Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203852.roa
File: AS203852.roa (raw, json)
Hash identifier: DBDkT7i4zydEetAJeqXkvGNqLuucAwPybk8VY5i8E1w=
Subject key identifier: 56:03:17:70:50:F3:77:F7:38:B0:42:E0:30:D5:14:F3:3C:A3:D8:35
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 2AD448233F22886D2653576C33FFEEFA4F46E800
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203852.roa
Signing time: Mon 02 Jan 2023 01:08:39 +0000
ROA not before: Mon 02 Jan 2023 01:03:39 +0000
ROA not after: Mon 01 Jan 2024 01:08:39 +0000
asID: 203852
IP address blocks: 2a06:a005:1910::/44 maxlen: 48
2a06:a005:21a0::/44 maxlen: 48
2a06:a005:25f0::/44 maxlen: 48
2a06:a005:29c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d4:48:23:3f:22:88:6d:26:53:57:6c:33:ff:ee:fa:4f:46:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 2 01:03:39 2023 GMT
Not After : Jan 1 01:08:39 2024 GMT
Subject: CN=5603177050F377F738B042E030D514F33CA3D835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:2a:9d:f5:e0:c4:ea:26:db:08:af:7c:cc:
82:73:0d:a2:9a:62:e8:26:ae:8d:68:9c:ab:c0:c2:
fd:61:d7:af:33:4f:26:86:a4:22:d8:f4:64:f2:4e:
11:54:39:bd:81:e8:f5:13:f3:db:9f:92:6f:49:e3:
58:24:7f:ec:b0:7e:fa:f7:17:21:60:12:a4:33:dc:
7a:e4:19:1e:2f:be:05:4c:77:ad:ef:54:12:f5:12:
0c:f7:5f:dc:7b:d0:28:3b:32:76:22:cf:29:0a:d1:
e4:20:ea:f7:57:52:28:6d:d7:8e:b3:7e:3a:2d:47:
d8:1e:58:25:8c:f7:d7:71:20:6c:10:e9:05:d8:e8:
80:a1:8f:7e:28:b7:1b:2e:e1:05:37:ea:73:f8:02:
2e:b9:2f:33:38:c5:8f:1c:7e:16:bf:39:34:d5:dc:
b4:be:e9:1a:da:62:36:90:88:a8:99:d8:6d:a8:25:
a1:33:60:28:a8:52:c0:f4:e8:9b:0e:a0:c4:fc:26:
6e:53:a3:2c:2d:0b:82:69:17:28:2b:6c:23:28:e5:
6a:44:86:24:1b:a9:a9:2b:92:8b:06:d8:82:6a:f7:
24:ac:c3:97:02:28:29:80:98:90:f3:54:0d:6a:39:
68:81:66:41:28:9a:88:f5:e2:76:29:81:7d:2f:72:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:17:70:50:F3:77:F7:38:B0:42:E0:30:D5:14:F3:3C:A3:D8:35
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1910::/44
2a06:a005:21a0::/44
2a06:a005:25f0::/44
2a06:a005:29c0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:7f:0d:e2:f3:82:2c:01:0b:e1:06:ed:46:ce:dc:2d:b1:cb:
89:c0:77:4c:59:fb:33:b0:f2:65:e1:11:0e:4a:f4:35:6a:a0:
b0:39:f5:75:01:fb:ed:4f:38:60:33:43:e2:52:08:41:ef:69:
8c:09:64:c8:ed:79:fa:7f:99:1f:47:47:3f:df:a9:2d:65:47:
82:af:6d:9f:0b:ef:a0:cf:a0:ea:ed:74:46:99:63:5e:f7:53:
7e:8c:db:87:73:81:78:5d:22:e9:32:c8:83:34:c8:c8:6c:27:
df:38:80:b6:c6:17:79:34:21:c1:54:78:e6:7a:27:d2:68:5c:
f8:d7:4d:e5:02:b6:11:5f:a9:f2:1b:83:cc:f3:ec:41:ce:b6:
3d:10:32:67:51:77:0b:08:70:1e:09:07:aa:69:9f:80:5c:c3:
d0:d8:72:ee:e3:52:e8:7e:eb:ff:80:c3:75:be:91:d8:2f:96:
06:92:4e:b1:e7:48:08:5d:68:b1:29:cd:a3:75:9c:ee:24:73:
5a:cb:50:54:e5:5c:9e:b4:93:83:7f:87:d0:3d:49:b9:fe:b2:
6d:5e:95:c7:c3:8f:28:d6:eb:0d:86:77:13:6e:d4:88:b2:d8:
06:cd:cd:76:c1:f1:92:90:bf:26:9e:a6:19:ab:00:bf:ca:4a:
38:01:ed:2e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUKtRIIz8iiG0mU1dsM//u+k9G6AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDIwMTAzMzlaFw0yNDAxMDEwMTA4MzlaMDMxMTAvBgNV
BAMTKDU2MDMxNzcwNTBGMzc3RjczOEIwNDJFMDMwRDUxNEYzM0NBM0Q4MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHyqd9eDE6ibbCK98zIJzDaKa
Yugmro1onKvAwv1h168zTyaGpCLY9GTyThFUOb2B6PUT89ufkm9J41gkf+ywfvr3
FyFgEqQz3HrkGR4vvgVMd63vVBL1Egz3X9x70Cg7MnYizykK0eQg6vdXUiht146z
fjotR9geWCWM99dxIGwQ6QXY6IChj34otxsu4QU36nP4Ai65LzM4xY8cfha/OTTV
3LS+6RraYjaQiKiZ2G2oJaEzYCioUsD06JsOoMT8Jm5ToywtC4JpFygrbCMo5WpE
hiQbqakrkosG2IJq9ySsw5cCKCmAmJDzVA1qOWiBZkEomoj14nYpgX0vcrjfAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUVgMXcFDzd/c4sELgMNUU8zyj2DUwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAzODUyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgag
BRkQAwcEKgagBSGgAwcEKgagBSXwAwcEKgagBSnAMA0GCSqGSIb3DQEBCwUAA4IB
AQAbfw3i84IsAQvhBu1GztwtscuJwHdMWfszsPJl4REOSvQ1aqCwOfV1AfvtTzhg
M0PiUghB72mMCWTI7Xn6f5kfR0c/36ktZUeCr22fC++gz6Dq7XRGmWNe91N+jNuH
c4F4XSLpMsiDNMjIbCffOIC2xhd5NCHBVHjmeifSaFz4103lArYRX6nyG4PM8+xB
zrY9EDJnUXcLCHAeCQeqaZ+AXMPQ2HLu41Lofuv/gMN1vpHYL5YGkk6x50gIXWix
Kc2jdZzuJHNay1BU5VyetJODf4fQPUm5/rJtXpXHw48o1usNhncTbtSIstgGzc12
wfGSkL8mnqYZqwC/yko4Ae0u
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org