Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215034.roa
File: AS215034.roa (raw, json)
Hash identifier: VIA7nPL3n16gOpTLSsv35nNDYfV2mCpV2h6KonmRj34=
Subject key identifier: 47:49:18:30:D1:14:43:21:9A:61:4F:74:15:60:C3:DE:57:7F:3F:70
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 642D2AE7D4C94E89DFD611D7EF4476D0A64E1DDF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215034.roa
Signing time: Sun 01 Dec 2024 09:08:45 +0000
ROA not before: Sun 01 Dec 2024 09:03:45 +0000
ROA not after: Sun 30 Nov 2025 09:08:45 +0000
asID: 215034
IP address blocks: 2a0a:6044:6d00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2d:2a:e7:d4:c9:4e:89:df:d6:11:d7:ef:44:76:d0:a6:4e:1d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 1 09:03:45 2024 GMT
Not After : Nov 30 09:08:45 2025 GMT
Subject: CN=47491830D11443219A614F741560C3DE577F3F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:9e:75:fe:97:92:2c:dc:7f:a0:72:b3:dd:
f2:b1:3a:12:44:c7:e2:54:5e:b1:37:e7:1a:26:9c:
4c:31:9b:c7:a8:ba:41:c4:fb:68:98:51:71:11:43:
83:a1:b7:4a:ee:b9:a5:0a:f4:04:6a:3b:94:bc:b9:
4b:8b:c2:0e:a5:3b:80:65:4c:71:42:1f:11:d7:dc:
8b:64:fe:94:b7:57:22:4a:48:ee:67:b3:a5:52:9e:
0b:ec:c8:88:29:db:5d:87:86:39:a7:7e:37:27:c8:
f8:7a:5f:c4:4c:d2:e3:31:b8:ab:f9:c5:72:17:d8:
08:53:1f:17:3f:ce:53:54:4b:24:7a:61:1b:ef:3a:
d9:26:0c:42:f7:17:4c:61:6c:72:1b:04:8f:04:71:
fe:23:67:3a:6c:3d:9e:8c:a2:5a:c6:1e:3f:63:4c:
12:60:e4:74:51:52:a8:0c:30:61:19:a6:1f:21:a7:
d0:f3:7c:4a:ff:13:4e:b5:f0:a6:e6:fd:89:53:bf:
e7:89:42:e6:53:7a:0e:cb:d7:9f:d5:45:fc:59:65:
b2:73:ba:16:5f:2a:ad:d7:07:e8:ba:93:5f:84:b3:
9c:f8:63:10:49:dd:d6:06:1a:71:b4:bc:96:b6:d5:
d8:3a:5b:92:e1:0d:c7:3f:bb:d4:a8:b2:b7:ce:21:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:18:30:D1:14:43:21:9A:61:4F:74:15:60:C3:DE:57:7F:3F:70
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6d00::/40
Signature Algorithm: sha256WithRSAEncryption
b3:4b:fc:d8:c9:ed:c2:67:61:0c:8b:1d:84:95:63:0e:db:d5:
d0:65:62:5d:85:95:ba:1f:bf:aa:c9:26:cd:32:a2:98:a4:a0:
e2:22:9b:c7:c2:2f:99:2f:47:d2:30:68:2c:78:95:78:d8:7b:
b9:8c:81:92:65:ba:9c:50:d0:44:2a:3e:27:7d:a6:19:6f:1a:
d0:7d:4b:9d:2b:ab:3a:7e:c1:3c:b4:fc:15:92:71:9f:c7:1e:
98:c7:36:7b:3e:47:cd:0e:b6:91:d8:7c:97:cb:2f:ab:57:17:
61:09:40:14:b2:93:65:3c:e2:af:8e:bc:99:42:78:4c:78:b5:
1d:f9:5e:a0:6c:1e:d1:68:93:d2:c6:8d:05:04:47:27:32:2d:
f5:e5:4e:31:45:9b:2a:cd:ac:59:21:aa:f9:8a:16:d9:c3:7c:
25:1e:9f:5e:a1:11:1b:98:f7:30:d0:f4:14:0f:ce:e2:df:9b:
90:4e:a8:a3:3a:51:fe:cf:aa:7d:cb:e8:b3:6e:22:2a:03:a6:
9d:66:a1:bf:28:41:a0:99:ab:ec:be:52:bf:6d:3f:37:f9:b3:
7b:7d:3d:ff:16:94:49:cc:a2:96:3f:d9:08:45:ef:a8:20:81:
7d:33:dc:7f:47:08:2c:bb:e9:b5:b1:bd:c8:30:1a:b7:8a:b9:
f6:ea:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:41:48 2025 by rpki-client