Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa
File: AS214242.roa (raw, json)
Hash identifier: lv+l3O0fMjzmIVXug65347vrIli3yhQo8Usb/TMU5oQ=
Subject key identifier: 26:57:CD:F7:B8:74:8B:1A:41:AF:AC:EB:68:84:D0:13:65:38:16:9F
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 3D3D6DD1D664D2E0D4058C8A08E5CF4E2D6FD10E
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa
Signing time: Tue 24 Dec 2024 18:19:10 +0000
ROA not before: Tue 24 Dec 2024 18:14:10 +0000
ROA not after: Tue 23 Dec 2025 18:19:10 +0000
asID: 214242
IP address blocks: 2a0a:6044:7700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3d:6d:d1:d6:64:d2:e0:d4:05:8c:8a:08:e5:cf:4e:2d:6f:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 24 18:14:10 2024 GMT
Not After : Dec 23 18:19:10 2025 GMT
Subject: CN=2657CDF7B8748B1A41AFACEB6884D0136538169F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:33:80:5a:2f:16:85:38:d4:85:ed:73:c1:
3c:4d:0e:f7:0c:31:19:02:f7:7e:f9:0a:06:4e:88:
1b:68:68:b3:92:e7:2d:6e:78:ae:5b:c6:ed:22:ec:
ba:11:5e:35:0b:8e:26:c6:87:38:79:48:74:c7:8d:
19:b7:76:a5:8b:32:8b:5a:7e:2f:91:81:38:c4:18:
fd:85:74:d4:19:af:51:c4:fc:34:16:ee:c4:e7:ee:
72:f2:ac:2e:46:8d:40:4b:53:7d:46:77:4a:51:68:
7c:77:23:b5:21:d8:21:bc:1c:97:dc:a0:e1:3b:29:
1c:61:16:d6:a3:92:d6:ef:55:22:78:c3:3b:41:39:
ab:e0:43:5d:a5:1b:42:c6:e1:5c:38:f5:5c:ee:c4:
aa:d7:67:51:86:ff:c9:9f:4f:10:fe:35:a4:71:96:
19:68:0e:09:9c:34:a8:84:f3:74:bc:1a:05:50:21:
08:20:3e:d0:5f:38:55:7d:5c:60:c3:2e:ad:c5:20:
29:cf:93:f6:52:b4:b0:91:b4:46:7d:9b:fe:e3:ce:
89:49:40:45:00:bf:06:42:d4:e4:10:6d:97:2a:3a:
da:71:98:17:1a:2e:7d:5a:2f:a9:e7:5d:a2:ff:8f:
e7:68:b8:8e:80:83:f1:08:42:73:a8:16:de:9c:8d:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:CD:F7:B8:74:8B:1A:41:AF:AC:EB:68:84:D0:13:65:38:16:9F
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7700::/40
Signature Algorithm: sha256WithRSAEncryption
68:92:cd:95:83:dd:a4:cb:3a:26:69:36:8e:8e:53:d6:29:2b:
87:65:b2:47:40:d3:39:80:83:0b:de:9a:b4:32:8e:9f:cb:a3:
92:d8:2b:b8:13:6c:22:b6:2c:7e:6d:7d:35:39:e4:55:4f:87:
76:d0:9c:8d:f0:98:0e:05:71:e0:76:12:d4:4d:14:78:c2:dc:
29:4b:fc:42:e8:b2:ce:87:4b:07:e1:4c:a0:1a:e3:52:f2:27:
91:0c:30:95:fd:91:93:df:98:ac:83:10:43:77:2d:67:6a:3b:
1e:b4:d6:51:e3:24:79:e5:0b:fa:7a:19:8b:00:e1:7f:a8:c9:
b0:80:5a:57:28:92:80:cf:4f:45:dd:0e:3c:f2:64:c9:5b:58:
57:3d:e1:df:9c:2e:94:91:ff:28:92:09:80:69:ba:3b:e7:b1:
6d:1c:0a:f1:9b:d6:0b:89:3b:5d:f0:95:09:c4:9b:84:32:16:
31:23:a7:07:bc:9a:19:24:87:a2:c3:7c:5a:69:47:f2:f9:af:
1e:26:b6:40:8c:d3:0b:ee:a0:0e:54:54:79:31:de:1a:ec:e0:
73:50:69:26:61:f7:b8:6d:5e:63:d6:58:66:22:51:0c:b2:77:
89:6c:ce:05:67:6d:69:24:ab:eb:f0:c1:94:34:10:40:94:e2:
36:91:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:20 2025 by rpki-client