Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203857.roa
File: AS203857.roa (raw, json)
Hash identifier: kl/DkmRjU0cDKupKZu8WKeT43fNCoNZZmr7E4d3pHLs=
Subject key identifier: 24:E3:03:DC:FA:32:7D:22:3C:F6:92:C8:1E:EB:A2:3C:66:1C:1D:45
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 6E406992FF8316165C27D7634A6E9A84A919F9C9
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203857.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203857
IP address blocks: 2a06:a005:10::/48 maxlen: 48
2a06:a005:11::/48 maxlen: 48
2a06:a005:12::/48 maxlen: 48
2a06:a005:2d4::/48 maxlen: 48
2a06:a005:2df::/48 maxlen: 48
2a06:a005:432::/48 maxlen: 48
2a06:a005:456::/48 maxlen: 48
2a06:a005:481::/48 maxlen: 48
2a06:a005:4d2::/48 maxlen: 48
2a06:a005:4d3::/48 maxlen: 48
2a06:a005:4d4::/48 maxlen: 48
2a06:a005:4d5::/48 maxlen: 48
2a06:a005:4d6::/48 maxlen: 48
2a06:a005:4d7::/48 maxlen: 48
2a06:a005:5e3::/48 maxlen: 48
2a06:a005:5e4::/48 maxlen: 48
2a06:a005:5e8::/48 maxlen: 48
2a06:a005:5e9::/48 maxlen: 48
2a06:a005:5ea::/48 maxlen: 48
2a06:a005:5eb::/48 maxlen: 48
2a06:a005:5ec::/48 maxlen: 48
2a06:a005:5ed::/48 maxlen: 48
2a06:a005:5ee::/48 maxlen: 48
2a06:a005:5ef::/48 maxlen: 48
2a06:a005:850::/48 maxlen: 48
2a06:a005:851::/48 maxlen: 48
2a06:a005:856::/48 maxlen: 48
2a06:a005:a01::/48 maxlen: 48
2a06:a005:a02::/48 maxlen: 48
2a06:a005:a08::/48 maxlen: 48
2a06:a005:1270::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:40:69:92:ff:83:16:16:5c:27:d7:63:4a:6e:9a:84:a9:19:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=24E303DCFA327D223CF692C81EEBA23C661C1D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:cd:e5:70:8a:57:14:b4:93:39:95:7e:ca:
e4:d4:89:66:fa:d9:26:67:83:0a:49:e0:16:6a:f1:
12:a9:47:95:e1:23:b0:e5:a4:38:86:dd:bc:64:f4:
b1:00:c3:bb:73:03:1f:48:71:ae:4a:35:98:84:58:
78:0c:ce:8e:2d:78:ce:71:30:02:24:30:71:92:ef:
75:56:51:75:b7:04:be:ab:bf:3e:78:5e:75:bd:29:
f1:8e:9e:2d:0b:4f:04:80:5a:f7:9f:53:86:3c:ce:
29:33:03:16:44:1d:00:e0:73:85:8d:8e:21:30:dd:
67:18:44:43:e7:a4:d8:ff:eb:b5:60:88:8f:50:76:
49:d6:0b:0f:7c:e5:74:78:2e:49:f4:a0:d5:58:c3:
7c:b6:32:ee:25:b6:42:7d:a4:b1:50:c0:85:69:32:
58:19:38:ba:92:10:76:f3:59:9e:73:af:18:bb:78:
46:8e:f7:b9:7d:c7:e9:a8:a2:b7:7b:5b:99:37:62:
d2:0a:96:45:88:7d:04:bf:9d:54:98:61:cf:8e:c0:
66:fd:e5:c0:22:74:5a:26:7e:c7:71:ad:c0:ae:a5:
70:c0:a2:98:dc:da:81:d2:0c:fe:5f:92:66:ed:6a:
80:45:58:a0:f9:a3:14:d9:5b:04:ec:aa:9b:b0:40:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:03:DC:FA:32:7D:22:3C:F6:92:C8:1E:EB:A2:3C:66:1C:1D:45
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
2a06:a005:2d4::/48
2a06:a005:2df::/48
2a06:a005:432::/48
2a06:a005:456::/48
2a06:a005:481::/48
2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e3::-2a06:a005:5e4:ffff:ffff:ffff:ffff:ffff
2a06:a005:5e8::/45
2a06:a005:850::/47
2a06:a005:856::/48
2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
2a06:a005:a08::/48
2a06:a005:1270::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b0:73:bf:59:b4:0f:61:8e:42:de:72:23:a3:3d:aa:ca:b4:
ee:67:ff:b9:60:89:1e:f2:ab:f4:83:fe:62:fc:ca:8a:bb:90:
56:5f:c0:b8:33:09:5b:0e:b6:e1:0f:c0:ce:59:ea:4a:67:2a:
b5:50:90:7d:9a:3e:fd:6b:1c:7f:db:63:49:77:3e:1a:2d:3c:
c4:94:55:93:e3:84:85:1f:8b:c1:f4:a7:91:ed:e2:d9:25:f0:
41:96:77:98:5f:67:e2:59:44:4a:42:ba:f2:f3:8d:e3:c7:de:
d7:a9:f2:8e:bb:6b:db:d7:98:b9:ee:62:00:10:1a:b6:46:11:
77:3d:63:af:89:c5:91:bb:c2:e9:b6:00:0a:18:78:59:86:0f:
54:2c:96:9c:92:b5:97:67:41:c1:7b:2c:61:b5:dd:e8:88:50:
09:d2:d1:89:78:1c:42:f6:31:2a:85:35:b3:d3:f7:12:c8:53:
4d:03:2a:dc:43:c1:73:ef:f6:8a:36:00:8f:b2:94:be:56:8f:
ae:29:77:f9:5a:77:d5:73:59:1a:88:da:9b:78:fd:45:5a:32:
07:82:06:6c:79:86:4c:3d:10:9f:84:e7:f1:ab:61:a9:e2:dc:
fd:7c:68:fa:5a:b0:ed:85:d0:f8:d2:02:cf:19:8c:80:f4:99:
8e:f5:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org