Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214016.roa
File: AS214016.roa (raw, json)
Hash identifier: 2AWzMwILpYBePoqchGTPBhHaBdC7wEBJ1gvNEn/6Ze4=
Subject key identifier: F5:DB:5F:27:E4:67:A7:38:E0:8C:48:C5:C4:FC:08:C2:9B:FA:3E:2A
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7237CDF43FD8B5203576C7890509797BAE5B4C6D
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214016.roa
Signing time: Wed 22 Jan 2025 08:22:12 +0000
ROA not before: Wed 22 Jan 2025 08:17:12 +0000
ROA not after: Wed 21 Jan 2026 08:22:12 +0000
asID: 214016
IP address blocks: 2a05:dfc7:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:37:cd:f4:3f:d8:b5:20:35:76:c7:89:05:09:79:7b:ae:5b:4c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Jan 22 08:17:12 2025 GMT
Not After : Jan 21 08:22:12 2026 GMT
Subject: CN=F5DB5F27E467A738E08C48C5C4FC08C29BFA3E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:6d:85:46:17:cc:63:10:69:2e:be:89:89:
ea:4b:01:a3:e9:f9:49:1b:3d:08:2e:7f:c1:21:b6:
74:7e:79:58:6a:cf:56:aa:df:4d:23:ce:a3:5a:16:
0b:58:57:41:27:b7:cb:ec:cb:c4:60:55:d1:58:5b:
5b:82:c5:7a:44:f3:99:6f:d1:64:00:61:83:5a:6b:
97:5a:af:c4:f8:75:e4:15:2e:89:13:b7:9b:3f:1b:
d6:58:3d:f3:a1:05:1d:9a:64:ba:d2:4f:59:bd:0d:
f5:dd:85:a8:cb:96:45:7d:ae:f1:f4:f2:f3:94:0e:
61:0e:c4:fe:77:2b:c5:51:16:c7:ea:b8:29:94:bc:
af:ad:56:06:16:0c:16:4e:ca:51:a9:10:c1:c7:9f:
65:7d:f8:3a:ff:84:40:29:d9:c3:6f:6e:46:04:36:
c2:d9:8b:ba:b5:37:3a:b1:60:41:6c:a7:6a:37:82:
74:7d:9f:29:70:5f:93:a7:17:c4:35:46:26:20:0e:
6b:27:31:c8:75:64:b7:52:08:f6:53:75:9a:19:2e:
6b:76:57:40:6b:fe:9a:03:0f:0d:8f:13:1d:09:28:
4c:dd:dd:cf:fa:a4:be:d9:41:64:e1:61:0e:2e:54:
0f:7c:ce:31:94:52:53:c2:b5:3a:fd:e7:53:21:85:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:5F:27:E4:67:A7:38:E0:8C:48:C5:C4:FC:08:C2:9B:FA:3E:2A
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7:8000::/36
Signature Algorithm: sha256WithRSAEncryption
13:0c:a4:f7:1a:15:81:a4:28:03:19:c3:1d:6a:26:20:29:dc:
be:56:32:42:23:fb:de:30:1b:df:97:dd:95:4d:1c:45:5d:c4:
7b:d5:91:2c:ed:91:57:e1:44:e9:f1:21:56:b0:ee:bd:d0:38:
7d:9e:2b:f4:d7:25:7d:e3:ff:d1:d8:32:e7:84:0d:50:f1:94:
2f:53:71:fc:f9:a2:4d:77:e9:5a:a9:06:60:ce:17:9c:ff:67:
d4:47:35:e8:e0:6e:6d:72:a9:3e:82:97:15:f4:57:3d:3d:fe:
80:16:d5:21:0a:57:00:8f:e9:54:30:57:77:c6:d2:12:85:a9:
7e:c0:0a:f5:57:ef:a4:1a:95:83:c1:9d:72:8e:46:71:b3:01:
fe:cc:70:b5:0f:2e:30:9d:d0:25:72:d5:e3:f3:48:67:53:8b:
f3:4e:d3:7a:3c:c3:2a:3e:35:8e:2e:2f:10:c3:92:1b:66:3b:
0d:5b:8d:ba:ee:b1:c2:5e:ff:98:7b:20:6c:2f:f9:38:58:52:
8a:41:a4:2e:a3:56:59:66:b0:7f:8b:6e:55:65:85:71:70:2a:
26:f0:52:35:fa:17:2d:e4:41:4a:9e:cb:fc:5c:68:e3:a5:5d:
4a:9a:9e:eb:a6:a0:5f:cf:24:14:1f:c9:d1:d9:cb:97:aa:36:
4c:e5:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:51 2025 by rpki-client