Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203453.roa
File: AS203453.roa (raw, json)
Hash identifier: cuSPG5GqbriHEbCMxzulOFxGJ0XedicSxU06YoSdH/k=
Subject key identifier: A3:83:0A:51:42:86:78:81:F1:26:3E:C7:38:FE:EA:20:90:8C:09:08
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 715D4DAD76CE530BAE3A4E6A1B5F8FA3D10414A5
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203453.roa
Signing time: Sun 01 Jan 2023 23:59:23 +0000
ROA not before: Sun 01 Jan 2023 23:54:23 +0000
ROA not after: Sun 31 Dec 2023 23:59:23 +0000
asID: 203453
IP address blocks: 2a06:a005:108e::/48 maxlen: 48
2a06:a005:150d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:5d:4d:ad:76:ce:53:0b:ae:3a:4e:6a:1b:5f:8f:a3:d1:04:14:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:23 2023 GMT
Not After : Dec 31 23:59:23 2023 GMT
Subject: CN=A3830A5142867881F1263EC738FEEA20908C0908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:79:00:18:bd:5e:64:5b:1d:eb:b2:6e:c3:
05:12:1f:58:2b:ff:47:9f:28:f4:8b:3c:5e:2d:c4:
a5:24:92:f5:9e:26:22:e1:a7:46:b5:37:02:5c:16:
6d:1b:49:ec:99:93:08:e2:56:15:62:32:2b:f0:b8:
96:ea:51:57:1a:50:a7:22:d0:7f:71:5f:69:c3:fe:
6a:f3:32:b6:4e:a3:13:ea:0e:f4:0f:73:6e:85:17:
84:ab:5b:1a:3b:d8:bd:4f:39:f4:9d:de:85:0c:69:
6a:30:61:b2:8c:ed:9c:ad:37:3c:25:54:86:75:1d:
a5:51:ce:98:b0:5b:98:31:68:b2:8f:7e:ad:55:61:
1b:90:d3:0c:9e:1a:12:ca:9c:d9:d9:ea:5e:92:69:
16:8c:70:e6:39:2b:e5:ed:2c:49:ce:8c:bb:95:00:
54:87:cd:ef:41:93:45:33:9c:6a:bc:cd:31:9a:34:
cb:1f:7a:f7:2e:f5:a4:55:84:28:3e:ae:e2:6c:8f:
5b:b4:f6:c8:9e:5b:59:67:df:81:8c:82:e3:70:8f:
e6:f2:10:d9:3d:05:9a:64:a1:87:a5:7c:25:01:81:
ea:e3:90:6c:59:40:70:17:2e:75:1d:d3:b8:d8:e0:
92:08:e0:bc:01:c2:1c:cf:41:fd:f9:95:b1:9f:af:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:0A:51:42:86:78:81:F1:26:3E:C7:38:FE:EA:20:90:8C:09:08
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203453.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:108e::/48
2a06:a005:150d::/48
Signature Algorithm: sha256WithRSAEncryption
48:cd:3e:7a:77:a1:64:c9:f6:86:60:3a:b2:90:f9:a4:34:bf:
fd:a7:b0:4b:03:0e:51:6a:b5:41:45:5b:33:b3:b0:b5:e7:d0:
70:c6:df:95:67:fb:72:f2:a9:93:23:0b:04:a5:d7:07:49:c4:
97:c2:a6:f8:00:51:6e:ac:76:1d:68:84:49:4b:0f:94:22:db:
b5:90:b6:2a:26:cf:e9:f6:8d:f0:05:69:f9:b9:97:14:24:7d:
c7:9c:5b:0f:6e:cb:68:16:95:db:79:50:7e:2f:b6:e3:90:93:
63:be:1d:00:81:a3:2c:85:8c:fe:dc:32:4a:23:d4:eb:62:27:
d2:50:7a:6c:75:9b:2e:a5:cb:f6:7d:16:e7:39:8f:70:8c:cb:
a9:96:ae:27:79:e8:eb:a2:e9:0a:9f:a1:03:ad:87:95:38:46:
73:b1:21:3e:89:99:a3:b0:86:a0:e4:fe:b3:20:ca:8c:93:bd:
a5:b9:85:dc:56:6e:78:b5:d5:5e:5c:34:b7:95:e1:a2:b9:e3:
30:b5:5e:bf:e1:64:d0:74:4e:98:a5:c5:9d:0c:23:42:64:31:
0c:ea:03:a0:f6:81:bd:11:44:55:d4:2c:49:cd:f3:9e:0f:e8:
60:7b:21:97:d9:ae:09:a8:32:b9:ea:bb:93:1e:61:25:99:d7:
69:af:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:18 2025 by rpki-client