Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203867.roa
File: AS203867.roa (raw, json)
Hash identifier: GE9VLNMWRhYEeanGVIzddJwJMqwjyQehiV30vTTKCLE=
Subject key identifier: 20:69:23:69:5E:01:91:15:5C:0E:40:30:F1:EE:94:0F:1E:32:60:0E
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 01C84C7D601812B4632A37FFF8A33ED7EE2563B3
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203867.roa
Signing time: Sun 01 Jan 2023 23:59:14 +0000
ROA not before: Sun 01 Jan 2023 23:54:14 +0000
ROA not after: Sun 31 Dec 2023 23:59:14 +0000
asID: 203867
IP address blocks: 2a06:a005:dc0::/44 maxlen: 48
2a06:a005:e50::/44 maxlen: 48
2a06:a005:e70::/44 maxlen: 48
2a06:a005:1010::/44 maxlen: 48
2a06:a005:12a0::/44 maxlen: 48
2a06:a005:1710::/44 maxlen: 48
2a06:a005:18f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c8:4c:7d:60:18:12:b4:63:2a:37:ff:f8:a3:3e:d7:ee:25:63:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:14 2023 GMT
Not After : Dec 31 23:59:14 2023 GMT
Subject: CN=206923695E0191155C0E4030F1EE940F1E32600E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:8c:3e:d3:c6:10:fc:7b:4e:04:18:00:55:
7d:77:a1:5d:55:04:8d:96:1d:75:14:f6:10:f2:27:
e2:d4:30:4e:7d:cb:8d:9f:5d:52:5e:96:d6:9e:12:
c4:35:79:2f:65:c0:a7:82:02:7b:41:4b:01:13:d4:
5c:cc:1c:68:b6:1e:2e:64:a7:73:8b:21:dc:07:a4:
f3:d3:cb:df:3a:ec:c2:ee:f3:aa:a7:02:d0:03:7f:
3c:ca:f2:68:da:db:98:94:99:1f:a4:5f:ea:8f:65:
e6:b9:f9:aa:37:d8:ba:6f:7a:c5:37:45:3b:26:6b:
71:15:3f:df:c0:46:5b:07:b7:45:41:eb:cb:1d:b9:
92:f9:df:6a:00:1f:36:d0:24:4b:0f:bb:c1:ba:4e:
b7:57:db:74:56:ce:a2:1f:92:2f:34:31:77:2b:2f:
f5:c7:14:51:6f:7d:12:70:31:02:7a:71:ac:99:0e:
a1:6c:df:46:98:bd:fb:a9:ec:34:8a:aa:38:ae:31:
97:d9:3d:31:50:bc:92:26:e6:02:6d:38:b5:8b:f0:
7e:ff:da:7d:63:c6:ec:61:f8:8f:9c:4b:29:e1:42:
09:d3:6f:cd:f9:65:e0:fc:25:48:86:d2:35:4d:81:
36:89:71:cd:fc:56:9d:3b:a3:b0:db:7d:38:bf:ab:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:23:69:5E:01:91:15:5C:0E:40:30:F1:EE:94:0F:1E:32:60:0E
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203867.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:dc0::/44
2a06:a005:e50::/44
2a06:a005:e70::/44
2a06:a005:1010::/44
2a06:a005:12a0::/44
2a06:a005:1710::/44
2a06:a005:18f0::/44
Signature Algorithm: sha256WithRSAEncryption
5b:a1:fe:ec:1f:84:58:24:41:ce:4d:74:43:16:59:dc:56:02:
6d:c4:20:18:93:cb:c5:29:a4:73:9e:2d:0e:27:29:78:d0:11:
ce:ab:e5:e2:b2:ce:fb:6a:95:bf:9c:01:61:9a:ba:ae:58:07:
11:fb:d0:dd:7d:8b:bd:82:bd:98:2b:d6:03:2f:89:ce:1a:21:
a0:08:ec:95:e0:1d:f3:f3:00:c6:cb:44:37:41:bb:d2:50:1a:
bd:5d:5e:0b:81:1c:ca:18:e8:78:b4:4b:60:e7:ad:3f:f0:7f:
70:4d:0d:a1:0a:f6:27:31:fb:45:73:a0:9e:a5:a7:21:09:15:
c0:b9:61:f4:e7:02:3b:a4:a4:f0:03:99:84:f0:8d:76:4d:07:
b3:30:3d:42:ff:79:04:8b:14:31:0c:d2:7e:fb:9e:30:58:e5:
8b:55:82:da:7f:30:ac:43:4e:f4:32:5d:1e:00:45:1f:15:49:
43:c2:53:2b:30:0e:f6:ec:29:a3:54:28:cb:a8:da:67:ff:4a:
34:d4:5b:e9:d0:d3:d3:f6:4e:20:65:09:b7:87:aa:bd:52:d7:
a5:d4:d7:02:9f:5b:b5:52:63:91:3b:22:48:5c:f5:6f:22:87:
02:00:10:1a:b4:ce:04:ce:06:fd:0e:1e:92:dc:4f:36:cb:32:
4e:3f:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org