Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203314.roa
File: AS203314.roa (raw, json)
Hash identifier: kw7Yfircfvvwbq1lK6TFeNup8Ed29W3ilxwkhRhMZz4=
Subject key identifier: A9:48:BF:D8:02:0B:AD:F3:08:FE:47:4A:FC:BA:1F:78:15:15:28:B7
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 683F0B84BA1802E6E556109EE0C496C32C8EE2E0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203314.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203314
IP address blocks: 2a06:a005:6f0::/44 maxlen: 48
2a06:a005:18c0::/44 maxlen: 48
2a06:a005:1bf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3f:0b:84:ba:18:02:e6:e5:56:10:9e:e0:c4:96:c3:2c:8e:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=A948BFD8020BADF308FE474AFCBA1F78151528B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:11:c6:90:08:2b:af:27:d4:3f:00:bf:10:
3c:cd:b0:e4:90:56:ac:af:2c:74:b0:63:d6:b2:cb:
77:60:a6:5e:33:46:50:04:e1:75:14:d5:02:2b:db:
28:2d:50:3e:62:91:7f:76:04:9b:5c:b8:15:3d:77:
6a:08:66:5d:ee:4c:bc:79:17:46:38:7f:68:f8:87:
82:2c:6b:02:1d:e3:ce:a2:f1:91:1e:e7:78:92:70:
4e:81:39:ea:73:f7:b6:5a:51:26:10:ae:a6:f0:a0:
58:39:65:f9:e1:40:64:61:6a:1a:00:02:0a:c0:eb:
10:d7:cd:18:44:ac:e9:24:90:06:a3:5b:29:b6:6a:
79:d4:37:6a:f0:00:b7:bc:a0:a9:5b:f0:e7:5e:88:
49:4a:7d:62:29:0e:93:b1:d2:75:38:c4:b9:e2:9e:
8b:4e:50:36:9d:91:33:f7:08:ca:e5:85:31:59:ad:
9f:0b:ea:8d:a4:09:13:33:ae:06:f9:11:fd:af:61:
1e:79:ba:04:fb:ec:6b:a2:de:d9:07:53:88:fb:84:
9f:8e:1f:fb:73:d7:86:09:54:ba:64:ac:5b:d6:01:
fe:79:f6:7b:be:4a:e5:2a:7d:cf:a4:c0:c6:b5:5f:
62:96:9f:47:d0:26:85:b1:63:de:45:5a:2f:bd:b7:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:48:BF:D8:02:0B:AD:F3:08:FE:47:4A:FC:BA:1F:78:15:15:28:B7
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6f0::/44
2a06:a005:18c0::/44
2a06:a005:1bf0::/44
Signature Algorithm: sha256WithRSAEncryption
50:18:1d:8e:c0:66:0e:51:3f:f7:b1:af:07:13:c7:b9:65:6f:
c1:92:e5:05:eb:18:c9:79:41:6f:ff:59:fb:61:75:18:61:e9:
c2:dc:94:33:2f:9f:59:23:29:10:41:9f:f6:ee:f4:d1:bf:b8:
cf:0c:eb:7e:65:39:de:e2:63:ea:32:de:24:94:09:ee:34:ec:
ee:6a:b7:d1:8c:15:6d:85:eb:ce:62:50:d8:c1:16:f9:b5:c2:
49:9a:f5:e0:3c:b2:94:52:9d:89:1e:27:7e:e2:99:5f:2e:8c:
5d:c2:1a:ff:ef:f7:e2:02:2e:78:85:31:2e:34:b0:90:69:73:
34:9a:9e:54:de:1b:ac:40:6f:13:69:27:a3:b2:40:86:5f:a5:
a3:9c:9e:4a:03:80:91:62:1b:3e:70:b0:8e:af:80:17:cf:3d:
80:23:26:8b:e7:c8:b5:21:ad:49:ce:0e:af:b2:68:fe:aa:68:
79:33:5d:7c:a7:a5:d3:56:16:34:8f:3e:84:11:d2:10:c4:0e:
81:bb:47:e4:24:4e:91:8e:5d:c6:60:db:59:c1:15:9e:0e:08:
3c:44:ff:bf:30:74:26:08:03:ba:82:72:6a:3c:eb:5b:51:a7:
2b:46:6d:f1:c9:11:1a:dc:f6:e0:9f:15:4f:c5:37:f9:27:ca:
aa:02:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org