Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa
File: AS214501.roa (raw, json)
Hash identifier: IYskOqLsq0RTaPMflExsXZFyYN8yx0vx9mj1IiY40ss=
Subject key identifier: A7:FC:A0:D9:2C:2A:C6:0C:6C:30:9D:47:54:62:E5:82:0C:FB:4F:D2
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 39AC693C9D6DD8C4E0ADA0F5E0FCDD63E12ECA5A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa
Signing time: Wed 13 Nov 2024 12:42:31 +0000
ROA not before: Wed 13 Nov 2024 12:37:31 +0000
ROA not after: Wed 12 Nov 2025 12:42:31 +0000
asID: 214501
IP address blocks: 2a0a:6044:6a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ac:69:3c:9d:6d:d8:c4:e0:ad:a0:f5:e0:fc:dd:63:e1:2e:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Nov 13 12:37:31 2024 GMT
Not After : Nov 12 12:42:31 2025 GMT
Subject: CN=A7FCA0D92C2AC60C6C309D475462E5820CFB4FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:e0:c6:01:49:94:84:85:64:49:66:ba:9e:
70:5b:54:05:a0:b0:7d:84:31:69:62:db:a0:f1:dc:
7f:8c:93:b6:67:26:1f:a5:30:3b:67:f0:90:26:3a:
e1:e4:27:66:0b:46:c9:54:43:15:38:5e:61:93:e7:
d0:74:d0:4e:f4:85:a9:ce:18:54:06:ad:b2:23:10:
5f:1b:b4:81:a8:86:4f:d3:6c:85:1d:ec:09:75:54:
d4:44:84:ce:70:f3:c6:57:3a:6a:3b:14:82:ed:8a:
e3:37:ca:65:62:0c:57:c6:86:d7:0f:59:8c:da:e6:
e0:92:98:f0:46:03:c7:22:df:6c:32:21:cf:45:f1:
04:3d:74:b9:c7:93:6c:75:41:49:2d:9f:df:19:19:
70:31:18:1a:3c:8d:da:10:4b:df:f5:25:88:96:34:
7a:bf:4f:95:2c:61:0f:72:86:cf:8f:f3:3d:70:b8:
38:25:d1:db:dd:93:73:1e:b4:91:e2:bb:9d:4a:5b:
46:fc:ce:77:e5:d5:fd:4d:4f:45:23:d9:d4:cf:b2:
9b:12:06:88:a8:69:85:38:f4:e1:4e:2a:48:88:f3:
d8:4b:cc:e2:a8:10:ec:e9:a6:d3:5b:12:90:64:23:
26:13:5d:c5:30:5a:43:e4:2f:3b:12:ce:29:30:37:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:A0:D9:2C:2A:C6:0C:6C:30:9D:47:54:62:E5:82:0C:FB:4F:D2
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6a00::/40
Signature Algorithm: sha256WithRSAEncryption
72:80:2d:f3:13:79:b4:c9:1d:a2:79:ad:fb:dc:ef:a6:62:38:
e0:81:95:12:be:73:70:87:19:73:45:8b:b9:31:2a:6b:b0:33:
6b:33:43:5e:50:81:46:a1:6f:8d:38:ea:98:75:0a:b8:27:02:
21:57:6e:3f:c6:2e:58:60:3e:6c:21:af:8b:b1:63:55:9b:e9:
59:cf:e7:70:44:0d:03:f4:3c:a3:e7:05:06:fa:53:5a:0b:3e:
3a:f8:99:15:27:99:39:f0:0a:3f:5d:2e:f2:ad:b1:07:c4:75:
9d:f4:a6:6e:9a:87:d2:5c:ef:23:f4:1a:01:55:c0:28:47:cc:
54:ff:83:39:f7:81:80:c4:38:f2:f8:e0:0f:a4:07:05:ef:fe:
74:e6:7c:11:03:be:f9:20:d0:1e:ae:bd:c5:7c:4b:e6:d3:0f:
7d:69:e2:5e:ab:06:dc:05:18:c9:fd:2f:ff:36:6c:86:5f:b9:
7a:28:89:c9:69:f9:20:b0:8f:e8:3a:0f:93:e4:c6:ff:0a:bd:
67:d9:67:61:8a:22:de:08:18:e1:b5:c4:f8:1a:30:9b:d8:89:
b5:9c:07:e3:90:84:fe:66:79:ac:9a:4a:80:39:bd:71:da:f6:
32:e3:d2:a3:bc:5e:c1:3c:e0:5d:21:48:5c:4b:7b:9e:bd:9d:
73:d4:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:15 2025 by rpki-client