Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203145.roa
File: AS203145.roa (raw, json)
Hash identifier: LFhF+DdpOI6DbDcwoFfkvVLQ0LZgpEVcEQAjeVg7Dzg=
Subject key identifier: 27:66:1B:BD:F5:F4:1C:9A:43:CB:73:84:2E:A6:56:97:34:91:18:93
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 5801D19433F884B88A62A5904B94533DD4640FAF
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203145.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 203145
IP address blocks: 2a06:a005:a0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:01:d1:94:33:f8:84:b8:8a:62:a5:90:4b:94:53:3d:d4:64:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=27661BBDF5F41C9A43CB73842EA6569734911893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:92:02:f6:6e:08:52:d8:3e:32:02:05:12:
a5:70:73:70:66:cf:96:ef:b1:6c:5a:6e:e5:c4:35:
06:a2:d6:19:18:78:c7:c3:63:79:cf:59:ae:4f:3b:
0d:43:61:dc:9e:b8:1d:b6:f8:99:16:7b:57:e0:b1:
b8:d5:44:fb:c3:28:8b:91:d4:c7:27:06:90:15:67:
2d:7a:90:7a:6d:d3:b7:84:55:01:97:d4:cc:1e:31:
fc:19:b5:20:52:2f:af:30:04:9f:7d:c2:4d:d1:91:
42:67:58:f2:79:8f:89:a4:a6:3d:a0:45:cf:72:c1:
f8:7e:da:5e:96:20:86:98:de:39:18:4a:77:7e:9a:
6c:ad:06:66:43:c9:77:79:e4:87:d5:7b:69:a3:01:
49:ef:4e:76:24:ef:dc:91:40:e0:19:7e:f2:ac:89:
21:64:97:9d:db:c4:88:a4:35:67:f1:68:45:a2:d2:
43:6a:75:6b:6f:b5:05:9b:25:89:27:0d:0d:69:78:
b3:ba:5c:1b:95:b5:aa:2f:b5:89:11:4b:0c:78:2e:
4e:ed:d7:d1:42:71:72:8b:f6:eb:cd:98:45:69:d2:
bd:84:7c:f6:8b:ad:3b:ba:e7:fc:3d:5a:d5:45:7f:
96:d8:90:4e:dc:cd:85:b4:a4:50:5c:7f:13:30:88:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:1B:BD:F5:F4:1C:9A:43:CB:73:84:2E:A6:56:97:34:91:18:93
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0f::/48
Signature Algorithm: sha256WithRSAEncryption
38:8a:3a:95:0d:3c:7d:9a:af:b0:d1:2c:39:28:7a:53:5e:99:
1b:3a:5f:50:04:66:f8:d3:43:ae:06:18:b6:73:9d:8a:7c:31:
1e:2e:31:16:24:69:ab:a9:6f:1c:db:07:61:29:59:5e:9c:87:
c1:9c:cc:6b:ac:7e:23:aa:8f:89:69:b3:9c:b7:22:02:0b:49:
d6:8a:d8:6d:77:6a:31:2e:38:d7:36:a4:ae:d6:6b:24:e4:5e:
e3:bf:df:28:a4:dc:ed:b0:b2:5f:f0:a3:42:03:73:3c:77:a1:
52:55:d4:c0:08:95:5e:3f:b0:76:d6:d9:9d:37:00:58:41:99:
bc:4d:13:f4:6f:2d:c0:34:c2:93:c0:7a:28:ef:70:1d:59:e8:
60:2f:23:92:ce:e4:56:9f:bc:41:34:a6:b0:b7:38:98:cc:ad:
52:a0:83:69:34:70:ff:cc:fd:77:20:d8:de:62:6f:fb:04:c9:
2a:d0:e5:59:81:8e:71:a3:38:fe:ef:f4:0e:28:dd:8c:73:24:
58:a1:4e:2d:38:14:aa:df:c2:50:57:c8:41:4e:24:21:35:c4:
e4:90:a8:d7:b5:41:5f:7e:49:0b:fa:3f:8b:b2:91:1a:cd:f7:
b6:a0:8e:8d:39:f0:bc:c2:ae:3d:ef:4d:44:f1:0b:8d:bb:87:
d7:37:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org