Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: KgHbMQLx/2HyM7qapmSewn9bqmzLRx5XRhv9+shq2Gc=
Subject key identifier: 71:1C:D1:56:E3:4F:2A:E5:AA:FE:38:31:A1:0E:28:56:6A:DD:A8:96
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 6EC6A288722FB6C8840D4AC12C262ED1F70EADD9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
Signing time: Fri 17 Jan 2025 13:49:41 +0000
ROA not before: Fri 17 Jan 2025 13:44:41 +0000
ROA not after: Fri 16 Jan 2026 13:49:41 +0000
asID: 0
IP address blocks: 2a05:dfc7:8000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:a2:88:72:2f:b6:c8:84:0d:4a:c1:2c:26:2e:d1:f7:0e:ad:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 17 13:44:41 2025 GMT
Not After : Jan 16 13:49:41 2026 GMT
Subject: CN=711CD156E34F2AE5AAFE3831A10E28566ADDA896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:2c:45:04:74:d5:5c:d4:fa:83:29:51:04:
13:0a:a1:8f:09:16:95:99:8a:5d:e9:ef:fe:8a:a8:
0c:58:64:06:46:e0:06:fa:ee:96:23:b0:67:37:84:
15:7d:1d:88:af:10:11:59:f6:51:93:0b:44:74:60:
b0:3a:8e:da:13:83:3e:8b:e9:b6:a0:15:5b:6d:6f:
de:7d:4c:92:62:29:7e:01:c9:a6:23:3d:82:64:b3:
28:5c:2b:98:25:7d:6d:34:4c:fd:4c:7b:40:75:1e:
05:38:85:5d:14:02:07:9f:8d:e7:68:52:69:78:c6:
8a:0f:7b:b3:95:e6:1b:b9:6c:13:38:08:be:a5:59:
83:bb:7c:c8:e8:e3:7b:8f:9a:3c:96:67:e6:f2:e1:
2d:e1:3a:c5:76:7e:c9:41:7c:82:9f:0a:e0:d9:aa:
12:b8:f6:70:af:36:e3:81:ea:d5:84:f3:97:4d:75:
e2:0f:ed:73:36:36:ff:6c:35:8f:3f:3b:0d:42:b6:
8e:83:bf:9a:5f:b5:76:fb:48:f0:67:99:e5:dd:b7:
47:e3:ed:78:8f:87:f5:e9:cf:9c:1e:da:9f:c2:37:
2e:dd:81:98:f7:45:39:db:85:0e:d7:f6:c2:bf:c2:
b4:c7:e2:c0:8b:23:55:96:30:32:4b:13:f7:58:1c:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:D1:56:E3:4F:2A:E5:AA:FE:38:31:A1:0E:28:56:6A:DD:A8:96
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:8000::/36
Signature Algorithm: sha256WithRSAEncryption
38:ff:ab:82:9d:94:78:2a:ef:5c:bd:01:83:0d:26:78:08:89:
99:cb:c5:6e:7d:2b:2a:2f:c2:21:7d:c7:92:9d:3c:84:0b:af:
53:1b:ad:3f:07:bf:0c:33:7a:ab:10:1a:a4:1d:a0:ec:2d:7c:
74:43:75:fc:98:ff:b1:a0:03:45:ff:98:07:12:af:17:2c:b5:
eb:9d:08:86:28:a2:97:4d:9c:7b:e3:0d:c8:dd:a4:5a:9a:10:
a8:9e:1e:be:6b:c2:3b:4a:9b:8f:77:be:b2:5f:68:3f:8b:c7:
98:b3:f2:9a:1c:80:b5:b2:cc:98:1b:be:0f:ed:8b:a8:38:de:
3a:d4:fa:24:d8:60:6f:04:cd:fd:26:4b:b4:25:bc:11:df:bc:
bc:62:81:43:58:40:74:c4:1e:07:ba:41:fc:b7:90:38:1d:4e:
9f:51:be:7b:e2:85:ff:d8:19:39:2b:a5:8d:51:73:81:5e:a0:
34:32:01:20:d0:43:0a:b7:22:9b:a0:59:73:72:33:b4:9b:f6:
f3:65:c0:01:4b:6d:f6:36:76:19:11:04:9c:ba:55:85:45:85:
93:57:d9:87:5a:e9:5c:c9:26:f5:70:e2:00:d4:b8:70:03:a2:
11:ed:cd:f5:41:ea:d6:26:d9:00:b5:66:32:ee:21:51:1e:6a:
37:13:45:33
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUbsaiiHIvtsiEDUrBLCYu0fcOrdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNTAxMTcxMzQ0NDFaFw0yNjAxMTYxMzQ5NDFaMDMxMTAvBgNV
BAMTKDcxMUNEMTU2RTM0RjJBRTVBQUZFMzgzMUExMEUyODU2NkFEREE4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj4ixFBHTVXNT6gylRBBMKoY8J
FpWZil3p7/6KqAxYZAZG4Ab67pYjsGc3hBV9HYivEBFZ9lGTC0R0YLA6jtoTgz6L
6bagFVttb959TJJiKX4ByaYjPYJksyhcK5glfW00TP1Me0B1HgU4hV0UAgefjedo
Uml4xooPe7OV5hu5bBM4CL6lWYO7fMjo43uPmjyWZ+by4S3hOsV2fslBfIKfCuDZ
qhK49nCvNuOB6tWE85dNdeIP7XM2Nv9sNY8/Ow1Cto6Dv5pftXb7SPBnmeXdt0fj
7XiPh/Xpz5we2p/CNy7dgZj3RTnbhQ7X9sK/wrTH4sCLI1WWMDJLE/dYHEKPAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUcRzRVuNPKuWq/jgxoQ4oVmrdqJYwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoF38eAMA0G
CSqGSIb3DQEBCwUAA4IBAQA4/6uCnZR4Ku9cvQGDDSZ4CImZy8VufSsqL8IhfceS
nTyEC69TG60/B78MM3qrEBqkHaDsLXx0Q3X8mP+xoANF/5gHEq8XLLXrnQiGKKKX
TZx74w3I3aRamhConh6+a8I7SpuPd76yX2g/i8eYs/KaHIC1ssyYG74P7YuoON46
1Pok2GBvBM39Jku0JbwR37y8YoFDWEB0xB4HukH8t5A4HU6fUb574oX/2Bk5K6WN
UXOBXqA0MgEg0EMKtyKboFlzcjO0m/bzZcABS232NnYZEQSculWFRYWTV9mHWulc
ySb1cOIA1LhwA6IR7c31QerWJtkAtWYy7iFRHmo3E0Uz
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:29 2025 by rpki-client