Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa
File: AS216052.roa (raw, json)
Hash identifier: HrIv491SLjRNdKuA1/V5Fq2wvWHDSV2VybIJPaQ76BA=
Subject key identifier: FF:45:78:FC:13:0A:3D:D2:1A:05:B2:0D:B6:9E:DE:C6:B8:FA:77:E3
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 023DCD237F6CBA3CAD64D7574ED024513F2FABE1
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa
Signing time: Thu 29 Aug 2024 03:41:15 +0000
ROA not before: Thu 29 Aug 2024 03:36:15 +0000
ROA not after: Thu 28 Aug 2025 03:41:15 +0000
asID: 216052
IP address blocks: 2a0a:6044:a900::/40 maxlen: 40
2a0a:6044:a900::/40 maxlen: 48
2a0a:6044:ac00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:3d:cd:23:7f:6c:ba:3c:ad:64:d7:57:4e:d0:24:51:3f:2f:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:15 2024 GMT
Not After : Aug 28 03:41:15 2025 GMT
Subject: CN=FF4578FC130A3DD21A05B20DB69EDEC6B8FA77E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:d4:fc:b6:5b:42:61:4b:db:dd:eb:e1:fd:
56:42:2c:6d:fd:ba:9d:bc:06:16:80:80:b9:42:79:
5b:99:a1:82:cc:54:c4:92:01:ae:7a:83:dd:8e:e0:
c5:5f:fe:88:36:ba:4b:bf:74:84:a5:6c:de:03:0b:
18:41:e7:3d:bf:3d:10:49:44:57:fe:ce:32:0a:6f:
cc:a4:ce:81:56:57:1f:c9:88:6b:e2:b9:d3:25:c1:
f5:2c:e5:f5:14:aa:80:9c:c4:0d:84:84:51:88:af:
2d:84:04:c4:cc:b4:6a:63:0e:b5:94:0b:12:95:cf:
b7:bc:23:95:f3:72:3e:bb:ca:60:f8:1a:0e:bd:d9:
f5:cf:0d:2d:68:32:33:41:01:36:c5:25:4f:b0:6b:
5b:5b:bf:35:78:3e:33:b1:5f:8c:4f:a4:97:b4:1b:
44:ad:ab:bf:4f:3c:fb:da:0c:ba:5e:f1:9c:d8:b2:
43:f7:17:b3:da:db:79:16:c6:cd:d7:b3:b1:4d:50:
31:e2:d0:22:52:03:76:96:7f:fd:d5:5a:dc:f5:8d:
78:8d:31:0f:c7:1c:f9:98:e0:c2:29:88:82:a8:0c:
15:71:f9:b1:1a:c8:5f:e0:00:2d:37:ee:39:5b:7c:
0d:a3:62:f1:40:c3:44:30:f0:01:e3:7f:6c:1c:46:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:45:78:FC:13:0A:3D:D2:1A:05:B2:0D:B6:9E:DE:C6:B8:FA:77:E3
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a900::/40
2a0a:6044:ac00::/44
Signature Algorithm: sha256WithRSAEncryption
31:1b:5a:74:77:ef:ad:85:9a:b7:4f:b6:c5:28:52:72:8a:a2:
ae:28:21:61:de:56:24:f3:7a:89:76:bb:81:fc:65:9a:2c:52:
75:48:e7:5e:6b:52:f1:f6:79:3e:5d:a5:83:7c:03:1a:a7:d2:
86:41:cb:f6:b2:cd:c3:2b:c0:24:c6:16:6f:84:3e:dd:de:61:
09:72:13:6e:e9:4b:0c:db:cc:d1:66:52:c9:ee:74:ce:c4:0f:
6e:b2:99:1c:94:9c:dd:4f:ce:e0:f3:8a:dd:76:52:f1:20:47:
23:47:9e:d9:13:83:ba:97:cd:01:55:dd:83:2a:88:5e:6f:08:
64:8f:ca:3e:59:b9:0a:46:c4:ba:b5:f9:83:5e:fb:d9:76:d5:
07:13:b2:5e:2b:24:c9:db:22:2e:8a:7a:9b:c8:85:17:dc:eb:
71:92:65:9c:5c:99:7b:b8:2a:18:91:b0:4a:c4:d9:5f:56:17:
02:d7:37:65:b1:5a:1f:99:10:19:6f:92:f0:0d:66:59:32:6a:
c6:a0:19:25:f6:b4:20:91:3f:63:ee:2b:73:01:96:b5:a2:43:
36:3f:87:27:18:36:5e:d4:ce:9c:24:c0:cd:db:49:07:9e:c4:
4c:bf:04:03:58:fa:22:eb:6d:07:a2:61:ae:ab:9b:16:ac:6b:
a7:64:63:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:14:07 2025 by rpki-client