Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203174.roa
File: AS203174.roa (raw, json)
Hash identifier: W4IHMiyjgk3qfRM39boMHRG1ZnaSUgMrto3sm9K0oSc=
Subject key identifier: 4F:2E:81:F3:78:30:73:9A:AC:DA:70:AC:3F:0B:C2:DE:5F:3D:E6:06
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 47C4977CB2972673FAD2B587D1D9A7A06F5B570E
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203174.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203174
IP address blocks: 2a06:a005:1900::/44 maxlen: 48
2a06:a005:1a10::/44 maxlen: 48
2a06:a005:1fb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c4:97:7c:b2:97:26:73:fa:d2:b5:87:d1:d9:a7:a0:6f:5b:57:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=4F2E81F37830739AACDA70AC3F0BC2DE5F3DE606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:89:04:6c:f9:ae:22:b4:7b:aa:91:63:8d:
6b:93:73:8a:c3:43:05:3d:aa:fa:f8:7b:e4:d8:21:
1d:6f:0c:a1:6b:e2:5e:ed:71:a5:44:40:19:d1:97:
9e:af:77:74:5f:3b:90:a5:88:bd:d2:d7:19:3c:d1:
d4:a4:9b:51:5e:9d:d0:4d:b8:25:a5:90:8d:20:38:
d2:2a:4a:28:41:57:72:ee:be:63:fa:2b:4b:24:20:
88:72:29:86:bf:8d:ad:c6:3a:d1:f8:df:0e:48:a3:
a4:04:5e:61:98:94:c4:a5:4a:0a:c0:fd:2e:7d:7f:
e5:69:44:97:30:1f:14:6c:ba:a2:73:67:ba:4e:c5:
3e:d4:b5:1e:26:8d:c5:cb:66:2b:7a:ce:92:96:04:
ff:ed:c5:51:7a:63:78:f2:38:b0:53:22:5e:1a:da:
6f:7a:87:9b:25:6a:77:d6:8b:d3:a4:ff:d1:7a:68:
55:13:b0:b8:96:79:a4:26:68:25:f1:1c:d8:c6:9c:
8b:0d:68:8b:a4:8c:0f:71:cb:8b:7b:1d:cd:e2:c4:
81:a0:d6:59:b3:b2:4b:ad:a4:95:e6:81:8d:87:63:
49:20:bf:b3:dd:7b:83:6a:64:9d:b6:18:03:26:75:
f2:39:ad:7a:e9:c2:87:60:e2:23:e1:2b:f0:4e:e0:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:81:F3:78:30:73:9A:AC:DA:70:AC:3F:0B:C2:DE:5F:3D:E6:06
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1900::/44
2a06:a005:1a10::/44
2a06:a005:1fb0::/44
Signature Algorithm: sha256WithRSAEncryption
48:38:d6:f7:e1:fc:03:3c:aa:37:7f:0d:23:b9:f4:74:0b:bc:
ea:27:e0:59:71:9f:db:d8:26:5b:1b:07:97:4a:ac:f5:17:0b:
64:c0:b4:a6:1e:fc:46:b2:36:a5:e7:65:60:a6:0c:3b:f6:a4:
72:c7:12:c1:78:32:29:68:bf:b0:e6:5b:56:ea:55:fc:7d:9b:
32:02:33:b6:79:02:2f:33:00:53:b0:67:46:fa:2c:65:18:57:
3d:a6:2e:26:92:26:c9:e5:15:3a:06:f9:7b:20:73:93:be:7b:
07:e7:1a:fc:a8:bd:bb:ac:83:cf:cc:cb:16:8c:c3:d3:09:68:
4a:9e:67:0b:1d:27:66:95:5f:7e:62:bc:a0:be:9d:0a:21:10:
18:27:d2:09:ae:c1:7e:d9:c6:20:ea:c8:f6:e4:da:7f:db:82:
70:0d:0a:c9:8b:3f:2a:fc:da:6d:ef:ca:c7:be:c6:d5:2f:8f:
61:19:e0:13:44:b2:f3:12:d1:11:ab:69:19:7f:fc:f0:96:d6:
a4:ab:30:04:db:a1:a7:00:f3:54:26:cc:56:7e:f8:bf:b9:4b:
bd:29:ef:cb:e4:74:d3:1e:53:f0:9c:ca:01:5b:bc:08:80:d2:
c8:44:ab:89:be:fd:f3:83:11:54:90:c8:ae:eb:36:e4:0c:14:
4a:a5:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org