Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS203062.roa
File: AS203062.roa (raw, json)
Hash identifier: vKPp3cX2DZx8yfUbaVObzFu4xQBckrtYgiv5PfZdBng=
Subject key identifier: 00:1B:D6:00:47:99:18:CA:9D:18:93:7E:99:7E:12:77:E1:74:B5:E6
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7B5E1010A1643ECACB16FF138EB4BA5E043A10A3
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS203062.roa
Signing time: Tue 07 Jan 2025 21:12:10 +0000
ROA not before: Tue 07 Jan 2025 21:07:10 +0000
ROA not after: Tue 06 Jan 2026 21:12:10 +0000
asID: 203062
IP address blocks: 2a0a:6044:b600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5e:10:10:a1:64:3e:ca:cb:16:ff:13:8e:b4:ba:5e:04:3a:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 7 21:07:10 2025 GMT
Not After : Jan 6 21:12:10 2026 GMT
Subject: CN=001BD600479918CA9D18937E997E1277E174B5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:0f:1d:97:1b:a8:47:3c:43:3c:96:e5:69:
b7:d7:82:af:b8:37:6d:d0:a7:66:37:25:b6:fb:30:
52:a5:a8:29:bc:cf:31:04:31:72:38:c1:ba:2e:b1:
24:cb:c8:71:e7:92:da:de:7b:a1:ca:af:09:1e:4d:
cd:00:a2:e1:37:50:95:1d:24:88:62:25:ac:c3:17:
99:34:9a:72:61:24:e2:b1:3c:28:1e:f7:1c:fd:cd:
4e:98:5c:18:be:15:63:da:5f:63:9c:ea:4e:ad:2c:
90:aa:3a:d3:69:3f:1d:1c:d2:be:96:f9:a4:e3:b8:
91:4b:8a:27:86:99:b6:5a:0c:4e:21:d2:de:f1:08:
87:a8:93:0e:11:fa:8a:7b:d7:c8:51:db:52:7d:93:
b1:ad:35:13:65:28:e6:f8:12:d4:00:fc:0b:4f:ad:
40:40:4f:a8:2c:9b:f5:69:cf:5f:27:78:41:5b:87:
ae:81:67:b0:8b:6d:ff:55:c7:e2:23:15:49:65:de:
82:ed:91:71:e7:a9:a6:31:e9:c7:e3:46:8a:8c:c4:
e1:ee:9e:3f:7b:10:ba:5f:b5:fd:31:fa:98:43:56:
a4:f2:f0:4c:7d:25:5d:4f:88:13:d2:2a:11:a5:df:
2d:7f:d9:2b:f1:67:7f:50:8c:8c:b7:ce:3f:72:aa:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:D6:00:47:99:18:CA:9D:18:93:7E:99:7E:12:77:E1:74:B5:E6
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS203062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b600::/40
Signature Algorithm: sha256WithRSAEncryption
75:5f:9d:d0:2e:b5:d2:9e:bd:34:46:dc:b5:9c:a2:a8:92:0f:
8b:d6:df:90:5c:89:fe:43:9b:d6:89:a4:91:e0:d7:49:b0:1e:
b2:b8:16:60:39:dc:3e:46:d1:d7:e2:33:63:e9:6b:c3:e7:6e:
08:f0:74:41:c0:9a:37:a3:7b:08:2d:1c:e9:e0:26:95:6c:53:
20:12:98:ec:c3:29:04:11:62:28:9c:8f:77:ea:c5:29:fc:72:
b0:29:c0:f0:1a:a9:00:99:3b:89:b1:f6:a7:83:31:55:8a:f8:
ba:ef:31:81:9e:dd:a6:2d:33:cd:08:64:6b:2a:6d:74:8b:80:
bf:dd:8d:fc:27:89:3f:16:9c:db:84:9a:f9:dd:aa:e5:14:30:
bf:b1:c6:45:71:af:08:5e:d9:e3:00:28:9c:36:40:52:96:2f:
2d:42:44:bd:23:7b:91:ba:20:71:ab:b4:77:ed:70:40:db:e5:
b5:c5:98:20:d6:4d:2d:0b:66:90:86:04:99:1d:65:37:17:3a:
01:75:65:bf:0f:ac:a0:c7:c3:e5:2c:59:16:86:3c:b9:0e:43:
9b:31:e5:cf:4f:3c:ae:2f:9d:c9:9a:42:ac:0e:f6:7b:8b:87:
41:83:7b:e7:97:0b:68:bd:e3:c7:d8:f0:34:8b:ce:1a:e5:b7:
ee:8d:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:04 2025 by rpki-client