Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203635.roa
File: AS203635.roa (raw, json)
Hash identifier: mP6trummeC2CVtgTJ1NQBbSIBk1ckfFYCldQ47M1Cwo=
Subject key identifier: 2B:CA:35:C2:04:79:4B:59:94:EE:9E:A6:80:CF:90:C5:69:29:C6:A8
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 7669CA398EE126915FC221D57EFFABCEF23653FC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203635.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 203635
IP address blocks: 2a06:a005:1040::/44 maxlen: 48
2a06:a005:1050::/44 maxlen: 48
2a06:a005:1490::/44 maxlen: 48
2a06:a005:14a0::/44 maxlen: 48
2a06:a005:14b0::/44 maxlen: 48
2a06:a005:14c0::/44 maxlen: 48
2a06:a005:14d0::/44 maxlen: 48
2a06:a005:1600::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:69:ca:39:8e:e1:26:91:5f:c2:21:d5:7e:ff:ab:ce:f2:36:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=2BCA35C204794B5994EE9EA680CF90C56929C6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:bc:a2:b7:be:02:9b:3c:2b:5f:fd:1f:33:
86:4d:c2:fc:d7:78:48:d7:2d:ef:fd:9e:84:b1:b6:
82:5c:48:49:65:52:99:ad:28:08:34:46:66:43:13:
35:16:08:30:16:48:36:1a:c0:8e:d4:8b:67:f4:31:
31:bd:a8:f5:69:f7:eb:7e:f2:ba:a5:1b:0d:bf:79:
bb:32:ed:d3:a2:4c:ef:42:2c:12:50:f1:c4:40:0c:
fb:52:c8:c0:47:3c:4f:f2:d2:d8:55:22:f2:d8:4a:
0e:2d:6a:3b:00:b9:cd:4c:d1:2f:59:a6:58:70:c5:
55:01:e3:c8:21:d2:aa:0f:fa:4f:c3:99:53:c9:e4:
70:d2:f8:87:2a:18:2f:9a:45:95:93:1b:dd:87:c5:
54:78:29:1c:d7:a6:be:0b:e7:8e:9d:7a:d2:d6:a2:
fe:d1:31:93:c0:36:84:88:63:09:11:d2:5a:50:2d:
af:53:c4:48:42:85:06:b8:98:de:a7:d7:2f:08:8b:
fa:b6:e1:c8:f8:96:e0:47:8e:59:bc:ec:70:cb:cc:
99:4d:7e:14:8a:42:bc:ce:26:55:8a:ad:8c:2a:24:
2c:f8:4a:2c:f4:77:92:5d:4f:d8:d4:eb:03:38:e6:
6c:c2:4e:45:95:17:b7:ab:30:bd:5b:ef:57:31:83:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:35:C2:04:79:4B:59:94:EE:9E:A6:80:CF:90:C5:69:29:C6:A8
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
Signature Algorithm: sha256WithRSAEncryption
09:b4:fb:1d:d8:45:9e:74:d4:3c:dd:e6:bc:4c:b7:8d:4d:1e:
99:ae:85:61:7b:5e:37:93:9b:2f:92:cd:a1:a9:e8:98:29:ed:
a3:e2:42:5e:a3:77:47:80:4f:b0:1b:38:04:2d:72:71:2f:43:
00:fd:12:b0:59:88:1d:2c:d9:46:ea:1a:48:b1:81:7c:dd:74:
19:38:61:df:28:e4:f9:01:b1:76:1b:31:75:cd:a0:6a:52:b4:
08:f5:5d:9f:8a:54:f8:61:d1:2c:91:77:e0:60:b4:bf:4b:26:
52:20:62:d1:cc:3f:76:44:00:eb:97:17:71:a0:24:11:2b:74:
f2:e8:fd:a6:c8:d3:a6:ca:ec:62:5e:ff:37:64:9a:c0:27:77:
8a:ae:75:fd:62:2f:54:cf:e5:d6:b8:0d:fb:6d:01:16:ff:72:
91:f2:32:b4:ee:a9:b2:66:17:be:c3:b5:ce:e4:9c:d7:66:ab:
ed:fd:0b:5a:bc:3d:6f:fa:9a:b7:73:1e:03:f9:cb:0e:24:f7:
da:ed:bc:62:70:86:da:be:ec:81:a1:70:9c:2a:a7:c5:f7:54:
1b:06:bc:c0:08:86:5f:0a:78:51:4a:b8:41:84:f8:2d:7a:34:
11:cb:21:19:b7:06:48:74:14:7a:c7:6d:e2:d2:41:19:81:03:
b8:7c:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org