Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203236.roa
File: AS203236.roa (raw, json)
Hash identifier: RPq5y17SbXxMlOUwnxHciCpRQnn9qxOU1ZxK3pgl/FA=
Subject key identifier: B4:1B:67:09:8A:4C:76:AE:4B:32:3A:83:FB:8F:5F:BE:89:C1:90:82
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6DCC94668FC93958761F7D230D90960C20B4CCCD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203236.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 203236
IP address blocks: 2a06:a005:486::/48 maxlen: 48
2a06:a005:1520::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:cc:94:66:8f:c9:39:58:76:1f:7d:23:0d:90:96:0c:20:b4:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=B41B67098A4C76AE4B323A83FB8F5FBE89C19082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:c8:48:dd:b6:3a:16:2e:a3:42:29:3b:90:
6e:ac:dd:4f:07:98:fd:83:33:81:2f:48:2e:0e:d7:
a2:ea:14:9b:8c:77:95:09:78:6a:c4:11:b4:a4:05:
ff:52:7d:90:d7:f0:95:9c:3c:3d:ff:29:3a:be:3f:
ca:bc:a2:a3:a1:4a:f7:eb:b6:93:ee:56:1c:0d:77:
90:be:27:40:fc:4c:62:96:d3:25:5a:7c:9f:56:fc:
91:c5:0e:4b:5a:3b:46:64:d0:fe:b0:98:bf:e2:15:
e9:39:53:d3:8d:ce:ca:2e:ee:a3:e8:82:7d:ef:35:
9e:70:ae:43:d2:63:8a:c5:46:90:21:81:88:84:6c:
f2:fa:e0:71:f4:e9:f9:b2:d9:31:9f:69:a3:f1:00:
bf:b7:ac:4b:79:96:7e:6b:32:ae:2a:82:83:ba:6a:
c8:07:a7:6f:6f:d5:bc:9d:6f:fa:8d:de:77:5c:14:
67:10:57:9d:0d:4e:bc:b8:6c:1f:08:be:9c:83:dd:
54:40:df:af:07:b7:4d:20:c4:6d:33:9c:75:62:a9:
01:b6:e1:c4:b6:07:0a:aa:db:25:ef:0b:57:46:2d:
1a:23:ac:f6:ec:53:6b:36:e8:16:9d:3f:82:95:fe:
71:0f:07:ab:68:8c:84:8f:04:a7:b5:ca:f1:58:1f:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:67:09:8A:4C:76:AE:4B:32:3A:83:FB:8F:5F:BE:89:C1:90:82
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:486::/48
2a06:a005:1520::/44
Signature Algorithm: sha256WithRSAEncryption
04:71:89:cb:0e:7d:4a:bd:2e:82:1f:ef:a7:93:f8:a2:d0:2c:
7f:dc:cc:be:3f:88:e0:45:6e:82:fa:be:56:fd:8a:01:78:56:
82:b7:2e:96:d3:ad:ce:ca:25:17:c5:ac:4d:a0:d8:dc:c3:47:
fa:bd:7e:6d:2d:cd:f4:93:0b:f8:a8:f6:ae:6f:64:ba:58:2a:
36:69:78:bf:c2:76:c0:18:ad:5e:f7:86:b6:43:5a:3f:18:12:
6b:aa:af:c9:7a:d6:fd:28:80:67:08:47:35:93:52:09:e8:12:
ae:a1:39:d0:90:e2:46:5d:76:e4:7d:e7:f3:50:b4:b3:74:f3:
c6:b0:53:d5:3a:10:73:9f:da:d3:c8:59:ad:1b:b8:6c:e7:6c:
03:d1:d8:c2:25:c7:4f:71:1b:8a:2b:cf:86:b5:16:f9:68:ac:
1a:cd:d3:09:ab:0a:8e:31:99:9d:d6:27:37:d5:19:0c:5c:bd:
1e:e3:0c:2e:60:d5:0a:5e:17:4f:0a:64:7e:88:31:d5:ae:ea:
05:43:76:68:ec:8c:a9:4c:e5:2c:13:f1:8d:c4:47:c0:49:81:
38:8c:9e:ca:03:76:d1:e9:6d:af:db:f8:46:21:dc:c7:03:e1:
24:42:79:9d:ec:a0:8a:f2:91:25:fe:95:72:53:10:8d:96:49:
1a:54:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org