Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203529.roa
File: AS203529.roa (raw, json)
Hash identifier: dVvdLKXUq0mhqi1Lp8Z8bU6nNBhyrjBLvW3tsEzPsho=
Subject key identifier: E2:26:21:43:42:E0:B4:A8:20:C0:A9:C2:D8:33:9F:84:CF:04:AB:CC
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 584B19025C4345DE7B1C93F5C805E336CC1DD0A1
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203529.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 203529
IP address blocks: 2a06:a005:45d::/48 maxlen: 48
2a06:a005:15e0::/44 maxlen: 48
2a06:a005:15f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4b:19:02:5c:43:45:de:7b:1c:93:f5:c8:05:e3:36:cc:1d:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=E226214342E0B4A820C0A9C2D8339F84CF04ABCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:e5:3f:bd:de:6f:fe:fc:5c:13:40:3a:68:
b3:59:de:9f:c8:85:91:fe:d4:4b:91:95:b5:6f:76:
04:8b:be:65:fc:22:a5:20:f3:0f:07:b2:74:3c:29:
79:b5:be:c0:68:1b:9c:bf:9e:e2:e8:ea:27:b7:37:
f4:7e:f3:28:90:99:b7:e0:55:04:3b:e3:94:37:42:
7c:db:c0:d5:d7:85:09:7b:e6:41:20:3d:81:5d:61:
a2:73:fc:f5:ee:ca:24:b7:a7:e2:57:3c:f5:c7:aa:
e6:40:dd:93:ae:f3:55:53:fb:8a:43:06:3c:f1:36:
3a:b2:c0:48:af:2d:5f:0d:1f:44:ce:98:65:c8:e0:
ec:e8:f0:65:fc:3e:fa:79:b4:b3:27:85:6f:c7:c9:
9c:87:71:30:df:f4:78:af:22:3d:a7:2f:1a:6d:f7:
c3:85:b9:9a:a0:18:f4:39:2e:96:3f:30:39:c1:d1:
59:06:57:c5:83:b2:cb:5c:39:cb:51:b2:db:2f:04:
1d:ef:36:b8:9c:99:de:65:4d:d9:63:63:0b:30:ff:
11:42:bb:fd:b3:5e:c7:95:52:94:22:2b:1b:f0:1e:
35:76:e7:30:21:ac:e5:5f:f1:0c:dc:b8:ef:c0:cc:
f7:c5:57:0d:10:a8:8c:0d:c7:61:bf:0e:bc:dc:14:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:21:43:42:E0:B4:A8:20:C0:A9:C2:D8:33:9F:84:CF:04:AB:CC
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45d::/48
2a06:a005:15e0::/43
Signature Algorithm: sha256WithRSAEncryption
59:ef:63:e0:77:4b:5a:b6:4d:5a:62:97:5f:7f:99:46:f4:c8:
d3:29:73:b6:17:58:f1:b7:fe:42:4a:b3:29:ca:f3:ab:4c:86:
8b:eb:8c:6f:ff:05:01:6a:e4:43:5c:12:c5:d1:c9:0a:c3:2c:
71:ac:ef:b8:b5:4f:db:6f:a6:84:6e:e7:d2:6f:fc:8c:91:f7:
ed:f0:33:bf:71:6c:20:ae:2b:53:ac:54:c4:57:49:25:e4:69:
ae:e5:58:cd:2e:66:e3:e8:91:91:47:22:96:47:2f:ec:8f:16:
1e:e9:6b:0b:7f:94:cc:3b:0c:e7:58:52:db:d5:0f:d5:90:d0:
77:81:df:d6:c2:bd:1e:af:82:c7:37:8f:45:6b:6e:7c:80:dc:
40:41:cd:47:18:a7:01:18:f4:17:a5:f9:16:20:75:5a:1c:2a:
7e:1f:39:20:41:4e:4f:8b:97:d2:34:96:d9:f1:98:7f:4e:1c:
f0:e5:2d:a3:30:2d:e1:f1:58:ea:a4:1f:ba:d9:f9:3e:d7:18:
d6:b3:39:3f:5a:4f:b6:d0:59:a5:de:69:25:dd:28:46:1f:39:
04:68:84:ef:de:25:2e:f6:d8:28:44:12:8d:16:d3:83:1f:31:
d6:57:25:e0:2d:35:2d:20:7c:ae:90:6a:ce:8b:70:a7:2e:57:
09:16:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org