Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203323.roa
File: AS203323.roa (raw, json)
Hash identifier: UavvaSCNLG3FUZ1QuE1yTynS56JcapE7SB+s/jho/kI=
Subject key identifier: D3:F6:86:51:0C:53:35:E6:91:CD:0B:EF:56:7D:CA:F4:51:EF:43:2E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 50D28575D53B03057013683340ED5D47FD8942F6
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203323.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 203323
IP address blocks: 2a06:a005:21c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d2:85:75:d5:3b:03:05:70:13:68:33:40:ed:5d:47:fd:89:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=D3F686510C5335E691CD0BEF567DCAF451EF432E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:8f:a0:27:2e:df:19:4a:ad:cb:8e:a9:a6:
97:a0:1b:1e:30:96:50:ad:a0:d6:95:fc:69:09:9a:
d6:45:de:f5:d3:f9:05:9a:ee:98:73:f1:b1:4f:dd:
c2:68:3e:1d:7a:53:e2:8c:2d:63:0f:da:e8:9b:97:
0d:55:08:93:52:5d:d1:1a:f3:cb:a4:74:06:8c:17:
76:ee:6f:7a:73:37:81:a0:57:11:4d:23:c5:f5:60:
e2:ea:e7:56:fe:18:8d:2e:25:b8:1b:44:38:0a:4d:
1b:60:76:fb:e5:53:83:68:13:d9:09:ec:3a:87:7e:
2c:b0:62:1c:c3:a4:7e:3f:42:14:54:a0:4a:d7:1c:
5e:3b:a3:99:bb:ae:cd:7a:a3:6c:3d:2b:6f:59:aa:
8a:9f:36:d5:ca:63:da:8d:40:46:10:40:a3:58:6f:
0f:8b:f2:39:87:69:6f:12:c8:90:9a:07:bf:1b:d9:
fb:42:af:8e:1c:fb:23:5f:39:14:02:fc:4c:e6:9c:
af:72:3b:d1:bf:7f:36:9c:c8:af:c3:df:1e:2e:bc:
a4:90:93:c2:d0:4e:c4:39:f9:48:37:ee:8a:81:24:
29:a9:a9:c3:81:76:84:e1:51:ae:cf:5e:53:36:c1:
c9:f6:7d:3c:ee:67:b1:db:49:db:9d:47:62:ce:be:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:86:51:0C:53:35:E6:91:CD:0B:EF:56:7D:CA:F4:51:EF:43:2E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:21c0::/44
Signature Algorithm: sha256WithRSAEncryption
64:34:aa:10:93:5f:57:59:fc:bd:7e:e8:d9:f7:55:89:10:4e:
bc:cd:01:05:eb:7a:e6:5e:8e:bf:25:5a:af:f5:f9:d5:a4:f9:
90:c1:99:57:29:88:9a:a1:0f:88:89:26:73:78:86:9a:11:20:
43:8b:d6:dd:c4:8a:57:93:3b:a6:6a:f9:e1:ea:ca:e2:5c:47:
a0:fb:71:4b:71:14:d8:d2:02:a1:7f:87:31:44:e5:35:61:9b:
8f:b1:f1:45:ec:d2:43:14:b9:14:cd:7e:c0:92:13:94:60:b5:
ff:db:bd:fd:03:33:6a:89:bc:e5:dd:ec:51:f4:70:7c:da:32:
88:ea:69:f9:db:eb:1f:83:97:40:30:aa:2c:5c:f6:9a:f9:13:
3e:39:02:b0:43:ab:46:22:98:f2:60:b9:fc:60:b1:ad:35:45:
fc:10:a6:79:a1:91:81:6e:3c:65:91:28:d3:15:1d:1b:f5:6a:
1b:1e:da:bd:2b:bb:90:2f:ff:ad:ec:42:57:a1:95:f2:9c:c3:
e7:70:98:73:b8:27:39:60:41:d1:29:30:9c:e7:6c:ee:92:9d:
02:cd:e0:a4:b8:1c:58:56:ef:25:49:c5:06:7a:82:f9:f3:9e:
b6:b5:81:c3:9e:e4:de:86:72:e4:ba:73:33:d8:44:ae:1c:99:
8a:35:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:07 2025 by rpki-client