Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214848.roa
File: AS214848.roa (raw, json)
Hash identifier: P/kDw7maBwti59z8EBgsJck8BgbwKZQhwAsQ25EW+Ec=
Subject key identifier: AE:C6:A7:C8:EA:AD:AC:46:1B:8D:6B:78:DC:A9:77:88:EF:37:54:37
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 7EF23E52A21A3096FA7D25E8BDF00BCE0C74A157
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214848.roa
Signing time: Mon 03 Feb 2025 17:46:21 +0000
ROA not before: Mon 03 Feb 2025 17:41:21 +0000
ROA not after: Mon 02 Feb 2026 17:46:21 +0000
asID: 214848
IP address blocks: 2a09:54c6:d000::/36 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f2:3e:52:a2:1a:30:96:fa:7d:25:e8:bd:f0:0b:ce:0c:74:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Feb 3 17:41:21 2025 GMT
Not After : Feb 2 17:46:21 2026 GMT
Subject: CN=AEC6A7C8EAADAC461B8D6B78DCA97788EF375437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:bc:24:79:b8:ba:94:9e:c2:b3:45:95:2a:
1d:39:72:a0:29:be:13:e1:80:d2:5c:04:f1:b3:69:
07:55:25:84:8f:91:09:25:4d:20:3b:6f:22:ae:4b:
f9:33:df:24:39:f7:66:46:34:49:ce:9d:70:cb:c6:
11:d9:5b:68:a6:56:d6:31:29:0c:a2:92:5f:05:a5:
ce:ad:9d:23:b1:1c:36:e5:82:ec:8a:72:93:37:99:
92:1d:d0:1e:22:20:03:6b:69:7e:c3:d1:8a:a0:2e:
d7:6c:28:5c:ce:a5:66:01:a1:30:e8:40:c3:15:6f:
cd:56:10:ae:1d:96:ef:cf:b0:50:29:66:a2:7c:43:
21:c9:eb:4c:5d:62:45:8e:23:1f:9a:ca:0d:00:c0:
d8:2a:4f:cf:ac:16:23:d6:79:f0:54:ba:b6:0e:8a:
73:c8:2b:b6:50:51:76:5b:25:c1:d9:5e:6d:da:bc:
42:d3:8b:12:9a:c0:ca:42:1f:74:9e:33:bd:3d:30:
7d:72:29:63:23:38:bd:e2:ea:f4:de:15:7c:59:8b:
f5:79:74:2c:34:91:e8:79:64:a9:66:a6:f1:67:8b:
76:51:ae:54:83:1e:76:50:52:02:cd:2a:b3:76:46:
09:70:a8:9c:7a:a8:9d:c9:f5:ea:9e:48:06:18:30:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:A7:C8:EA:AD:AC:46:1B:8D:6B:78:DC:A9:77:88:EF:37:54:37
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c6:d000::/36
Signature Algorithm: sha256WithRSAEncryption
3b:a5:bb:28:85:42:b3:15:3a:cf:3b:6e:f6:ee:c7:a3:c9:c2:
16:e2:2e:cb:89:9a:08:c2:2b:75:62:04:7f:d1:d5:7a:42:b2:
fe:79:5f:d0:25:de:db:82:d1:fb:ed:f8:6c:a7:65:60:5c:0a:
31:d9:31:d4:c9:97:7b:72:ef:83:4e:f8:66:6d:2e:71:6f:dd:
9f:10:fc:8f:e7:e9:18:c1:49:e3:34:54:aa:4c:9e:a7:35:c4:
54:2b:a9:2b:b7:a3:1e:1a:a1:23:78:90:39:00:b1:3d:39:8a:
71:f9:a2:91:ae:b6:50:3e:2d:63:bb:6a:cd:c1:32:32:bd:cc:
f8:3e:d8:11:bc:90:08:a6:96:bb:0a:12:bd:43:af:17:7b:1a:
d5:0d:ff:99:b5:ce:b6:af:50:f9:73:cd:6a:a9:32:52:24:47:
09:fa:b8:ce:77:f7:f4:e8:2a:7a:29:60:d0:62:08:4d:2e:1f:
1f:54:e0:0b:d2:01:62:7a:82:ba:c2:8d:94:76:cf:64:ba:5b:
92:20:d0:e0:cc:9b:e5:ad:3a:f6:7a:70:eb:04:ef:2c:d2:26:
f9:cf:ef:61:61:bb:43:a0:e0:b0:0e:b0:5a:7d:3a:09:5e:44:
05:af:a3:02:02:24:60:f7:8b:2b:7a:1d:e5:6f:f3:79:7b:86:
3c:05:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:57 2025 by rpki-client