Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203577.roa
File: AS203577.roa (raw, json)
Hash identifier: 5MEG0q2a0hHRa/l/SlgQhjpNNGrR63cpUBSso0jOziQ=
Subject key identifier: 29:7C:11:1A:C5:55:4F:1B:0A:20:34:F7:78:F6:E0:E4:98:46:9E:10
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 54FC65D977745B6AABED3FFE439CFE0445DDD62B
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203577.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203577
IP address blocks: 2a06:a005:2020::/44 maxlen: 48
2a06:a005:2030::/44 maxlen: 48
2a06:a005:22c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fc:65:d9:77:74:5b:6a:ab:ed:3f:fe:43:9c:fe:04:45:dd:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=297C111AC5554F1B0A2034F778F6E0E498469E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:70:09:1e:f5:4f:4d:7d:c7:c4:b2:d1:61:
a8:a9:70:7f:8d:93:11:ec:cc:3d:ed:c0:c6:82:ff:
77:50:a0:01:08:b5:5b:bc:36:1a:10:2d:bd:a1:44:
a7:11:2b:c3:f8:d9:2e:1b:33:1f:d4:e8:04:27:73:
df:7e:be:81:9a:cc:e2:38:31:9c:27:6b:0f:19:62:
1c:68:ef:94:0b:e9:b1:a2:6d:05:78:c7:aa:60:29:
48:09:83:79:4f:6b:2e:35:a1:36:63:d2:4d:3e:78:
61:49:59:79:b9:9e:77:ff:9a:f3:d3:71:a0:b5:ba:
a0:5d:cb:cf:97:66:ae:16:1a:16:41:f4:02:3f:7c:
db:16:9e:ab:98:ed:24:8d:fd:1a:1a:31:87:11:9e:
f6:50:6d:28:9c:78:fb:77:d9:96:92:89:58:6f:a9:
77:e1:00:1a:48:4f:db:f6:c6:22:a2:50:19:04:a4:
5a:aa:47:ba:8c:4f:89:ff:4f:ce:a8:41:6e:8f:11:
4f:92:5f:77:c4:50:cf:50:e0:c3:69:12:34:12:42:
de:97:23:64:43:c5:23:a6:ff:09:bb:dc:fb:f8:68:
f8:02:31:d4:d1:bf:35:fb:a3:51:5c:69:a0:9d:57:
ff:c1:40:f1:90:4a:09:eb:c6:38:e7:3c:f2:14:b6:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:11:1A:C5:55:4F:1B:0A:20:34:F7:78:F6:E0:E4:98:46:9E:10
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2020::/43
2a06:a005:22c0::/44
Signature Algorithm: sha256WithRSAEncryption
64:62:fe:17:ab:aa:7d:3b:d8:c2:0a:2e:6c:4c:39:57:cc:aa:
5e:14:56:59:c7:bd:aa:d6:a8:80:9f:e1:09:16:58:6c:ba:56:
ba:b5:d4:8d:59:c5:18:65:5f:ac:0d:aa:27:07:f6:49:1e:00:
8c:9a:23:9c:e4:6f:ad:fa:6b:53:f9:7f:db:83:84:3d:0b:be:
7e:bd:70:ef:b4:55:fb:77:cd:c3:34:9c:67:8b:e1:a5:00:8a:
2a:09:a5:72:c9:01:ea:f6:a6:8b:20:ea:cf:03:d2:41:c3:3e:
e1:4a:0a:d8:24:8a:c2:e4:42:40:c0:c9:18:ef:8a:cc:25:2e:
bb:85:47:39:f0:5a:ca:4d:4b:a7:38:46:b2:d5:9e:b5:22:06:
02:86:a3:34:f4:01:b6:65:3a:e1:35:aa:89:26:46:02:a8:2f:
57:c9:e0:f1:2f:16:86:05:e9:0e:99:89:bb:bd:86:c3:cc:6c:
6b:a7:b0:05:03:28:1d:4e:de:a3:54:9f:74:94:41:d9:70:6e:
8a:79:cb:5f:5c:7a:1e:0c:7a:70:7e:41:cb:ea:e3:81:7a:a2:
1e:87:0e:45:05:0a:a0:dc:36:3d:49:73:11:58:51:71:c2:15:
42:09:d6:b8:0b:8e:c1:0f:01:9b:08:22:55:92:61:83:0c:92:
e2:84:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org