Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa
File: AS214543.roa (raw, json)
Hash identifier: 9v3A8/Df6IG9gcsMVEc5+hJ/4kypPwbYc0FjeJx4FIM=
Subject key identifier: D9:4C:9B:28:CE:BD:12:1F:08:8A:80:F6:6B:40:E9:93:0C:C8:5E:E7
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 64DCBD84611DC481C3D027059B375CEFA68543A9
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa
Signing time: Thu 29 Aug 2024 03:41:16 +0000
ROA not before: Thu 29 Aug 2024 03:36:16 +0000
ROA not after: Thu 28 Aug 2025 03:41:16 +0000
asID: 214543
IP address blocks: 2a0a:6044:bd00::/40 maxlen: 40
2a0a:6044:be00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:dc:bd:84:61:1d:c4:81:c3:d0:27:05:9b:37:5c:ef:a6:85:43:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:16 2024 GMT
Not After : Aug 28 03:41:16 2025 GMT
Subject: CN=D94C9B28CEBD121F088A80F66B40E9930CC85EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:c4:2b:2c:aa:36:58:15:00:98:17:88:57:
7a:29:e8:cb:f3:0f:f6:b1:87:3b:73:54:a7:68:6c:
57:5e:d6:75:05:95:c5:85:c7:dd:9b:25:13:0c:85:
cf:01:dc:c6:19:40:53:aa:13:ec:4a:e0:8c:0b:61:
88:5b:36:bf:22:73:1a:f4:37:b8:dd:71:93:b1:24:
a0:aa:f0:02:ea:66:36:90:cb:86:fb:7b:ce:ea:18:
10:95:5a:c1:ff:94:b9:3b:d3:b5:79:64:92:cc:92:
27:79:43:de:10:0c:8f:b4:5f:84:a5:15:9e:4e:af:
37:5e:0c:34:af:c2:50:9a:8d:90:c0:6f:a4:70:d2:
0d:44:ee:83:45:cd:b7:38:12:c2:ae:fc:74:28:e7:
11:b1:e8:18:31:71:7d:cc:e7:e3:dc:92:77:87:b9:
f4:e4:a1:3a:d5:4e:63:a0:69:05:d6:88:32:9a:48:
eb:48:98:96:97:85:8b:ee:75:c1:3b:bc:14:5f:cc:
fc:a0:41:5c:f1:84:fe:e7:b8:8a:49:87:10:fe:40:
ce:03:57:a2:b9:0c:f2:5f:51:84:9b:cf:67:cb:df:
5c:41:48:f6:03:ef:99:dc:83:aa:c1:ba:fc:14:cb:
48:99:63:2e:f1:fb:8e:c4:b2:d7:72:d8:2b:5c:bd:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:9B:28:CE:BD:12:1F:08:8A:80:F6:6B:40:E9:93:0C:C8:5E:E7
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bd00::-2a0a:6044:beff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:64:83:e8:d4:d8:30:15:c2:7f:1f:ff:07:76:c4:98:12:1a:
38:35:38:92:da:9b:2f:1e:1d:7b:ff:84:de:86:62:0b:7f:da:
8b:f1:ce:2f:d2:e1:d4:ec:d9:af:c8:61:b3:b1:0f:a8:5e:30:
36:d8:5c:1b:f7:4f:53:a1:c2:d0:5f:48:d9:7d:69:e3:04:e4:
5f:b5:a3:a9:5e:df:1f:97:57:c7:1c:b6:b8:64:97:e2:d0:c7:
f5:5d:5f:51:64:a7:0a:23:3e:36:a1:de:d2:46:fe:d7:44:9f:
99:88:dd:a9:59:72:a2:ea:44:23:79:c4:25:0d:1a:47:10:45:
94:c7:d8:d2:9f:84:b6:9c:c3:68:7b:f1:58:8e:80:1d:33:9a:
26:c0:8c:73:35:f2:92:e9:2e:47:5b:b5:f0:72:fc:4b:9c:c2:
57:7e:6b:bc:60:22:78:f1:98:5e:ea:37:7f:24:34:1b:c7:a5:
07:67:ab:eb:d6:27:65:25:ff:56:fd:73:d4:73:ab:b0:cc:9f:
c5:1f:52:02:4c:a7:e2:c4:4c:76:f3:4e:a7:37:50:4a:aa:3d:
06:78:0d:86:4e:c2:c6:2e:3d:c5:86:63:a7:16:dd:49:f2:89:
bd:1a:d4:89:95:f7:ee:2d:a2:15:cf:f9:1a:01:f2:23:08:46:
21:19:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:59 2025 by rpki-client