Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa
File: AS202224.roa (raw, json)
Hash identifier: jMZ39EgUDJrvV+E17DbEdMebSeDs7Ow+XDeZCWXySV0=
Subject key identifier: 2A:AA:AB:7C:7D:E6:B9:0F:DD:07:4B:79:C7:62:48:CB:82:B3:15:BF
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 143E2D62CDC086B2A726B8A595AB3E312C04A05B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa
Signing time: Thu 29 Aug 2024 03:41:17 +0000
ROA not before: Thu 29 Aug 2024 03:36:17 +0000
ROA not after: Thu 28 Aug 2025 03:41:17 +0000
asID: 202224
IP address blocks: 2a0a:6044:7000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3e:2d:62:cd:c0:86:b2:a7:26:b8:a5:95:ab:3e:31:2c:04:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:17 2024 GMT
Not After : Aug 28 03:41:17 2025 GMT
Subject: CN=2AAAAB7C7DE6B90FDD074B79C76248CB82B315BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:4e:85:5d:9c:40:be:05:1f:17:36:aa:63:
89:c9:6e:93:ba:44:5e:e6:7d:2c:14:85:e4:c0:d6:
86:a4:6c:fd:f9:b8:63:6a:71:8c:8b:2c:c1:81:93:
45:dd:72:d0:88:91:b9:21:ca:91:df:81:2b:83:e1:
ab:a1:74:1b:c1:01:2c:4c:1e:76:db:e4:91:7d:88:
5a:22:8b:95:31:de:ee:bc:52:f0:d5:c3:5a:7d:5a:
3f:58:d2:1e:93:a2:3a:31:e9:00:c9:7d:9b:2e:7b:
1e:f6:a8:9f:b5:51:01:46:15:e7:29:15:66:6a:30:
50:bf:7d:fc:79:b9:ea:e8:9e:b1:49:19:92:76:cf:
71:e1:3f:25:d5:e3:cb:25:f2:5d:75:83:d8:93:1a:
08:98:7c:cc:fd:24:ed:f1:81:0c:4d:23:e5:66:d9:
d7:46:22:30:02:5c:d7:55:c6:c0:e1:e5:13:10:7c:
99:26:19:f0:59:a6:e0:b3:30:f5:6d:d7:64:5f:b8:
ad:d0:5c:80:b2:ba:64:be:80:dc:99:72:20:25:06:
cd:3e:6c:a9:a6:3f:1d:24:f3:50:74:f0:e4:ec:80:
f4:98:22:69:30:20:fc:3d:20:c1:68:1a:80:ef:02:
78:fc:24:e2:b8:fa:40:09:99:09:c2:6b:b9:84:66:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:AB:7C:7D:E6:B9:0F:DD:07:4B:79:C7:62:48:CB:82:B3:15:BF
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7000::/40
Signature Algorithm: sha256WithRSAEncryption
2b:ae:15:06:36:f5:14:7b:69:cb:1f:d5:6d:e2:6b:b8:97:01:
a0:dd:14:00:ff:50:33:68:e4:63:15:0d:9f:99:3d:7d:dc:97:
c4:9f:6b:71:56:cd:45:8d:2d:d0:00:dd:12:a4:95:ca:48:76:
e1:7f:cb:f3:ed:b6:1d:38:11:04:e9:0c:74:d1:8d:ea:b9:8d:
0e:5c:ab:09:fc:46:38:a3:3a:4c:f7:29:4f:6e:6c:05:9e:5a:
70:bb:79:46:18:0d:fc:53:30:31:8d:8a:f6:48:a1:2a:2a:5f:
ae:2b:b2:ed:0d:9d:f1:51:2f:f2:07:84:55:0b:6f:67:98:bc:
f8:d4:ef:99:0c:95:69:e7:46:87:4d:49:f8:cf:15:03:fa:a7:
7d:33:bc:57:f5:fe:21:4c:28:7f:cc:d5:7b:b9:c3:d2:70:4e:
1c:cb:49:3a:04:db:7b:8d:0d:b4:b8:5e:22:6e:7a:6f:b7:bb:
2b:ef:e5:f4:24:c8:7a:06:d3:9b:b1:d6:ba:1d:e1:77:b8:bf:
21:09:52:21:c3:b8:50:f0:0f:7c:be:21:0a:4a:6f:43:94:cc:
33:40:44:5f:74:ea:df:ff:cc:71:58:0d:db:84:8f:de:94:11:
15:f9:fa:24:35:06:08:47:72:3f:e7:1f:6d:54:b9:c6:49:a7:
21:a0:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:26:27 2025 by rpki-client