Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203655.roa
File: AS203655.roa (raw, json)
Hash identifier: LTwY8huaFeFNQr30ahlQoB8ZhQfoPySQAoUVDNJYw4k=
Subject key identifier: B3:E4:96:92:E5:3D:23:F8:23:7E:02:B1:B5:47:2E:E6:46:67:20:0F
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1B8D7AA6C9C4472DC90417F6430757A6D5A8EB5F
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203655.roa
Signing time: Sun 01 Jan 2023 23:59:17 +0000
ROA not before: Sun 01 Jan 2023 23:54:17 +0000
ROA not after: Sun 31 Dec 2023 23:59:17 +0000
asID: 203655
IP address blocks: 2a06:a005:13e0::/44 maxlen: 48
2a06:a005:13f0::/44 maxlen: 48
2a06:a005:1400::/44 maxlen: 48
2a06:a005:1470::/44 maxlen: 48
2a06:a005:1480::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8d:7a:a6:c9:c4:47:2d:c9:04:17:f6:43:07:57:a6:d5:a8:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:17 2023 GMT
Not After : Dec 31 23:59:17 2023 GMT
Subject: CN=B3E49692E53D23F8237E02B1B5472EE64667200F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:10:36:b8:d2:c9:a5:fb:2b:51:7e:af:bd:
72:7d:40:a7:78:45:db:7c:68:2f:44:dd:a4:27:04:
73:46:22:0c:eb:ec:58:cf:e0:6b:6c:24:59:5d:78:
5e:31:d5:59:aa:3e:6c:aa:2b:ba:f2:62:00:e2:ec:
74:a5:d8:c4:db:ca:3e:3a:13:d5:c8:4d:e0:d8:03:
50:4e:f5:b0:4f:2d:5e:ff:98:f9:7a:93:14:65:85:
5c:91:3f:fa:f0:50:31:cb:c3:7a:af:e6:b8:8e:53:
01:3b:80:60:c1:e8:f2:52:75:12:ac:d0:d5:b0:2b:
50:e3:cb:aa:57:1d:9b:ad:d6:67:58:b4:4a:b7:a9:
d4:3a:03:61:2c:9f:d4:66:b2:a4:5f:1b:94:8e:bd:
86:d4:b3:23:67:e3:71:0f:9a:25:db:c1:53:c1:65:
e7:eb:fb:13:f4:fc:d8:09:b0:97:f5:1e:93:a4:dd:
4c:ef:6e:53:f6:9f:3b:9b:64:13:bf:df:ea:28:04:
7a:46:b8:39:08:f3:24:3b:a5:3d:90:45:87:29:79:
29:95:fb:63:42:64:a1:47:a6:ab:ef:7a:44:fe:38:
29:fc:98:e6:b4:31:54:c2:1b:03:a2:fb:02:68:af:
2d:c4:1c:ba:48:94:4b:6c:40:3c:64:49:cc:4f:98:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:96:92:E5:3D:23:F8:23:7E:02:B1:B5:47:2E:E6:46:67:20:0F
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:13e0::-2a06:a005:140f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1470::-2a06:a005:148f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:86:8c:37:84:98:35:1b:9c:8d:1c:03:88:3d:99:1e:54:3b:
4e:d3:97:94:6c:0d:5f:c7:bc:67:01:8f:1e:94:7d:00:22:fb:
2f:44:81:00:4a:87:b3:61:af:63:73:d4:a9:8d:3f:85:c6:5d:
02:c7:02:94:57:f5:3e:ab:1f:88:30:79:e5:f5:9c:d0:e3:3c:
c9:b5:4b:4a:f7:4d:05:f7:19:73:bb:4f:e5:40:ae:d4:94:10:
83:26:fa:12:0f:09:4d:17:02:22:4b:83:6c:e2:f9:79:ec:f5:
55:3c:42:85:65:55:8f:21:af:10:87:88:9e:84:f7:f2:c3:61:
6e:c8:0d:17:0a:d3:ef:b7:86:39:d4:84:c4:94:b8:7e:8e:02:
92:11:9a:5b:fa:8a:03:38:b2:84:48:63:46:78:9a:7e:5f:e6:
45:16:9f:bc:33:62:71:0a:2b:6d:28:da:d3:a3:00:de:3c:13:
1c:2b:08:a9:c8:ee:5c:f7:e5:a5:8d:a7:71:1e:b5:5d:20:86:
6a:a1:b0:3d:9a:b6:0e:53:96:5e:ab:b2:ed:f2:61:8a:90:f1:
e5:df:98:0f:13:9b:51:5f:58:4e:30:89:c7:94:d2:94:82:9d:
b5:c8:6e:43:62:83:62:6a:88:21:0c:c1:f8:a5:04:63:fc:e6:
67:34:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:56 2025 by rpki-client