Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: n+GWIV2ieoyx98+goLN1jwPZJ5Wjl65bqkYyMUj44W0=
Subject key identifier: 3D:13:2E:8E:24:61:58:BD:08:A5:89:2E:6A:09:BE:32:81:67:94:D0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 10C5C02785989F81FD2BB5E13A10542B8BF81D70
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203199.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c5:c0:27:85:98:9f:81:fd:2b:b5:e1:3a:10:54:2b:8b:f8:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=3D132E8E246158BD08A5892E6A09BE32816794D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:7d:ad:ea:b3:3c:38:0b:74:a0:3d:a0:60:
2b:0f:bc:ac:f3:40:a0:f6:f0:d5:97:fa:22:a9:f9:
3f:b8:93:a8:c8:60:48:a9:43:46:63:8d:0b:55:57:
6c:98:6e:0b:b7:58:a3:37:b3:5a:95:3b:87:3c:eb:
4b:39:eb:40:4f:63:00:c0:13:49:df:50:63:77:c2:
0f:41:29:dc:bb:2b:7d:e5:a2:12:85:b5:a0:95:6c:
6d:9b:be:69:82:6e:e8:af:cd:92:d9:93:dd:0b:f0:
a2:bf:51:96:1d:ad:4d:fa:37:30:58:64:c2:8a:be:
d3:0b:85:b8:10:42:50:3f:cc:89:a1:b5:2e:0e:61:
2b:05:a8:53:7e:fe:a1:26:9b:6a:87:00:2b:e3:80:
13:13:0d:66:3f:85:82:75:6f:bc:88:b8:c9:7a:90:
2b:d0:2a:d3:57:c4:12:6f:42:c4:ce:04:6f:b8:6b:
80:d2:7b:42:f7:2d:71:73:9b:3c:61:b2:14:57:7a:
64:d7:9c:2a:49:05:29:36:cd:71:88:c5:85:54:ae:
85:1f:80:86:c4:ad:9e:7d:72:04:fd:cf:c8:d3:73:
66:68:be:dc:5c:7a:d3:fa:f3:13:da:6d:8f:b7:a4:
24:d5:28:35:22:23:35:b8:5f:16:f7:d6:4a:95:95:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:2E:8E:24:61:58:BD:08:A5:89:2E:6A:09:BE:32:81:67:94:D0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
Signature Algorithm: sha256WithRSAEncryption
40:d5:0b:10:75:c1:e8:b0:cc:32:82:84:6c:e8:8c:3e:46:b3:
97:59:ca:d6:a2:de:15:cd:34:87:35:13:b8:e5:9f:ff:20:94:
3c:20:b6:e0:7f:4d:dd:70:3c:43:b6:84:aa:c6:c0:bc:ce:60:
17:f5:ed:45:a4:57:d8:e6:6c:64:04:08:5c:22:ee:76:e3:62:
a5:45:e5:e7:50:d3:0e:75:f9:8c:fd:f7:28:1f:8b:50:38:b3:
62:1c:90:ba:cb:28:1b:c4:55:f5:04:c6:6f:75:e4:11:4a:95:
74:bb:73:3d:2a:e5:08:17:fa:47:85:c2:4f:bd:3b:06:2d:8d:
25:45:64:ce:ef:84:f1:3b:94:af:7c:4b:ac:8e:0c:5a:b2:ea:
6d:20:3d:73:51:51:04:f1:91:25:4b:18:1a:b0:ed:ce:6b:a8:
79:79:42:3b:f2:2a:fc:ec:95:48:66:e8:ed:e2:01:ef:25:a3:
c7:a1:aa:64:f2:9b:1d:0b:70:65:04:b8:b0:5d:d2:d1:d8:59:
91:dd:ba:8d:15:73:a5:e4:c8:1e:af:cc:24:62:cd:98:64:d3:
ae:c3:c4:10:a0:1d:be:24:a0:7f:4b:12:e4:2d:ba:44:d3:4c:
fd:b5:89:04:d6:ca:92:43:1d:0f:14:c5:e2:d6:91:f0:ff:4c:
4b:55:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org