Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa
File: AS214753.roa (raw, json)
Hash identifier: oADF6QiHvUisDKAHsnjWOcxGcTpKgQqqt4PbmEEuAg0=
Subject key identifier: 0A:5A:3F:D3:8A:B7:33:96:FB:28:08:D2:49:AA:72:D6:F2:CC:E8:25
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 3690AB699182E22BD26EE2CE6C5298D7A82ADC62
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa
Signing time: Thu 29 Aug 2024 03:41:16 +0000
ROA not before: Thu 29 Aug 2024 03:36:16 +0000
ROA not after: Thu 28 Aug 2025 03:41:16 +0000
asID: 214753
IP address blocks: 2a0a:6044:aa07::/48 maxlen: 48
2a0a:6044:acb0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:90:ab:69:91:82:e2:2b:d2:6e:e2:ce:6c:52:98:d7:a8:2a:dc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:16 2024 GMT
Not After : Aug 28 03:41:16 2025 GMT
Subject: CN=0A5A3FD38AB73396FB2808D249AA72D6F2CCE825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:1e:2a:11:93:28:f2:69:40:e9:a4:3d:52:
16:f8:7e:9c:57:34:26:69:11:18:41:bb:c6:35:20:
80:9f:07:ea:ba:f6:7a:d5:fe:d3:13:2b:11:c3:a9:
3a:cb:1c:d6:1f:3b:f8:bb:4d:c6:a3:aa:4a:c0:0d:
22:96:6c:f5:c6:af:dc:7c:95:93:a1:64:31:02:9c:
d9:18:bd:c0:de:2f:ac:bd:e0:8f:29:07:d5:a2:9f:
87:b5:f9:0f:ea:ff:a7:37:57:60:4f:65:ca:f7:cd:
61:1f:66:23:10:be:06:85:7c:a3:d4:f6:4f:23:24:
4f:c7:04:63:66:fd:05:d0:29:c9:d4:dc:5b:c1:64:
8f:fa:55:d3:1d:86:c3:33:3d:2f:30:2a:40:1a:73:
ae:f6:de:77:54:32:05:36:d4:83:52:73:8c:29:43:
f1:80:8f:0f:a7:02:a3:26:36:ad:7a:9f:00:e1:2a:
b3:9e:da:97:2f:ef:80:f7:65:29:ea:74:62:d1:18:
28:dd:1b:52:8a:36:6a:c6:7e:31:78:56:09:f3:a6:
29:ad:c0:cc:c2:6a:28:4a:49:92:66:82:5c:e0:e6:
8a:9b:3f:ef:52:88:36:ba:3a:88:17:05:a1:8c:4a:
86:8b:de:01:a5:76:7b:bf:30:57:d4:6a:d7:7e:4a:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5A:3F:D3:8A:B7:33:96:FB:28:08:D2:49:AA:72:D6:F2:CC:E8:25
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aa07::/48
2a0a:6044:acb0::/44
Signature Algorithm: sha256WithRSAEncryption
5c:b7:78:ea:f1:ae:5b:ea:f4:0e:14:72:51:dd:62:da:e8:77:
5b:b9:0b:81:e5:e6:56:0c:6f:15:0a:4f:82:75:95:88:7f:67:
79:ee:85:56:85:2b:b0:d8:1f:1c:25:53:e6:0f:ab:c7:b9:76:
2a:12:91:43:63:45:ae:82:1a:dd:9b:91:12:27:45:a9:11:fb:
7e:cc:ee:f3:11:25:cf:ec:1d:94:1f:6c:69:2f:75:34:a4:c0:
d7:a5:f8:be:84:e3:9f:9d:c1:b0:5e:9f:0b:69:51:3e:95:53:
c9:58:54:7c:76:be:aa:86:1f:24:32:94:11:06:eb:96:86:53:
00:a7:25:ca:76:94:68:21:f7:39:ce:11:04:2e:c8:f9:ca:53:
fd:07:55:06:1a:3d:ac:17:bd:9a:c2:5e:cc:28:ef:92:09:b3:
f8:d6:d0:96:48:8e:f9:d6:61:1a:6b:72:37:67:11:26:33:5c:
25:b2:3e:e8:7e:fd:f5:bd:24:7b:e1:ea:6c:bd:f9:39:01:d1:
25:93:c6:35:aa:1d:10:4a:90:02:40:1d:eb:90:d7:cc:39:a6:
b3:d5:1f:6b:5e:f3:60:11:3c:13:21:24:f3:b6:a3:72:17:67:
8c:09:98:35:78:94:25:b1:6d:7f:3e:a5:d0:fd:f5:b9:2e:0b:
e2:4d:8f:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUNpCraZGC4ivSbuLObFKY16gq3GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV
BAMTKDBBNUEzRkQzOEFCNzMzOTZGQjI4MDhEMjQ5QUE3MkQ2RjJDQ0U4MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rx4qEZMo8mlA6aQ9Uhb4fpxX
NCZpERhBu8Y1IICfB+q69nrV/tMTKxHDqTrLHNYfO/i7TcajqkrADSKWbPXGr9x8
lZOhZDECnNkYvcDeL6y94I8pB9Win4e1+Q/q/6c3V2BPZcr3zWEfZiMQvgaFfKPU
9k8jJE/HBGNm/QXQKcnU3FvBZI/6VdMdhsMzPS8wKkAac6723ndUMgU21INSc4wp
Q/GAjw+nAqMmNq16nwDhKrOe2pcv74D3ZSnqdGLRGCjdG1KKNmrGfjF4Vgnzpimt
wMzCaihKSZJmglzg5oqbP+9SiDa6OogXBaGMSoaL3gGldnu/MFfUatd+Su3rAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUClo/04q3M5b7KAjSSapy1vLM6CUwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NzUzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgpg
RKoHAwcEKgpgRKywMA0GCSqGSIb3DQEBCwUAA4IBAQBct3jq8a5b6vQOFHJR3WLa
6HdbuQuB5eZWDG8VCk+CdZWIf2d57oVWhSuw2B8cJVPmD6vHuXYqEpFDY0Wughrd
m5ESJ0WpEft+zO7zESXP7B2UH2xpL3U0pMDXpfi+hOOfncGwXp8LaVE+lVPJWFR8
dr6qhh8kMpQRBuuWhlMApyXKdpRoIfc5zhEELsj5ylP9B1UGGj2sF72awl7MKO+S
CbP41tCWSI751mEaa3I3ZxEmM1wlsj7ofv31vSR74epsvfk5AdElk8Y1qh0QSpAC
QB3rkNfMOaaz1R9rXvNgETwTISTztqNyF2eMCZg1eJQlsW1/PqXQ/fW5LgviTY/D
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:29 2025 by rpki-client