Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS198889.roa
File: AS198889.roa (raw, json)
Hash identifier: aKtajWzne/Kedhi2P9qsG1Z121FMZTDXWT7g5MC/3CM=
Subject key identifier: F2:3A:BD:5A:6F:9C:93:8E:26:29:22:97:4C:3F:46:40:C6:E9:E7:8E
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 0A6C21F325DDF6E61FDBEFBAA091CF0E87A264C0
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS198889.roa
Signing time: Fri 24 Jan 2025 14:45:56 +0000
ROA not before: Fri 24 Jan 2025 14:40:56 +0000
ROA not after: Fri 23 Jan 2026 14:45:56 +0000
asID: 198889
IP address blocks: 2a05:dfc3:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6c:21:f3:25:dd:f6:e6:1f:db:ef:ba:a0:91:cf:0e:87:a2:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 24 14:40:56 2025 GMT
Not After : Jan 23 14:45:56 2026 GMT
Subject: CN=F23ABD5A6F9C938E262922974C3F4640C6E9E78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:91:71:f8:1c:62:d8:ae:a5:46:2e:4c:ed:
7a:10:06:b8:bd:79:2b:b0:59:32:97:da:bc:c5:84:
50:81:a8:2b:95:81:88:2d:e6:60:52:a9:64:5f:d5:
5f:4d:e4:58:0a:86:ea:0b:ae:f6:e3:7a:84:eb:31:
39:4f:e4:26:8e:2d:80:f1:5f:82:d4:17:ba:36:09:
f7:11:47:5d:be:2b:97:29:91:6e:1a:fc:fd:3d:38:
fe:7e:3b:a5:29:26:e7:3c:ea:fb:97:c3:82:54:dd:
55:57:98:b1:86:4b:3b:f3:5d:0e:23:a1:d8:19:d2:
59:6c:d7:6d:ac:79:ae:79:41:66:0e:e1:67:0d:e6:
e6:45:16:bf:8b:ac:c9:23:02:e8:c7:28:d9:d4:c3:
6f:8c:c5:c9:4d:2c:2e:5c:58:c9:b0:d6:dd:a6:d7:
29:cc:27:7e:bb:d9:0d:c4:e7:ad:84:4c:87:e1:fc:
06:ba:66:ba:44:d5:43:fe:bc:e7:ab:cf:ae:b2:46:
bc:ae:44:91:63:4a:66:c3:c6:c0:22:33:a1:62:78:
65:bf:4c:53:97:a5:d4:f0:fc:75:55:d0:6e:a0:aa:
ad:37:8d:8a:4f:8a:0c:88:88:88:74:03:8c:c8:d2:
6e:a8:49:62:16:f4:8e:22:cc:3d:67:ca:75:24:4c:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:BD:5A:6F:9C:93:8E:26:29:22:97:4C:3F:46:40:C6:E9:E7:8E
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS198889.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
39:e2:47:ee:58:df:af:cb:1e:a4:aa:f8:f5:af:74:03:5d:9d:
87:9e:d9:cb:a6:28:be:11:80:03:5c:66:80:fb:e7:49:10:38:
32:b0:eb:08:3b:de:5d:26:ed:cc:fe:db:a7:31:08:74:cb:f0:
2b:4c:58:53:9f:46:33:d2:5b:7e:1c:b3:23:1a:e9:d7:b0:ef:
3c:d3:fd:86:da:7b:56:98:dc:d7:85:63:5e:39:28:71:a5:18:
58:a8:53:87:4e:45:c3:60:8d:72:5c:33:c0:7e:ac:48:2b:bd:
06:da:98:e2:46:b6:b8:07:1d:15:0a:0a:05:af:e0:96:19:f5:
ef:7d:bf:cf:37:c1:70:c2:bc:f0:2b:09:f1:15:70:58:86:42:
b7:f2:39:6c:69:62:65:16:9e:f2:fb:c9:2b:66:d3:c6:9e:23:
1b:bc:7c:9f:01:dd:3c:c1:70:97:e0:38:58:4e:27:5d:58:c4:
60:cc:54:4a:d0:21:a0:6b:8f:64:c2:84:46:d1:30:d0:fc:1b:
a9:9b:c0:15:54:5e:1d:26:42:86:f5:c5:db:a1:87:dc:24:0e:
ed:7b:9b:51:c2:a3:50:97:1b:08:b2:39:e4:28:03:d9:78:a4:
05:38:bb:34:4a:34:35:0d:e7:59:c9:7b:3c:a6:dd:6e:02:43:
df:04:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:38 2025 by rpki-client