Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199691.roa
File: AS199691.roa (raw, json)
Hash identifier: IqwHdeG0Ak4JkhakINYOLq/6Nh/ayhEvwoYZETp7RM8=
Subject key identifier: 22:FD:17:52:2D:00:5B:1B:CD:B5:D8:4B:86:DA:DD:2D:82:CE:CE:99
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 2780C3B7242E757EB0EE1AF12A00A3AEB7D78A51
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199691.roa
Signing time: Tue 17 Dec 2024 17:17:55 +0000
ROA not before: Tue 17 Dec 2024 17:12:55 +0000
ROA not after: Tue 16 Dec 2025 17:17:55 +0000
asID: 199691
IP address blocks: 2a0a:6044:6e00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:80:c3:b7:24:2e:75:7e:b0:ee:1a:f1:2a:00:a3:ae:b7:d7:8a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 17 17:12:55 2024 GMT
Not After : Dec 16 17:17:55 2025 GMT
Subject: CN=22FD17522D005B1BCDB5D84B86DADD2D82CECE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:0c:a2:04:ce:39:72:17:9d:06:c4:17:f6:
d8:2d:88:90:69:bb:32:8a:42:cd:0e:92:46:77:d8:
e4:25:bd:50:f4:74:11:5e:d1:73:03:e0:9d:da:9d:
ef:93:5e:5a:2d:a4:23:92:3c:36:68:49:ff:c5:9b:
7d:be:b8:3c:cb:1d:62:9c:ac:5a:fe:24:da:a3:83:
72:3a:af:0e:94:fd:c2:e1:4a:f1:1a:42:e4:5c:35:
9a:04:97:58:d8:37:7b:05:20:ed:ea:94:82:55:d1:
c4:3e:d9:70:b0:41:22:d1:89:6a:68:7b:7b:1b:b3:
4a:d8:db:9c:ce:dd:cf:e3:5a:a4:b4:d1:dd:89:95:
7e:b8:32:97:25:9e:e2:be:0f:5e:aa:cc:82:27:48:
2e:7d:8d:21:61:ed:51:1b:10:cc:8a:93:6f:1c:62:
75:19:fa:76:d9:b3:2a:17:5c:fb:cb:b9:83:5b:54:
29:ee:bd:28:55:bb:12:3a:c1:49:1e:c9:18:7b:e2:
b5:f9:c8:e5:ad:40:fd:1e:33:97:81:3e:e6:ab:a8:
a2:4b:a2:1b:ae:cc:18:0b:9c:94:25:a1:a9:21:47:
f3:7c:d6:58:f7:b2:bf:ba:31:e4:b7:5f:32:70:8c:
10:4a:38:26:c7:1a:14:b7:0a:d6:b0:a8:e0:95:97:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:17:52:2D:00:5B:1B:CD:B5:D8:4B:86:DA:DD:2D:82:CE:CE:99
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6e00::/40
Signature Algorithm: sha256WithRSAEncryption
b4:e8:71:ad:41:97:f8:ae:a3:35:3c:cb:99:72:fb:f7:f9:54:
da:8b:ab:d4:2e:bc:ac:86:7f:21:8b:68:d0:bf:f8:b8:a0:81:
92:c2:11:be:ca:cb:b5:8b:df:9e:83:88:d0:ca:5e:7c:57:12:
cf:62:84:cb:69:aa:aa:6c:63:63:44:98:29:ba:52:54:25:ee:
62:ea:f7:24:d6:36:6d:59:03:20:a0:01:bc:23:d7:2e:8d:46:
8f:ba:8e:ba:aa:a9:f4:bc:a6:ca:1c:d1:7f:d2:ce:c7:bd:3c:
11:ef:97:9d:c5:b1:3e:29:d5:ad:db:31:68:c4:20:21:96:db:
3d:cc:15:fd:e5:db:72:58:39:71:7b:3a:18:60:c1:ab:c1:0e:
cb:19:58:94:3a:be:9e:b5:cb:49:6b:1e:43:44:43:4f:54:da:
3c:1a:1b:92:3c:ba:75:50:33:bb:55:92:f9:70:c9:f5:0a:3c:
d8:dd:ae:2f:ca:b5:59:82:e1:4a:34:43:38:09:d6:08:78:93:
16:30:e7:17:02:e5:b0:77:f9:b5:2a:87:7d:d6:07:cc:ff:73:
2b:57:49:50:5e:f6:22:13:19:c8:27:1b:ec:f3:eb:6c:4d:52:
45:38:7e:87:38:26:7f:92:c2:41:7b:87:1a:11:46:2b:52:c8:
8e:c4:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:55 2025 by rpki-client