Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203472.roa
File: AS203472.roa (raw, json)
Hash identifier: qroOEyr/7as3Rl+0aNVDCcsYSm229arSNPuY7VLSupI=
Subject key identifier: D7:B1:DB:7A:DA:6D:A4:DE:00:BF:B1:5C:3B:3D:8A:FE:B0:29:55:A2
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 0F0C947B0300B69E8E314AAC281604228BABCFC0
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203472.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 203472
IP address blocks: 2a06:a005:600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0c:94:7b:03:00:b6:9e:8e:31:4a:ac:28:16:04:22:8b:ab:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=D7B1DB7ADA6DA4DE00BFB15C3B3D8AFEB02955A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:6a:45:59:ac:9f:c3:e6:e8:9f:1e:5c:7d:
4d:9a:4e:12:9f:da:51:f8:69:8c:49:44:83:2d:28:
50:57:bb:dc:e4:a3:69:34:23:2f:50:c7:88:5f:b6:
89:59:2f:6c:6c:b6:a8:a2:6b:dd:1c:0d:f4:15:c0:
e1:63:73:83:ca:92:e3:cb:02:e5:3c:ff:82:ef:e6:
24:df:be:0a:1c:ad:41:1a:3e:35:b2:aa:f9:e2:87:
f9:a5:bc:4c:31:6f:31:a0:78:3d:e2:70:d7:25:0d:
cf:4e:70:5b:ae:ce:e3:6f:35:c7:ad:aa:a3:87:c7:
00:b7:e6:80:69:36:7f:68:78:17:6d:82:19:17:a2:
51:47:43:93:f1:80:04:b1:60:3c:ac:ea:aa:71:e0:
67:6b:44:da:d6:a1:4f:71:d2:07:3f:0e:5e:65:9d:
a7:6c:3b:3e:9f:47:11:42:51:dd:39:b0:53:c2:f3:
e5:54:66:73:42:d4:d0:52:0b:c9:25:70:da:3f:3a:
74:d6:cc:6d:9f:55:ff:2c:2d:a2:8d:f1:fe:36:da:
11:d7:0f:99:18:e9:3e:2a:98:d7:c3:bb:36:24:df:
94:ad:70:bb:61:06:d7:27:20:7d:47:a9:58:dc:6b:
73:29:f8:c9:ee:dc:da:0c:39:ce:f8:f3:d8:ae:88:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:DB:7A:DA:6D:A4:DE:00:BF:B1:5C:3B:3D:8A:FE:B0:29:55:A2
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:600::/44
Signature Algorithm: sha256WithRSAEncryption
15:44:b4:6e:56:d6:4e:77:d6:87:e4:73:1d:fb:8b:f8:ac:c0:
5c:04:df:7c:19:aa:7c:81:08:2f:85:30:9e:9f:e9:fa:01:cc:
6e:1a:65:27:e5:23:44:6b:03:00:b6:2e:28:0c:84:2d:fb:6c:
8d:2a:37:ba:3d:3b:78:96:df:be:38:91:f4:ef:91:02:73:e3:
4e:ac:04:e3:e7:aa:f5:82:fa:b4:ed:ea:99:58:35:8f:32:29:
6f:f4:08:63:82:60:07:b2:06:e6:de:8b:b2:fa:17:73:2b:18:
e6:06:0f:45:bf:35:9c:3a:a1:02:ac:04:f7:2d:5f:ef:41:3b:
8d:e0:1a:a1:dc:1f:de:53:2d:a4:da:1e:7b:2b:b4:00:93:3c:
ef:db:29:e9:22:f1:ce:71:59:cc:2f:60:b4:1c:ca:06:91:a8:
bf:30:fe:dc:7a:e7:6a:48:4c:a0:57:9f:99:e7:f1:40:5d:e7:
ce:68:19:45:69:c1:fc:c2:58:b5:68:91:0c:35:f6:1c:59:ec:
5c:26:40:6e:dc:df:c8:9b:95:05:0b:e1:52:c8:80:74:8b:7a:
15:34:d9:5d:8c:52:9b:31:d6:f1:b6:58:be:bb:69:09:27:ea:
54:c8:5e:e8:e6:ac:e4:bf:9d:7c:cb:a4:e7:61:bd:fd:c5:46:
47:fe:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org