Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203333.roa
File: AS203333.roa (raw, json)
Hash identifier: xBPiVbkyDszqbDWPm+eV83W8dmrl+c9ySa8j3ej29v8=
Subject key identifier: FD:58:78:EC:16:9B:62:02:B3:CA:FF:AE:3F:B3:7F:3C:76:94:C8:BD
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 4D99C475DD5537B01E03E191CAD697181E04F0DD
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203333.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 203333
IP address blocks: 2a06:a005:d25::/48 maxlen: 48
2a06:a005:1860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:99:c4:75:dd:55:37:b0:1e:03:e1:91:ca:d6:97:18:1e:04:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=FD5878EC169B6202B3CAFFAE3FB37F3C7694C8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:af:cc:86:a5:0e:c3:d6:a5:87:ea:62:ff:
10:50:aa:85:ef:33:4e:21:9d:72:01:5d:ae:5d:49:
72:44:84:ea:3c:d4:bf:ef:17:59:07:a9:b5:9b:2e:
1d:79:a0:9f:e3:b3:e1:e1:80:63:5e:d9:9e:41:0c:
9f:48:28:48:a1:88:45:e1:a9:a0:71:a7:d5:f2:5c:
e6:51:d9:2a:50:15:1a:d5:61:ca:16:a8:0f:3d:88:
55:b1:31:70:c2:35:cf:dd:2b:0b:e1:fb:ad:46:c3:
63:c7:dc:66:6d:87:65:cc:55:bc:86:4e:b9:b5:5f:
c9:5e:2a:5d:bd:0c:68:41:17:56:ca:3e:c8:16:d4:
64:90:a6:9d:e0:14:c3:e2:7e:bb:13:a5:ba:2f:fc:
18:eb:a6:c2:37:29:86:ad:ea:39:53:45:d8:17:5d:
80:e7:42:bb:b5:c5:a4:15:4c:09:b6:ae:5e:b5:59:
d3:1d:1d:37:75:ea:fe:7f:2a:b0:1e:96:86:0e:c7:
08:f9:6f:c4:8d:01:77:c9:3e:97:6e:ec:43:3a:1c:
7f:ee:b1:47:6a:ae:22:af:e2:f9:e8:9b:f8:a0:d8:
bc:d2:b0:4f:7c:7a:ab:4a:58:83:b1:92:c1:99:eb:
4e:81:4f:c5:42:c4:5f:74:36:5c:0d:62:10:1b:18:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:78:EC:16:9B:62:02:B3:CA:FF:AE:3F:B3:7F:3C:76:94:C8:BD
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d25::/48
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
55:b1:48:4a:d5:52:d4:55:a3:8d:c4:b1:bc:13:ab:5b:59:68:
98:34:6b:fe:6f:d8:d2:4b:1e:b5:71:3d:28:8c:6e:3b:c9:69:
13:76:c9:9b:04:48:58:e8:fb:11:61:59:99:42:82:4e:89:be:
a3:13:bb:34:ab:07:23:c7:7a:07:99:bc:86:99:17:23:e6:b9:
b7:97:58:82:22:c6:7d:49:25:b4:ae:30:44:21:08:59:d2:cf:
8d:fb:2d:5e:fa:17:45:4e:cb:ea:f7:d3:fe:8e:5d:3b:6a:fa:
b5:81:7d:45:be:e6:a5:84:1e:23:94:ae:0c:3a:00:e1:81:c6:
04:51:55:44:7e:82:cd:c4:a5:e3:11:c3:f6:91:85:f2:8c:e1:
aa:a4:b6:9d:29:1a:75:60:b3:65:b7:53:e2:0d:20:05:ac:d6:
3e:09:7b:a5:cc:49:42:36:90:9f:9f:68:64:ee:31:43:4e:04:
42:7e:71:a7:7d:ad:b8:81:04:2f:8e:86:b5:f8:57:e6:b1:16:
e9:f3:ad:b8:d0:9f:b3:67:88:57:df:b3:bf:96:02:25:c7:23:
4d:02:a5:ac:2b:67:44:c9:db:e0:e2:47:4f:8b:ee:05:ca:9f:
5a:19:1b:dd:bc:df:e9:bb:4b:25:e8:ee:36:83:25:62:1c:aa:
c8:74:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org