Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199340.roa
File: AS199340.roa (raw, json)
Hash identifier: oo0HficSKuebMSMYQF1Fm7OXzATqxSD+EW6TJbC9lUk=
Subject key identifier: D7:85:54:91:AB:11:B1:4A:ED:5F:09:74:FD:0E:6E:11:18:9A:B1:38
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 4A3FB9EA7893DA93C14E178A1C15E0BE4CA5F9D1
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199340.roa
Signing time: Wed 15 Jan 2025 03:49:36 +0000
ROA not before: Wed 15 Jan 2025 03:44:36 +0000
ROA not after: Wed 14 Jan 2026 03:49:36 +0000
asID: 199340
IP address blocks: 2a09:54c6:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3f:b9:ea:78:93:da:93:c1:4e:17:8a:1c:15:e0:be:4c:a5:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 15 03:44:36 2025 GMT
Not After : Jan 14 03:49:36 2026 GMT
Subject: CN=D7855491AB11B14AED5F0974FD0E6E11189AB138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:c3:42:f7:77:4d:ba:8f:02:83:a6:05:a8:
fa:d9:a1:cd:ce:a3:e8:52:d7:a2:97:df:5d:64:94:
de:35:ed:97:eb:1e:46:11:26:15:2a:71:a2:f2:36:
e2:a8:f5:4d:3b:3f:71:d9:29:76:1b:78:f7:8f:cd:
e3:9f:09:6f:b0:54:e5:ac:3e:47:84:ff:ec:40:cf:
df:74:22:f2:72:dd:c9:5e:c3:40:ad:97:c1:d4:a9:
4d:9b:04:64:d2:e2:10:60:5a:c6:99:05:86:54:a2:
92:44:35:0d:d2:38:9b:9d:e6:f7:6b:8d:7c:40:f4:
3b:a9:dd:6b:97:98:92:fd:47:b6:2f:23:b2:2f:4b:
63:0e:c6:34:ff:4b:ae:81:cd:a3:eb:49:e2:0a:38:
08:e5:a9:0b:05:04:23:02:c2:47:d0:39:69:d6:1e:
5e:41:fc:48:8d:b3:69:ae:d7:7e:53:38:f3:a6:f1:
d4:e7:f8:be:f1:db:53:2a:65:97:16:64:68:39:a6:
8e:5f:10:4a:09:f0:15:5f:52:1b:af:6a:4e:d3:64:
4e:b8:53:4f:91:7f:1b:6e:d8:8e:f5:a0:ef:5f:f1:
49:fb:1f:b7:d8:35:be:2a:d4:fe:df:7f:db:6a:f9:
77:f3:1c:54:e7:c4:d3:15:c6:31:39:28:64:56:b0:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:54:91:AB:11:B1:4A:ED:5F:09:74:FD:0E:6E:11:18:9A:B1:38
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:9000::/36
Signature Algorithm: sha256WithRSAEncryption
29:fa:14:f6:3a:00:bd:c2:f4:a7:2f:12:7f:9a:71:41:37:ac:
48:de:3e:b0:46:6d:af:45:c1:d5:b1:21:aa:e9:82:c6:51:fd:
e6:46:fa:56:eb:ec:1d:f9:db:60:bc:56:0e:25:49:52:68:6d:
43:b6:3c:b7:9b:46:19:61:43:f1:88:1e:90:a6:5f:e4:f5:77:
15:b1:a5:26:59:63:c4:0f:1b:51:d1:dd:76:88:1a:97:9c:de:
0c:25:f0:1e:1b:c9:1f:9e:05:77:a2:13:72:41:b8:21:b9:18:
16:ce:ee:30:62:54:57:48:51:86:91:1f:32:f6:9d:93:64:9d:
6c:e8:f6:86:76:2e:d4:e3:58:ba:ca:11:50:c0:d9:4c:39:81:
99:19:26:5d:21:58:c5:32:ab:3b:59:d9:2f:f8:d0:18:a9:fc:
63:87:b9:6b:28:fd:b2:c9:8c:65:34:50:2e:ef:2b:fd:e7:b8:
02:a7:4e:80:58:66:d6:d9:25:cb:27:8a:80:2f:b7:1b:a9:f4:
e0:e6:3a:bc:8f:c6:9a:2f:e1:aa:44:ec:55:ab:b9:bc:b0:46:
20:a5:d3:e9:25:79:66:40:47:9b:f3:2e:10:96:28:2e:63:02:
4f:e8:d5:1f:ee:19:06:4a:bd:75:6b:c4:06:19:4a:aa:7d:cd:
ea:9f:99:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:02 2025 by rpki-client