Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214757.roa
File: AS214757.roa (raw, json)
Hash identifier: 8tjPn9smoBthzhcuW3+PiZtjsJkvkpRuAGEN4EGvz6A=
Subject key identifier: 07:13:8A:BE:5D:C7:38:90:63:A9:0A:DF:3E:EE:96:86:68:25:68:88
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 6215293C0453F4C9C9B09BD2A615D0797EEDD4F6
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214757.roa
Signing time: Fri 20 Dec 2024 14:02:32 +0000
ROA not before: Fri 20 Dec 2024 13:57:32 +0000
ROA not after: Fri 19 Dec 2025 14:02:32 +0000
asID: 214757
IP address blocks: 2a0a:6044:a100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:15:29:3c:04:53:f4:c9:c9:b0:9b:d2:a6:15:d0:79:7e:ed:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 20 13:57:32 2024 GMT
Not After : Dec 19 14:02:32 2025 GMT
Subject: CN=07138ABE5DC7389063A90ADF3EEE968668256888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:c0:32:ac:2f:4b:27:bf:00:7f:01:40:59:
c3:98:77:11:cf:44:03:c4:7b:c7:c5:25:42:e3:d2:
d5:c7:fe:36:34:cc:2e:99:a2:fe:74:46:a9:1c:f6:
d8:48:2d:2b:69:f2:fb:72:15:e5:1c:a7:1c:78:97:
40:35:33:94:d8:13:3a:f0:ed:1a:37:77:0b:52:39:
90:3e:44:82:6e:56:cc:cf:33:9e:8b:3a:c1:35:86:
87:41:8c:2e:8c:41:16:6d:78:b9:fc:c6:05:a3:b9:
7d:4c:93:12:71:c6:60:d2:dc:20:58:fa:0f:3e:50:
fe:82:1e:7e:73:2b:49:67:fd:ba:79:cf:de:7f:6a:
20:50:88:b6:f5:4a:99:2a:77:df:82:50:64:9c:3d:
40:07:f5:8d:ba:c5:10:57:1d:83:db:f3:02:8d:7b:
19:f1:da:68:dc:84:c4:ed:ba:62:00:dc:07:dd:96:
e8:8c:53:c9:5b:2b:f1:6b:55:a7:87:5a:11:bc:88:
09:70:9d:5f:3a:b4:c9:e2:6a:63:9d:fc:1c:9b:f5:
3b:36:bf:f5:52:59:bb:a0:95:7c:82:1e:bd:1c:53:
88:9d:88:d0:82:10:a1:1c:a8:84:99:ca:ac:99:11:
66:ad:db:5e:af:26:2c:32:27:8d:31:42:e0:2b:e5:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:13:8A:BE:5D:C7:38:90:63:A9:0A:DF:3E:EE:96:86:68:25:68:88
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a100::/40
Signature Algorithm: sha256WithRSAEncryption
7f:ed:83:b8:5b:fc:49:af:30:de:d6:79:c7:a8:c2:22:3f:df:
90:cd:c4:1f:c5:df:a5:fc:5d:e1:45:67:5f:eb:26:97:31:53:
78:a3:f1:e7:19:bf:e5:39:34:b0:3f:4c:e8:3c:c5:08:e4:8f:
c5:a9:3c:fb:70:f4:83:46:7d:6b:b4:69:26:00:26:bf:58:dc:
a0:ff:17:24:0b:a6:b1:7d:13:e5:a6:3a:8f:f5:d1:45:e7:f2:
f4:5b:5d:4f:32:bb:bc:1c:dc:6f:bf:02:80:10:0a:7e:d7:e6:
cb:e6:78:eb:21:f1:52:a8:f0:94:5f:c3:c3:f6:03:10:f7:00:
41:90:a4:b3:e8:a8:0c:09:46:c0:f0:6c:03:63:7d:89:31:0a:
76:8f:91:3a:e2:da:f3:bc:99:10:b0:08:37:7d:88:01:eb:54:
f0:50:8c:26:ed:bc:2b:86:d8:7f:13:62:5e:5f:65:47:1f:32:
0a:33:82:df:58:58:88:6a:35:67:10:bf:b1:82:7f:64:91:06:
94:76:3c:79:83:5f:73:0d:db:91:ea:a5:19:d6:c4:54:12:42:
f3:cb:7b:85:3f:cc:36:2d:75:b4:2b:e4:39:c9:2f:e4:3c:4e:
fd:02:88:5d:a7:d1:a9:41:5c:2d:5a:12:1b:59:7d:10:fb:25:
37:c5:90:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYhUpPART9MnJsJvSphXQeX7t1PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDEyMjAxMzU3MzJaFw0yNTEyMTkxNDAyMzJaMDMxMTAvBgNV
BAMTKDA3MTM4QUJFNURDNzM4OTA2M0E5MEFERjNFRUU5Njg2NjgyNTY4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/28AyrC9LJ78AfwFAWcOYdxHP
RAPEe8fFJULj0tXH/jY0zC6Zov50Rqkc9thILStp8vtyFeUcpxx4l0A1M5TYEzrw
7Ro3dwtSOZA+RIJuVszPM56LOsE1hodBjC6MQRZteLn8xgWjuX1MkxJxxmDS3CBY
+g8+UP6CHn5zK0ln/bp5z95/aiBQiLb1Spkqd9+CUGScPUAH9Y26xRBXHYPb8wKN
exnx2mjchMTtumIA3AfdluiMU8lbK/FrVaeHWhG8iAlwnV86tMniamOd/Byb9Ts2
v/VSWbuglXyCHr0cU4idiNCCEKEcqISZyqyZEWat216vJiwyJ40xQuAr5d85AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBxOKvl3HOJBjqQrfPu6WhmglaIgwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NzU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg
RKEwDQYJKoZIhvcNAQELBQADggEBAH/tg7hb/EmvMN7WeceowiI/35DNxB/F36X8
XeFFZ1/rJpcxU3ij8ecZv+U5NLA/TOg8xQjkj8WpPPtw9INGfWu0aSYAJr9Y3KD/
FyQLprF9E+WmOo/10UXn8vRbXU8yu7wc3G+/AoAQCn7X5svmeOsh8VKo8JRfw8P2
AxD3AEGQpLPoqAwJRsDwbANjfYkxCnaPkTri2vO8mRCwCDd9iAHrVPBQjCbtvCuG
2H8TYl5fZUcfMgozgt9YWIhqNWcQv7GCf2SRBpR2PHmDX3MN25HqpRnWxFQSQvPL
e4U/zDYtdbQr5DnJL+Q8Tv0CiF2n0alBXC1aEhtZfRD7JTfFkNM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:43 2025 by rpki-client