Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203804.roa
File: AS203804.roa (raw, json)
Hash identifier: fgdQy8cATdA/WRWeg1iBMmznLgP9c8fTTHDjv1FFZjY=
Subject key identifier: CF:B3:DB:9C:60:CD:2E:10:DD:51:65:7A:57:A7:40:0A:1E:EB:4A:27
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 157905B0C621EAD49DFC123D2EC376E74E9C7BB8
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203804.roa
Signing time: Sun 01 Jan 2023 23:59:13 +0000
ROA not before: Sun 01 Jan 2023 23:54:13 +0000
ROA not after: Sun 31 Dec 2023 23:59:13 +0000
asID: 203804
IP address blocks: 2a06:a005:1340::/44 maxlen: 48
2a06:a005:1350::/44 maxlen: 48
2a06:a005:13b0::/44 maxlen: 48
2a06:a005:13c0::/44 maxlen: 48
2a06:a005:13d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:79:05:b0:c6:21:ea:d4:9d:fc:12:3d:2e:c3:76:e7:4e:9c:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:13 2023 GMT
Not After : Dec 31 23:59:13 2023 GMT
Subject: CN=CFB3DB9C60CD2E10DD51657A57A7400A1EEB4A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:2b:10:63:be:be:7a:0a:83:ac:11:c0:95:
cf:54:8e:4f:ae:62:29:87:ad:ff:f5:46:3e:09:f9:
27:c8:5f:80:1d:d5:87:71:bc:58:7b:e5:ec:8b:5b:
cf:dc:05:21:e1:ff:64:e9:ff:e5:d0:5f:32:35:25:
68:24:7a:06:d4:ca:99:7f:85:2b:eb:31:c4:44:ed:
69:07:c6:5f:cf:cc:aa:6e:09:25:40:e9:c6:6b:25:
9d:61:e3:e9:fd:7c:fd:eb:d4:15:67:9c:96:01:9a:
91:f2:f5:57:de:92:47:2d:86:be:56:26:9b:0d:4c:
37:1c:90:fe:c5:0c:66:e5:e4:c8:23:12:21:dc:17:
3e:92:fc:23:d8:04:6c:f4:ba:bd:c5:80:28:84:a7:
31:81:7b:4a:ac:87:ed:14:4a:c4:36:06:96:db:06:
85:fe:8c:4a:e8:58:40:00:cb:2d:f0:87:34:82:cb:
49:8f:f3:82:86:99:e5:35:ef:92:69:5f:c8:0f:7c:
3b:46:a8:1a:8c:99:d5:ba:55:86:9a:ee:42:83:03:
8c:4e:0d:64:09:ce:ca:84:a2:bf:59:ff:05:30:c9:
4c:94:36:20:83:34:0c:00:5e:56:fa:8a:cd:a0:a2:
80:31:b8:0d:4f:55:6f:c9:67:e9:17:96:b4:64:c6:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:DB:9C:60:CD:2E:10:DD:51:65:7A:57:A7:40:0A:1E:EB:4A:27
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1340::/43
2a06:a005:13b0::-2a06:a005:13df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:d9:d3:44:34:c8:6e:27:1b:95:05:65:19:af:77:44:b8:18:
7d:f5:bc:07:0c:ed:13:e1:a1:e4:65:da:86:f3:b1:d7:cb:84:
4b:f0:ff:09:6c:9e:db:c3:0a:a8:ab:23:54:55:ab:07:70:9e:
a5:e4:b7:45:0c:5b:fa:fe:89:7d:ff:65:44:bf:09:03:e8:93:
f0:aa:a9:27:25:8f:f1:90:19:66:77:1c:5f:66:0b:d1:be:1c:
72:35:f8:98:9f:b5:d7:01:81:49:69:ec:ef:79:a1:91:37:46:
f0:c7:8e:3e:a9:e9:b0:ef:a3:1e:b6:68:ad:e1:1d:b6:4f:ac:
17:84:8a:fa:7b:f3:3e:c3:2c:a4:67:de:00:ac:d2:f2:6c:b6:
dd:16:e3:b2:de:67:c8:b9:76:c4:51:32:f9:80:01:21:aa:83:
1e:89:9b:7f:c8:f4:e3:1c:a6:1c:58:bd:e7:97:ab:c0:49:92:
57:3a:1e:c5:f9:93:4a:eb:d7:e6:50:81:23:06:c5:9c:1d:27:
5c:8a:92:51:62:61:1c:4e:4f:d9:a9:13:bb:78:cf:b0:f0:4e:
0b:a8:4a:aa:18:d0:51:4f:f0:46:7e:24:57:bd:7a:45:b6:4f:
49:12:fe:b1:92:7f:7c:70:34:f8:5d:cb:21:1f:a3:0c:72:4a:
ca:a4:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org