Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203915.roa
File: AS203915.roa (raw, json)
Hash identifier: XHoroFFsjIICU0Ts5PQItdEVW4IrdFK3LCCvl0Y4nyE=
Subject key identifier: F3:B9:63:75:45:9A:67:A5:10:F9:B2:C1:5B:D2:09:FA:A5:5F:58:C0
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 20B31B67694E6C6C953332A46932D78AEA660F3D
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203915.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 203915
IP address blocks: 2a06:a005:ba8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b3:1b:67:69:4e:6c:6c:95:33:32:a4:69:32:d7:8a:ea:66:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=F3B96375459A67A510F9B2C15BD209FAA55F58C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:77:43:2e:ed:d6:4b:d2:8b:b3:a2:65:65:
b6:dc:bf:dc:80:5d:c1:2f:e2:92:4b:63:52:d2:04:
55:e8:3c:cc:76:c7:20:a0:3a:f4:95:5c:fc:f8:30:
1e:76:61:69:00:d5:e3:d9:92:02:8c:cb:6d:eb:1b:
ef:bd:c5:05:af:9f:51:77:86:2a:9c:62:9c:52:f2:
de:4d:21:23:44:63:e7:c9:46:3f:b1:6c:ed:9c:37:
72:60:c4:0e:1a:dd:c4:fc:23:7c:b3:94:35:0f:12:
c0:e7:3c:19:70:11:38:27:3c:df:ee:20:56:68:6f:
78:ce:18:21:ae:86:c9:34:b0:90:2b:34:87:6e:d2:
d9:0b:10:14:25:99:c1:4a:89:a2:13:72:fd:b9:8f:
14:4d:01:bc:9c:e8:5a:17:6f:68:02:76:bc:2a:43:
39:10:e2:be:06:7e:fe:73:42:04:86:7c:15:8a:01:
73:3b:cb:54:99:fc:d0:51:b5:6b:ad:84:67:08:ab:
c0:19:74:c9:a2:17:0c:eb:84:db:ed:e2:47:58:bf:
ff:aa:63:b5:dd:86:71:27:7d:87:53:94:e0:b9:ef:
9a:70:e4:fd:df:fb:ef:a8:67:88:a0:39:b1:0f:c0:
c2:30:45:06:d5:e4:66:76:02:7d:05:02:f6:dd:92:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:63:75:45:9A:67:A5:10:F9:B2:C1:5B:D2:09:FA:A5:5F:58:C0
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba8::/48
Signature Algorithm: sha256WithRSAEncryption
51:70:35:0e:02:57:29:c3:fc:79:9d:67:5b:8d:5b:42:66:b0:
ba:13:01:f1:50:8e:6e:6a:96:ea:9c:41:d3:77:48:09:bf:a2:
ab:ef:56:5f:d5:11:6e:85:ff:d0:d7:5c:e9:44:d5:f3:f9:ca:
11:65:bb:0e:d8:bd:a5:c7:be:14:85:9b:eb:6b:38:6c:6f:35:
dd:70:6b:3d:cd:f3:05:d3:13:6c:8a:d9:82:f6:5a:e2:ff:e7:
f9:e0:e8:8f:6c:cf:67:9a:bb:13:8f:53:d9:1a:ee:b9:a4:b7:
4d:32:68:9e:6c:f9:0b:46:fa:ea:a1:ee:5c:5d:e1:c6:7c:56:
df:11:66:bf:35:30:3d:fa:aa:23:a0:bd:b5:78:5f:eb:b5:79:
4b:d8:38:ea:1e:aa:c9:68:a6:cc:07:da:56:9a:4f:3f:f2:1b:
6e:85:ca:6c:93:07:00:db:0c:3f:8f:71:e1:ec:03:03:c5:08:
08:04:fa:7b:d8:b9:1c:c5:c1:44:60:1a:11:b5:56:c6:6b:44:
8d:7f:b2:28:47:b2:e9:ae:0f:02:0f:55:ca:18:e0:36:d6:c8:
76:71:f1:f0:10:d2:a1:35:eb:99:3e:f2:3f:5c:d9:df:1e:90:
67:e9:8c:ad:28:35:70:c6:a5:e3:e3:83:12:60:e1:c6:2e:6d:
f4:04:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org