
b1:e4:77:1e:70:e0:9d:cb:24:48:02:25:74:5d:bf:
db:90:83:d0:d9:b5:8a:04:35:21:2e:99:2a:f6:19:
f0:12:09:fb:6e:72:31:84:db:59:91:22:ad:b0:04:
c2:95:29:5d:57:ad:b2:0d:d2:39:8d:12:85:76:a8:
8e:6e:d0:16:3a:de:11:5a:1b:76:f0:81:cd:43:ff:
c4:e6:15:88:59:ea:7d:e3:c1:e3:80:12:a5:c7:ef:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:BF:EE:23:FB:D7:C8:15:0A:E3:00:06:E6:95:C3:89:EE:79:6E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a06:a005:22f0::/44
2a06:a005:2310::/44
Signature Algorithm: sha256WithRSAEncryption
88:b2:fa:03:9a:40:b0:ef:3f:58:c9:ac:7f:c3:65:ee:93:13:
6a:27:fc:d4:61:54:25:04:ce:75:82:15:0c:0a:48:ed:40:51:
27:53:f2:82:24:a2:96:cd:fc:cd:e2:17:dd:0c:df:b8:fb:5a:
86:2e:3c:78:40:18:52:11:fd:ef:08:3b:72:74:eb:ec:0d:3f:
a8:22:ad:f4:83:59:39:de:b3:e7:51:6a:52:a0:af:ef:29:7c:
66:f6:44:69:92:0e:3b:cf:f0:79:97:64:e9:0d:38:1d:be:54:
c6:8d:bd:85:ad:6a:ca:1e:78:3a:2b:9d:79:3e:1c:e3:f7:c5:
21:fe:52:68:9f:35:1f:a0:3f:24:4b:ea:5e:ca:52:0b:3f:80:
c0:e9:12:b1:0b:90:3d:03:4a:1a:19:26:60:8f:8b:fb:b8:d9:
5a:c7:63:c1:bd:1d:9c:cf:bc:3b:7e:35:22:2d:00:4c:9a:a8:
82:35:59:92:74:f9:ec:78:bb:38:02:ad:e6:a2:92:57:73:c7:
57:2a:46:5b:4b:27:6c:8c:de:4a:54:df:36:fc:2e:30:5a:6c:
91:ce:c5:6a:98:48:c4:8f:b5:85:b5:11:51:0c:1e:69:3e:f6:
f3:58:e6:09:07:fd:ab:70:04:be:3d:6a:47:8b:82:55:73:55:
5e:d9:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org