Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213576.roa
File: AS213576.roa (raw, json)
Hash identifier: iP7oSbYCdtxa7hw64Gl9Qq8bZ+mBh1uIBfQbRFGMjAE=
Subject key identifier: B8:9C:EA:91:9F:04:B5:9D:59:30:8A:25:E4:15:F5:C4:0C:A5:9F:1E
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 1442EB5961C71DC22EC70FCBE7030EE8907002BB
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213576.roa
Signing time: Sat 25 Jan 2025 18:30:57 +0000
ROA not before: Sat 25 Jan 2025 18:25:57 +0000
ROA not after: Sat 24 Jan 2026 18:30:57 +0000
asID: 213576
IP address blocks: 2a05:dfc3:fe00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:42:eb:59:61:c7:1d:c2:2e:c7:0f:cb:e7:03:0e:e8:90:70:02:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 25 18:25:57 2025 GMT
Not After : Jan 24 18:30:57 2026 GMT
Subject: CN=B89CEA919F04B59D59308A25E415F5C40CA59F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:06:f3:0a:d1:d3:b3:f2:1a:12:87:3c:be:
10:03:62:be:44:d0:e1:32:4b:75:5e:96:19:9e:0c:
46:6e:5c:d5:48:dd:d4:82:a0:72:56:91:b6:66:53:
b4:b8:43:cf:64:cd:95:dc:c7:a3:a9:2e:fc:1d:3a:
f9:f7:cc:4b:af:23:4a:41:18:0e:d7:59:d7:ee:88:
e8:21:e9:3e:ef:dd:3e:3d:a9:61:14:53:6c:e9:cf:
d3:cd:9d:31:46:03:b6:d7:63:66:49:89:74:f5:5f:
20:43:5e:8a:ab:f4:54:bb:12:53:0c:71:8e:18:a7:
20:1d:06:05:75:3f:c6:3c:7a:8c:11:ef:04:3f:fd:
06:52:f7:f1:88:76:48:0b:37:e2:27:da:3a:81:7e:
35:25:1e:62:99:ae:4f:16:da:34:38:b4:9b:63:12:
38:1f:9f:c3:42:2f:16:50:ac:f7:f8:10:ca:27:c2:
99:29:c3:89:e8:56:28:08:77:b0:bf:59:5c:19:64:
5e:0f:1a:3a:03:06:9a:0b:de:e0:d7:24:d3:d0:cc:
ee:23:56:1d:70:cf:db:34:24:11:c9:55:d3:ec:e9:
9f:66:54:af:6a:91:dc:68:79:f2:15:39:04:c9:60:
d1:a7:90:14:db:89:17:36:db:12:36:d0:7b:87:42:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:EA:91:9F:04:B5:9D:59:30:8A:25:E4:15:F5:C4:0C:A5:9F:1E
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
06:a7:38:a1:f4:07:16:c7:55:ae:da:70:d2:12:59:6f:fe:aa:
ee:db:4b:72:d3:58:66:ed:94:6a:0f:98:70:34:83:8a:ea:11:
2d:46:06:58:eb:72:56:e7:41:f9:d8:bc:df:db:e8:34:4b:fc:
e0:4a:70:fb:ac:85:b6:32:99:a9:60:41:d6:f7:0a:11:e9:9f:
aa:00:a0:87:f9:9d:5a:52:17:de:56:ff:65:5b:58:dc:17:df:
3f:b3:eb:7b:e0:d6:8d:82:d7:2b:e5:3c:9a:53:31:aa:76:29:
1f:9a:8b:ef:0d:5a:02:1c:cd:a1:c2:a9:6f:6d:6e:3a:16:06:
84:05:d9:94:67:6a:39:c0:db:86:bf:ca:99:64:07:af:9d:0a:
7f:3b:9b:b3:b7:fd:89:9b:0f:38:2f:0f:aa:23:41:2c:c0:8b:
0c:51:bb:ee:da:f9:3b:d2:e1:48:b0:5b:cd:03:6b:ef:ac:3e:
63:70:85:6c:4c:7f:4b:33:f3:6e:0e:4f:19:b4:27:ba:96:22:
4a:6b:d6:ec:eb:57:2c:8d:ab:31:e3:0a:3f:10:44:74:e1:2f:
43:0b:c6:89:d4:9d:c1:76:36:1c:e1:ca:e7:d8:65:e9:07:dd:
f4:2d:86:be:00:d8:18:38:a8:32:73:67:e6:ac:45:1a:35:1e:
20:81:1a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:02 2025 by rpki-client