Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203597.roa
File: AS203597.roa (raw, json)
Hash identifier: nQGAjmdOd8Nmzqy1uS6UI0w5CobcY9+q6byxje9/yx4=
Subject key identifier: 38:0B:5D:F8:D9:30:EB:54:2D:74:12:D0:C0:89:E3:D8:E8:C8:55:8D
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 53B878A0BEA88E81AC301851A0E851DBB4CE4779
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203597.roa
Signing time: Sun 01 Jan 2023 23:59:22 +0000
ROA not before: Sun 01 Jan 2023 23:54:22 +0000
ROA not after: Sun 31 Dec 2023 23:59:22 +0000
asID: 203597
IP address blocks: 2a06:a005:1560::/44 maxlen: 48
2a06:a005:1570::/44 maxlen: 48
2a06:a005:1580::/44 maxlen: 48
2a06:a005:1590::/44 maxlen: 48
2a06:a005:15a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b8:78:a0:be:a8:8e:81:ac:30:18:51:a0:e8:51:db:b4:ce:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:22 2023 GMT
Not After : Dec 31 23:59:22 2023 GMT
Subject: CN=380B5DF8D930EB542D7412D0C089E3D8E8C8558D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:88:c3:62:84:ae:08:82:eb:3a:5b:80:7e:
8a:33:e9:9e:0e:07:17:85:3d:c5:1f:41:02:cc:e8:
8b:ad:7e:b6:6b:cc:64:d8:4d:ee:99:12:dc:88:94:
31:64:8e:3d:95:d9:91:68:bb:6f:2c:3b:c4:32:0a:
fa:05:a7:ca:fc:9c:ef:4d:cb:41:80:bc:18:b6:71:
70:ac:92:af:6f:8f:c1:28:f4:02:c6:e5:38:7e:86:
44:79:fc:60:2b:97:51:69:a9:ab:81:89:a0:70:d7:
19:07:f0:b4:0d:6c:09:36:e0:ab:ed:00:c3:d7:ac:
c3:9e:cf:49:4c:89:e4:ee:d3:98:ae:b5:e0:96:d6:
44:5e:39:08:fc:6d:7f:cb:ab:db:f3:b2:77:f2:29:
d6:91:cf:2e:90:4b:ca:c9:e1:95:78:ac:e3:3d:ea:
71:0a:e6:70:52:b0:3d:b8:f6:c5:69:f6:f8:d0:4a:
78:c8:84:31:bf:a0:f4:66:b2:fe:99:81:d9:4a:f8:
6e:7f:3a:6d:66:aa:98:ee:9c:f2:b1:b5:c1:ae:f1:
71:06:9a:00:e1:df:93:c3:c3:7f:69:2d:dc:76:9e:
af:5d:d2:f4:70:0b:66:f5:4c:df:db:3e:06:18:03:
68:5e:4f:73:fa:f5:3d:82:b2:72:4f:b1:67:f2:8a:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:5D:F8:D9:30:EB:54:2D:74:12:D0:C0:89:E3:D8:E8:C8:55:8D
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203597.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1560::-2a06:a005:15af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:f8:b1:b7:87:90:a9:c7:e4:82:6e:bb:6a:01:fa:3f:be:9d:
55:c0:67:ba:6f:d1:a3:47:07:df:9d:c2:75:bd:b8:cd:26:fc:
71:17:69:19:db:07:79:fb:66:64:8e:08:96:69:03:cf:48:54:
98:78:5a:29:67:cd:aa:c9:cf:c6:33:34:ec:39:f5:94:73:9b:
52:ef:a5:2b:30:f9:98:e2:64:ba:88:46:58:de:44:05:9f:e1:
eb:9a:7d:a4:82:3e:99:bc:22:60:09:02:92:d4:60:35:71:e1:
ef:1e:7b:2e:d3:0b:83:18:77:08:62:b0:b6:6b:f4:86:56:e5:
2b:84:52:3c:ba:01:04:fc:71:24:b7:ca:d2:d5:67:71:a7:0e:
2a:80:97:c5:a8:78:f4:ff:49:cc:6e:54:b6:50:79:a4:56:27:
8c:e6:44:62:01:67:0d:3c:c7:7f:62:47:4c:e6:3c:64:ac:34:
8d:34:b9:85:c1:02:13:36:9b:6f:5f:2c:c9:23:db:10:ee:93:
c0:f4:cf:a3:f8:c0:d3:87:b0:e8:32:96:a3:1d:56:3f:83:91:
44:f3:eb:ae:51:5b:4a:86:6d:b0:6c:fb:c7:5d:f4:c4:fc:b7:
6e:c5:c6:c1:47:d7:9a:c1:a8:4e:d7:a2:57:8f:d8:df:2c:40:
aa:77:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org