Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS204676.roa
File: AS204676.roa (raw, json)
Hash identifier: F3isrBOnbatcEWeDhQUhVGo3Hgei/5uXTdyKyGIAK6Y=
Subject key identifier: 41:8E:A9:29:47:CE:AC:12:4E:D1:A9:63:EF:9B:B5:77:98:D3:A8:49
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 4626E667152763D2DE38418D1E7FD057E597760F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS204676.roa
Signing time: Sun 29 Dec 2024 15:40:40 +0000
ROA not before: Sun 29 Dec 2024 15:35:40 +0000
ROA not after: Sun 28 Dec 2025 15:40:40 +0000
asID: 204676
IP address blocks: 2a09:54c6:8000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:26:e6:67:15:27:63:d2:de:38:41:8d:1e:7f:d0:57:e5:97:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 29 15:35:40 2024 GMT
Not After : Dec 28 15:40:40 2025 GMT
Subject: CN=418EA92947CEAC124ED1A963EF9BB57798D3A849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:b3:b5:a0:66:09:c3:b1:9b:f8:65:e5:6b:
7f:0b:4f:00:9e:64:00:49:ee:14:2f:60:f3:6d:75:
94:62:9c:2c:3e:1e:fc:8d:df:84:ef:b0:49:75:de:
52:91:0b:5a:b1:5b:0c:97:38:3f:dc:b7:59:cf:cb:
ee:71:28:00:06:b7:78:5c:0a:49:76:0c:a3:9b:e5:
5a:a7:ea:73:3e:29:10:85:0a:75:9f:21:cf:e6:f4:
e5:18:18:25:8c:ea:d8:9d:1a:e7:f6:4d:c5:7a:c3:
85:de:52:ea:02:f3:5f:b7:05:fd:8d:7e:b4:90:e5:
c3:ea:34:d0:21:dd:4d:96:36:9a:72:5c:35:2f:87:
80:c3:b0:5b:c2:0a:c5:9c:6f:b4:38:6b:06:3f:76:
86:7d:77:43:79:14:ec:9e:35:84:d4:43:b6:cc:b8:
29:02:72:74:36:2f:54:ef:3a:2f:89:34:6e:5e:d2:
d8:a4:bc:a0:61:f1:9d:d7:3c:7c:0d:b5:1e:14:a9:
98:2d:e2:4a:82:ea:75:40:0a:88:d5:29:85:46:bb:
b4:e1:7d:dc:cf:a0:46:9c:e0:f0:68:ba:24:7c:0d:
3e:c8:ef:d0:73:d4:bb:42:c8:35:ff:ac:70:9f:a6:
b5:c7:97:9c:b0:fe:6b:cc:b6:2a:8b:5c:cf:dc:d5:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:A9:29:47:CE:AC:12:4E:D1:A9:63:EF:9B:B5:77:98:D3:A8:49
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS204676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:8000::/36
Signature Algorithm: sha256WithRSAEncryption
b3:1e:11:3c:9a:a4:65:b3:e9:ef:6f:ab:43:ff:96:1c:a8:c8:
1f:d3:cc:dd:c0:c4:a2:ca:0b:fc:f6:17:b8:b5:8b:6b:f9:8e:
f8:ea:46:4d:59:60:fe:dc:eb:15:72:51:71:b2:97:bb:24:b6:
8c:b2:f2:e3:f3:d6:8a:b8:88:62:38:9a:e5:3c:50:fc:ee:90:
c6:92:6c:94:c1:6e:ee:7f:5e:df:af:31:cb:a5:63:7f:33:2e:
91:dc:bb:42:17:9a:61:b9:fa:2d:f2:52:ac:6e:3d:f1:ea:5e:
d9:a4:49:10:b9:ad:96:cd:90:51:69:2b:e6:3c:4e:96:da:2e:
f3:42:4b:c4:73:ad:4a:6b:39:1c:0d:88:32:4a:3c:ea:16:7a:
ee:3c:8f:a3:df:7a:30:96:2e:76:f2:f7:39:ed:c0:4c:62:53:
8c:4f:47:b5:6f:3c:a2:b8:35:33:ff:73:be:bf:2f:f9:6a:6d:
55:2f:06:a3:b5:fe:a5:31:7c:1c:fc:a3:af:2e:31:e9:9c:bc:
d1:96:30:6c:65:41:89:c0:72:c5:11:2a:6a:92:ce:fe:f2:e6:
61:a2:5c:29:7d:61:71:d8:69:05:08:36:c4:c9:63:4e:99:65:
a8:9e:b6:2f:bb:6d:9e:36:be:80:d4:07:3f:ed:00:3c:4f:71:
d9:a6:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:58 2025 by rpki-client