Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203873.roa
File: AS203873.roa (raw, json)
Hash identifier: wT0E4NQOAiv6k6gUwcgIqdMJ2fqOCo+iKnox/yo8ov0=
Subject key identifier: 7B:7E:26:62:41:92:5D:4F:E7:25:55:CD:28:5C:60:FC:E6:E7:C4:24
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 1E43441B7D9B0C58C0ED8DCD2C8D2FDFC9B88D35
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203873.roa
Signing time: Sun 01 Jan 2023 23:59:12 +0000
ROA not before: Sun 01 Jan 2023 23:54:12 +0000
ROA not after: Sun 31 Dec 2023 23:59:12 +0000
asID: 203873
IP address blocks: 2a06:a005:1280::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:43:44:1b:7d:9b:0c:58:c0:ed:8d:cd:2c:8d:2f:df:c9:b8:8d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:12 2023 GMT
Not After : Dec 31 23:59:12 2023 GMT
Subject: CN=7B7E266241925D4FE72555CD285C60FCE6E7C424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:93:6e:12:d8:66:d8:fa:d0:37:86:7f:4b:
4d:6f:9e:4f:75:a3:65:66:ed:04:8a:00:0a:15:c6:
a5:5a:04:19:04:ae:27:4a:e5:57:73:b5:c0:35:55:
0b:ea:9c:b5:7c:47:5c:6c:e9:24:94:fe:2f:e6:10:
69:47:1a:81:6e:1f:83:78:cc:cb:86:ca:d8:23:48:
66:b9:ee:02:0f:95:a2:4c:fa:95:42:4e:89:bc:3c:
17:c0:a2:9f:c5:2b:34:6a:8f:25:0b:ce:76:79:fc:
79:db:22:f6:1a:f4:1c:bd:05:b8:dc:96:43:32:09:
64:e6:32:70:ef:c6:ad:d3:70:42:f6:fd:98:50:9c:
14:3c:37:3e:88:18:32:1a:09:6b:17:9f:69:b5:81:
ba:2e:db:b6:ee:28:62:01:75:33:7b:53:55:75:1b:
4c:76:8b:d9:72:98:d3:8a:0e:d5:e1:61:0b:87:11:
17:e2:44:57:46:12:bf:08:62:5f:df:6f:46:52:1c:
43:6a:85:de:5b:d5:75:5b:c0:17:4e:15:35:bd:4c:
74:e5:c9:88:24:cd:1c:b7:d9:d3:aa:99:8b:c4:4e:
30:89:49:02:5b:06:73:84:1b:32:69:7e:01:94:6b:
d4:cc:83:54:1f:92:db:12:9f:40:da:ec:df:3f:e5:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:26:62:41:92:5D:4F:E7:25:55:CD:28:5C:60:FC:E6:E7:C4:24
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1280::/44
Signature Algorithm: sha256WithRSAEncryption
45:99:e8:da:ba:17:d2:6c:00:6a:7f:cd:f3:df:8c:b2:ba:20:
c7:73:eb:fc:55:3a:67:2a:2b:78:aa:9b:42:6a:4d:5c:8e:07:
a3:bb:99:35:cc:8c:cb:5d:1a:37:7e:7d:b9:9e:43:fa:29:46:
34:1b:c8:43:ff:31:d3:fa:67:3b:87:90:8d:45:41:08:57:71:
fc:19:4a:21:f8:ab:6f:f8:51:e3:8f:a8:a7:49:fe:98:6c:3a:
53:38:88:60:9b:af:df:c5:7a:0c:4e:f3:b5:b7:0b:25:bd:19:
0b:a4:ee:b8:c6:c3:9d:e7:94:7a:68:a1:1c:e9:c3:df:d1:01:
a7:ac:3c:b9:62:db:bc:04:c1:24:3b:99:cf:8a:6b:8e:46:3c:
c1:de:8f:15:88:86:3d:fe:79:41:50:90:6e:44:ab:e2:5a:b9:
0b:4f:90:98:fa:87:8a:5a:a9:75:05:88:fe:70:f8:24:2b:17:
fb:55:da:77:6d:80:17:12:03:5c:77:83:9d:70:7f:c0:1e:f8:
57:a7:2a:e7:6b:45:ef:d7:38:31:1b:f5:7c:dc:38:cd:25:39:
4b:28:71:4c:67:54:90:58:80:7d:7e:00:0c:a6:2c:a4:cb:ca:
6b:c8:a8:8b:58:09:ed:dc:ff:4a:76:a7:96:61:14:59:b2:8e:
b7:34:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:08 2024 by rpki-client on console-ams.rpki-client.org