Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203979.roa
File: AS203979.roa (raw, json)
Hash identifier: 7EJKoDu3TVATnq/xmbGnpwe49SiOrw9RpnuhKJr4lFQ=
Subject key identifier: 3E:21:C5:A3:19:78:F9:88:9B:20:34:A3:1C:CD:3A:DC:9D:0A:38:DE
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 33E2EADE899223F9AE9120A7A05B239D3F7F36DC
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203979.roa
Signing time: Sun 01 Jan 2023 23:59:19 +0000
ROA not before: Sun 01 Jan 2023 23:54:19 +0000
ROA not after: Sun 31 Dec 2023 23:59:19 +0000
asID: 203979
IP address blocks: 2a06:a005:454::/48 maxlen: 48
2a06:a005:455::/48 maxlen: 48
2a06:a005:45a::/48 maxlen: 48
2a06:a005:5a8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e2:ea:de:89:92:23:f9:ae:91:20:a7:a0:5b:23:9d:3f:7f:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:19 2023 GMT
Not After : Dec 31 23:59:19 2023 GMT
Subject: CN=3E21C5A31978F9889B2034A31CCD3ADC9D0A38DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:a1:0f:8f:11:7c:51:70:56:95:ef:8c:b4:
48:9a:10:5b:d2:99:65:14:f4:0c:e7:47:b9:9c:f3:
b1:be:76:4b:8f:a7:87:9c:28:0b:56:1c:6e:f2:65:
f7:fb:2f:c0:3d:b2:e7:4e:a5:12:51:44:3a:ed:09:
9d:e3:3e:3b:57:9f:5f:31:04:05:5b:67:26:d8:a3:
fc:c4:85:07:6d:91:56:53:7a:19:7c:8f:0e:f7:2c:
9e:66:0c:06:88:53:b4:6b:8d:54:cb:27:86:1e:ab:
3e:a3:a7:ae:f6:6c:49:bd:ec:6c:93:7b:aa:dd:32:
65:1d:cb:7a:8f:30:c0:21:2c:53:4b:b3:cc:35:82:
5d:0d:15:36:dc:aa:6a:68:95:6b:80:71:3c:ff:0a:
8d:8e:f4:b4:80:62:79:32:22:5b:93:94:20:7b:e9:
1f:9b:4e:15:7a:cf:d4:80:a0:07:37:f4:89:40:a5:
95:a5:56:66:4a:9b:b3:50:7b:7b:78:e6:7b:24:57:
5b:dd:12:f6:eb:da:e7:e3:71:12:45:29:e0:8a:f5:
40:f3:8c:6a:97:86:a3:fc:83:46:bd:c9:ee:e7:a6:
08:87:c5:7a:d9:04:9a:3c:50:c1:e6:d5:42:20:09:
13:3c:0c:f9:34:c5:f6:7f:18:1f:f8:5b:d0:ea:8a:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:C5:A3:19:78:F9:88:9B:20:34:A3:1C:CD:3A:DC:9D:0A:38:DE
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS203979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:454::/47
2a06:a005:45a::/48
2a06:a005:5a8::/48
Signature Algorithm: sha256WithRSAEncryption
33:54:e9:fe:ab:84:56:2d:41:9a:61:da:f5:50:b3:0e:e1:77:
17:fa:87:63:e6:aa:87:e0:25:2e:57:6a:1d:e0:98:a8:ef:e5:
fe:2f:d8:0c:67:38:c9:ac:0a:10:d5:a2:78:bf:f2:ff:6a:1f:
f3:b6:e4:c4:e5:f3:e1:a0:0b:49:5f:48:9c:48:2b:63:7b:59:
7f:50:c8:e9:d6:cc:cc:bd:d4:b1:ca:2b:d0:6a:83:9f:ac:d8:
41:a8:89:cf:fc:c8:99:73:9f:b5:00:8b:0b:3a:0d:14:26:e8:
e0:cd:e9:2a:52:9c:74:19:89:86:a9:62:19:b9:be:99:51:d0:
bc:30:7d:df:8f:16:b7:c5:27:65:c9:8b:08:59:ac:ff:cf:02:
2b:01:b5:75:b3:e4:ae:cb:71:41:a4:b6:00:50:a8:1d:63:75:
55:dd:b4:58:93:58:84:64:9d:70:10:4b:4d:97:cb:78:64:c2:
ae:0f:11:b3:53:2c:f9:0e:b5:f6:0e:a4:ea:b6:2b:98:a3:66:
7d:d6:a3:71:db:e5:6a:1b:21:4b:db:82:22:51:0f:31:91:5c:
79:df:59:e9:fc:77:5b:72:45:c0:54:87:ec:29:03:86:33:9f:
42:ac:a0:01:8b:0b:00:d9:77:f4:ce:58:da:83:30:5e:3e:0a:
02:f3:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org