Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213870.roa
File: AS213870.roa (raw, json)
Hash identifier: 3hAE5khxkhWKI+QPaY8DAy/1+yqEfY7h7krGybjX20U=
Subject key identifier: 6C:6C:69:BD:79:73:60:89:BF:3C:CD:E8:33:EA:7F:FE:40:3F:69:05
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 19A7747E68EC1D83B3D28526CA7C149576FDDA7F
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213870.roa
Signing time: Mon 25 Nov 2024 08:02:53 +0000
ROA not before: Mon 25 Nov 2024 07:57:53 +0000
ROA not after: Mon 24 Nov 2025 08:02:53 +0000
asID: 213870
IP address blocks: 2a0a:6044:c1c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a7:74:7e:68:ec:1d:83:b3:d2:85:26:ca:7c:14:95:76:fd:da:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Nov 25 07:57:53 2024 GMT
Not After : Nov 24 08:02:53 2025 GMT
Subject: CN=6C6C69BD79736089BF3CCDE833EA7FFE403F6905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:87:ed:04:0b:00:a2:c1:ea:07:e5:6a:32:
4e:f1:a8:bd:70:db:76:59:8d:70:e1:35:97:10:bf:
b8:bf:6e:7b:91:3f:7b:31:99:6a:b1:e3:7a:5b:a5:
5e:1f:37:5d:03:fa:a6:01:70:b9:9a:c6:e1:97:1a:
0e:50:04:57:d3:42:cd:53:ff:91:78:62:b8:60:cc:
af:a8:00:c6:6e:17:80:84:79:86:d7:23:0f:c0:e8:
e0:bc:69:39:63:6a:c7:c1:82:79:ac:d6:ae:64:7b:
8d:77:53:46:55:dd:fd:df:93:71:b5:34:a4:52:66:
32:c1:57:09:f6:5c:88:c5:5e:4d:db:79:a2:af:65:
6d:22:86:33:27:00:e7:b6:0b:16:1a:b2:96:91:bf:
f5:ea:0c:13:2d:b6:aa:41:4e:6c:52:28:ac:53:0f:
cd:65:5e:77:00:99:d9:82:8f:96:b8:94:05:c1:e0:
44:fa:e0:3c:dd:36:5d:c8:aa:e2:70:e7:4b:8f:19:
f2:bc:f9:3c:29:7a:92:3f:80:08:80:49:dd:42:a0:
d5:d7:72:3d:16:c7:1a:6e:13:dc:88:52:d8:fb:af:
33:12:98:11:b7:45:92:d5:ec:21:67:4b:19:67:db:
15:ea:c4:6d:9e:9c:e7:31:cd:0e:5c:63:b6:89:f8:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:69:BD:79:73:60:89:BF:3C:CD:E8:33:EA:7F:FE:40:3F:69:05
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS213870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:c1c0::/44
Signature Algorithm: sha256WithRSAEncryption
3f:75:35:ae:48:75:eb:9f:0f:f6:69:dc:59:b3:1a:6a:12:7d:
19:11:da:bb:ac:d8:e7:77:e2:b9:1d:63:8a:b4:fe:9b:0d:e9:
b5:34:20:54:eb:9b:5e:f3:06:49:29:97:81:5c:3b:e3:ba:65:
e2:a0:83:b7:3e:c8:a5:6b:fd:93:fb:e4:f8:17:c5:6c:b4:4b:
64:ab:35:fa:4a:6c:55:35:2e:7e:a7:7f:b0:b7:5c:63:00:73:
6e:66:a8:65:3a:1c:bc:ce:7e:92:6b:58:bd:5d:e9:a3:41:65:
59:26:01:45:6e:ef:e9:e8:43:0b:e0:02:85:de:ef:ac:ac:ea:
90:f5:10:2f:2a:e6:94:7f:91:c9:fd:68:af:6c:fa:e5:ec:13:
d0:11:20:c4:ba:61:98:79:a9:d7:7c:bc:ac:7d:86:49:0f:11:
f0:0e:cc:11:5f:67:84:27:92:72:b1:41:75:ea:b7:87:8b:34:
f0:b7:09:90:f1:7c:21:d5:2d:d6:de:91:8a:c8:23:d1:3b:8c:
0c:b4:bb:11:76:cd:dd:de:6e:95:6a:ae:fd:02:79:1d:db:09:
54:5e:2a:38:15:45:1f:a7:10:ab:e7:70:07:81:c3:77:90:d9:
dc:7f:7c:de:d0:a0:3d:cb:97:f6:45:e7:50:15:ab:8e:d9:06:
d3:cd:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:53 2025 by rpki-client