Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203458.roa
File: AS203458.roa (raw, json)
Hash identifier: /1AFf1czm4Akf21zA39u+0FVGZP2qgPjAgS6W0pYagc=
Subject key identifier: EE:CE:B7:66:51:8B:64:C4:FD:20:05:25:0F:DC:E7:3E:32:49:70:7E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 620938DB16E40E3AFE28D88ADAB50C6B150850C0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203458.roa
Signing time: Sun 01 Jan 2023 23:59:15 +0000
ROA not before: Sun 01 Jan 2023 23:54:15 +0000
ROA not after: Sun 31 Dec 2023 23:59:15 +0000
asID: 203458
IP address blocks: 2a06:a005:1871::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:09:38:db:16:e4:0e:3a:fe:28:d8:8a:da:b5:0c:6b:15:08:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:15 2023 GMT
Not After : Dec 31 23:59:15 2023 GMT
Subject: CN=EECEB766518B64C4FD2005250FDCE73E3249707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:0b:ba:2d:be:c3:80:75:d8:f2:f0:db:87:
1e:23:eb:de:f5:a0:ec:4c:90:ba:cc:eb:13:f2:56:
65:26:8d:16:61:d4:74:76:7c:53:2c:08:7d:fd:36:
20:51:f2:60:5d:aa:6e:93:a1:44:e4:9a:e3:19:d2:
04:4f:29:f7:94:cf:b4:68:82:48:da:32:ab:da:f5:
93:2a:9a:83:90:08:2a:90:b8:8d:26:59:f1:d2:ae:
d6:bc:51:33:eb:d2:16:3e:cb:48:01:95:53:c5:e9:
c7:d8:0d:cd:2e:9f:2d:31:4d:40:9b:d7:27:c5:63:
bc:c5:9e:2b:db:58:64:7a:02:24:c1:85:f4:fa:a7:
1b:19:2c:df:44:51:8b:3e:82:a1:1c:b2:bb:f7:55:
ae:f3:49:53:0a:b1:c9:91:33:13:cb:0e:a4:3c:a0:
39:c6:e5:c1:49:d8:30:33:e1:90:4d:71:d4:d0:7d:
55:d9:5f:f2:95:0d:ed:57:7b:d2:50:78:1b:7d:b0:
e5:83:72:1a:be:4e:a5:0e:f5:ca:f3:e8:4f:97:ea:
51:07:1b:2f:73:75:f1:c2:3c:f3:77:e5:9a:63:5b:
e3:c2:7d:ce:a2:6e:14:1d:19:83:d0:73:c3:07:e0:
dc:4c:8d:e6:05:f7:d8:8c:72:ad:c6:69:5b:29:f9:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:B7:66:51:8B:64:C4:FD:20:05:25:0F:DC:E7:3E:32:49:70:7E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1871::/48
Signature Algorithm: sha256WithRSAEncryption
88:ea:0f:12:ba:8d:6c:be:d3:14:0a:7d:87:95:ce:26:15:98:
ba:f7:6a:3b:17:0c:39:bf:52:a0:e2:62:ac:38:8a:e9:e4:e3:
fe:e4:45:8f:92:22:81:1e:60:9f:c7:9e:0f:32:e3:05:23:b8:
6b:0d:28:83:a3:8b:98:99:63:cd:fc:42:18:b3:88:92:b4:94:
be:29:c4:42:72:23:27:3c:03:a1:2d:1a:1a:71:66:96:10:a4:
74:14:63:f4:cd:12:3f:9a:f4:77:d5:8b:07:a8:eb:e1:0d:c8:
b0:15:e7:c3:c4:65:5b:28:32:55:a0:cc:f1:ac:98:40:95:67:
23:99:4a:44:bf:2b:0b:5f:91:75:fc:04:bc:a9:81:2f:22:4a:
f1:54:e6:3c:2d:65:9d:04:b3:f2:14:f2:07:2b:e5:76:f3:b1:
36:61:60:57:96:b5:cf:af:d5:2b:58:05:c9:ee:8b:f0:50:88:
2c:22:20:42:b0:4d:fd:0d:aa:f6:73:ff:c4:02:ae:99:a1:8f:
e3:ec:cd:7b:3a:67:50:86:22:7b:90:67:f7:96:3b:f6:25:e4:
f1:76:f8:7f:e5:a6:0a:22:60:ab:cb:e0:e5:0f:20:6e:f7:fa:
7a:79:d7:87:6e:b4:7e:3d:67:19:55:62:37:0e:6f:f5:31:36:
c5:be:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:28 2025 by rpki-client