Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
File: AS212128.roa (raw, json)
Hash identifier: pg2A9U3jlJMiw0W3L7sOBKybkq2PR7LyY2itTlWa6aM=
Subject key identifier: B3:FA:1F:58:23:E6:A1:95:FA:E3:C3:51:2A:59:EC:97:17:6B:59:4F
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 6161E955E0E68702ACBF92AE569ED6188BB06838
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
Signing time: Mon 30 Dec 2024 20:13:11 +0000
ROA not before: Mon 30 Dec 2024 20:08:11 +0000
ROA not after: Mon 29 Dec 2025 20:13:11 +0000
asID: 212128
IP address blocks: 2a09:54c6:a000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:61:e9:55:e0:e6:87:02:ac:bf:92:ae:56:9e:d6:18:8b:b0:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 30 20:08:11 2024 GMT
Not After : Dec 29 20:13:11 2025 GMT
Subject: CN=B3FA1F5823E6A195FAE3C3512A59EC97176B594F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:c4:83:db:d9:c0:72:30:fa:ff:17:37:bc:
77:64:35:24:7e:e2:5e:bd:32:ef:c5:53:d8:44:eb:
5a:74:1d:55:c2:4d:a1:84:61:71:24:8a:5b:cd:a4:
2a:de:ad:19:02:c5:6c:82:12:bd:a7:44:c2:2e:a1:
ec:6c:0c:74:5a:3b:2c:1f:c2:26:06:37:fd:7f:a7:
84:50:4b:29:23:46:d8:03:05:62:32:89:7c:2f:73:
35:ff:bc:8a:0b:03:23:67:17:97:4a:85:2a:59:ad:
d7:d7:ac:d2:75:a8:9b:c9:9f:33:97:3c:b8:b6:bc:
e5:70:10:6b:9a:76:ea:13:45:79:29:f2:61:b5:63:
66:51:30:b4:47:61:a1:00:e9:b6:78:13:07:2b:18:
e1:a3:2c:1b:e6:d3:a0:1d:13:7d:0b:80:8e:16:c9:
f9:87:e5:21:c1:bb:e2:22:8a:cf:28:a3:d7:d3:91:
c9:7f:65:76:ec:eb:58:ec:1f:1b:ae:16:04:b6:f4:
0c:0f:56:ef:da:f6:3b:97:98:2a:f5:c2:55:ba:31:
a5:42:7e:b8:53:72:ee:34:71:81:66:79:03:0f:67:
2d:a5:01:9f:4b:8f:35:51:b2:ab:67:4f:05:3f:71:
18:fd:7d:be:00:d2:92:29:05:ae:28:f3:f5:57:d6:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:1F:58:23:E6:A1:95:FA:E3:C3:51:2A:59:EC:97:17:6B:59:4F
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:a000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:04:fd:81:7c:74:cc:79:55:13:16:0f:88:1e:31:75:12:4b:
d6:67:ac:95:58:ad:63:b5:c6:e7:29:cb:38:f6:d7:64:59:23:
7c:e5:8a:29:82:44:b6:58:99:7c:07:98:24:73:da:66:19:53:
61:23:4d:dd:80:b0:8b:af:16:d0:f3:50:93:8a:f0:6e:c3:3d:
ca:e5:f6:8c:8e:f4:c6:ac:b6:be:cd:0f:6e:27:31:20:29:0b:
48:8e:f9:64:6b:2f:b6:dd:ee:8e:15:c6:c4:54:91:4f:66:21:
84:60:0d:8c:7b:3c:2e:71:ed:98:a6:08:dd:00:f7:f8:d0:72:
b4:89:1c:ea:27:6a:21:b4:16:2d:19:48:31:62:89:7b:9f:89:
c1:54:9a:24:44:fc:77:75:87:e4:9c:ad:f1:c2:7c:5c:10:15:
c3:48:db:6c:70:fb:0c:ba:61:bc:c1:82:07:bf:87:be:3a:5f:
b9:f0:8b:57:61:cc:86:11:f3:fc:1d:ed:ad:b3:92:e2:17:ee:
21:b0:74:ae:d0:1d:19:57:37:75:20:f0:99:1a:33:b0:63:68:
e1:77:5c:c1:10:4a:9d:36:4f:2e:14:95:7d:f8:53:37:a2:23:
fd:4c:f6:92:15:35:2d:a8:5c:22:95:d9:49:26:d5:07:07:70:
2b:90:69:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYWHpVeDmhwKsv5KuVp7WGIuwaDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDEyMzAyMDA4MTFaFw0yNTEyMjkyMDEzMTFaMDMxMTAvBgNV
BAMTKEIzRkExRjU4MjNFNkExOTVGQUUzQzM1MTJBNTlFQzk3MTc2QjU5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZScSD29nAcjD6/xc3vHdkNSR+
4l69Mu/FU9hE61p0HVXCTaGEYXEkilvNpCrerRkCxWyCEr2nRMIuoexsDHRaOywf
wiYGN/1/p4RQSykjRtgDBWIyiXwvczX/vIoLAyNnF5dKhSpZrdfXrNJ1qJvJnzOX
PLi2vOVwEGuaduoTRXkp8mG1Y2ZRMLRHYaEA6bZ4EwcrGOGjLBvm06AdE30LgI4W
yfmH5SHBu+Iiis8oo9fTkcl/ZXbs61jsHxuuFgS29AwPVu/a9juXmCr1wlW6MaVC
frhTcu40cYFmeQMPZy2lAZ9LjzVRsqtnTwU/cRj9fb4A0pIpBa4o8/VX1vhxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUs/ofWCPmoZX648NRKlnslxdrWU8wHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjEyMTI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKglU
xqAwDQYJKoZIhvcNAQELBQADggEBAJoE/YF8dMx5VRMWD4geMXUSS9ZnrJVYrWO1
xucpyzj212RZI3zliimCRLZYmXwHmCRz2mYZU2EjTd2AsIuvFtDzUJOK8G7DPcrl
9oyO9Mastr7ND24nMSApC0iO+WRrL7bd7o4VxsRUkU9mIYRgDYx7PC5x7ZimCN0A
9/jQcrSJHOonaiG0Fi0ZSDFiiXuficFUmiRE/Hd1h+ScrfHCfFwQFcNI22xw+wy6
YbzBgge/h746X7nwi1dhzIYR8/wd7a2zkuIX7iGwdK7QHRlXN3Ug8JkaM7BjaOF3
XMEQSp02Ty4UlX34UzeiI/1M9pIVNS2oXCKV2Ukm1QcHcCuQaTU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:54 2025 by rpki-client