Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213707.roa
File: AS213707.roa (raw, json)
Hash identifier: lD0dNm0hGjWBVGEX7l6bEOOnhLGpLCJxXhvlZRMfgOA=
Subject key identifier: F8:F5:B4:24:9F:89:04:22:0C:3B:C1:95:E3:0D:2F:65:7A:B4:A4:20
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7324E3C01F5257019EDF3D79BF2288C0A97FD10C
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213707.roa
Signing time: Sat 28 Dec 2024 13:29:23 +0000
ROA not before: Sat 28 Dec 2024 13:24:23 +0000
ROA not after: Sat 27 Dec 2025 13:29:23 +0000
asID: 213707
IP address blocks: 2a0a:6044:6c00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:24:e3:c0:1f:52:57:01:9e:df:3d:79:bf:22:88:c0:a9:7f:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 28 13:24:23 2024 GMT
Not After : Dec 27 13:29:23 2025 GMT
Subject: CN=F8F5B4249F8904220C3BC195E30D2F657AB4A420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:0a:7f:22:7c:ba:11:8e:bf:48:fc:93:2c:
29:01:e1:02:19:ab:d1:0d:66:ba:8b:7e:ca:1f:e5:
57:be:e5:87:38:ba:cd:6e:21:58:87:c2:a1:bb:91:
3d:20:5e:0f:97:c0:a9:e8:7d:30:6b:e9:04:9d:8c:
e7:8c:ea:5c:d5:87:2f:6b:ff:44:b8:89:6d:75:d7:
e0:d0:89:c8:ca:f9:35:6f:6b:5e:63:d5:1d:fc:d7:
4e:ca:b2:12:61:ed:c4:24:e3:ab:88:94:f5:45:64:
14:90:3e:25:b6:45:33:63:58:ee:4e:87:c0:b2:e2:
73:97:83:eb:cf:ae:ef:d4:b2:31:e9:60:43:25:b6:
c2:c5:16:ae:78:fa:5a:9f:f7:fd:b5:1e:65:79:04:
d6:09:c3:47:9d:b0:69:59:c4:c1:f2:38:03:8d:ef:
04:90:b7:b2:af:03:b0:51:16:4d:69:d7:e2:a4:c7:
0f:d1:65:3e:95:62:59:68:c0:7b:46:a6:df:e4:89:
69:7d:ec:ac:d6:8b:ce:d3:1f:90:8a:c3:2b:c5:64:
cf:da:fa:11:af:9c:d5:56:6f:5f:5d:03:df:ef:ab:
83:73:fa:1d:a3:14:ef:c6:69:5e:9f:7d:34:f8:ba:
1e:f7:24:e1:93:5d:b2:c9:ca:84:b6:f7:57:5c:60:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:B4:24:9F:89:04:22:0C:3B:C1:95:E3:0D:2F:65:7A:B4:A4:20
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6c00::/40
Signature Algorithm: sha256WithRSAEncryption
45:c5:86:46:bb:1c:0c:8c:76:07:eb:72:21:b5:e1:e1:b6:3e:
cb:5b:da:58:5f:24:95:c9:77:78:d0:36:53:57:94:d1:25:3f:
df:bb:fd:2d:c6:96:4c:f0:c2:42:4c:39:02:0f:1b:09:76:a2:
06:c8:44:9f:10:15:93:07:b6:86:d5:77:69:38:5f:09:66:b5:
b8:f6:6a:36:05:f9:90:d3:1f:47:cd:aa:77:0b:6c:2b:54:7b:
e1:b4:1a:93:d4:b6:ef:b3:4c:77:ed:78:09:dd:2f:4e:1f:1b:
8d:e1:c7:c4:33:f6:fb:66:d0:36:07:0d:27:3a:23:4a:a9:5e:
c9:9c:21:75:8b:5c:cc:f8:c0:08:2e:d7:e9:c8:be:d1:22:fe:
8f:6c:8e:f3:45:e3:2b:c0:98:39:2a:f9:0b:d8:b3:57:fe:fe:
b5:8f:d5:6f:a4:9a:37:80:f3:6f:e4:b6:c5:17:c0:a7:98:71:
cf:28:2b:85:e2:18:1b:15:73:cc:b6:3b:23:b0:41:62:a2:fb:
91:f8:40:6f:2d:60:77:02:8c:77:0c:09:18:4e:d4:10:70:7c:
43:19:ae:4a:4b:fc:1f:e4:43:b0:60:20:c9:f7:e6:15:17:f0:
5f:4c:7e:14:a2:eb:e2:82:ab:7c:63:14:18:3c:4f:cb:04:9a:
3b:9f:b2:31
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcyTjwB9SVwGe3z15vyKIwKl/0QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDEyMjgxMzI0MjNaFw0yNTEyMjcxMzI5MjNaMDMxMTAvBgNV
BAMTKEY4RjVCNDI0OUY4OTA0MjIwQzNCQzE5NUUzMEQyRjY1N0FCNEE0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAgp/Iny6EY6/SPyTLCkB4QIZ
q9ENZrqLfsof5Ve+5Yc4us1uIViHwqG7kT0gXg+XwKnofTBr6QSdjOeM6lzVhy9r
/0S4iW111+DQicjK+TVva15j1R38107KshJh7cQk46uIlPVFZBSQPiW2RTNjWO5O
h8Cy4nOXg+vPru/UsjHpYEMltsLFFq54+lqf9/21HmV5BNYJw0edsGlZxMHyOAON
7wSQt7KvA7BRFk1p1+Kkxw/RZT6VYllowHtGpt/kiWl97KzWi87TH5CKwyvFZM/a
+hGvnNVWb19dA9/vq4Nz+h2jFO/GaV6ffTT4uh73JOGTXbLJyoS291dcYCOlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+PW0JJ+JBCIMO8GV4w0vZXq0pCAwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjEzNzA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg
RGwwDQYJKoZIhvcNAQELBQADggEBAEXFhka7HAyMdgfrciG14eG2Pstb2lhfJJXJ
d3jQNlNXlNElP9+7/S3GlkzwwkJMOQIPGwl2ogbIRJ8QFZMHtobVd2k4Xwlmtbj2
ajYF+ZDTH0fNqncLbCtUe+G0GpPUtu+zTHfteAndL04fG43hx8Qz9vtm0DYHDSc6
I0qpXsmcIXWLXMz4wAgu1+nIvtEi/o9sjvNF4yvAmDkq+QvYs1f+/rWP1W+kmjeA
82/ktsUXwKeYcc8oK4XiGBsVc8y2OyOwQWKi+5H4QG8tYHcCjHcMCRhO1BBwfEMZ
rkpL/B/kQ7BgIMn35hUX8F9MfhSi6+KCq3xjFBg8T8sEmjufsjE=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:09 2025 by rpki-client