Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa
File: AS47509.roa (raw, json)
Hash identifier: 2lojyh/YLZvC3RBbGRv8V/3GSW2yuVmp06W/EgSfW/4=
Subject key identifier: 07:4D:F1:28:C0:AB:8D:37:8B:11:74:EE:B1:90:19:C6:1F:57:79:74
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 2187A4C7C36F3A73FF9420684ED1CE947AF4BFAA
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa
Signing time: Thu 29 Aug 2024 03:41:14 +0000
ROA not before: Thu 29 Aug 2024 03:36:14 +0000
ROA not after: Thu 28 Aug 2025 03:41:14 +0000
asID: 47509
IP address blocks: 2a0a:6044:b100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:87:a4:c7:c3:6f:3a:73:ff:94:20:68:4e:d1:ce:94:7a:f4:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:14 2024 GMT
Not After : Aug 28 03:41:14 2025 GMT
Subject: CN=074DF128C0AB8D378B1174EEB19019C61F577974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:a6:bd:8d:71:87:07:c9:23:26:81:30:4c:
85:52:85:0f:45:10:c0:d7:9a:c7:ed:48:41:e7:11:
6c:c9:1f:49:3c:74:30:24:f8:be:c0:dc:cf:c8:0a:
50:69:fe:b4:92:3d:9a:3d:a3:a6:52:9f:4b:85:72:
07:f1:c2:f7:a7:87:44:d3:f9:a5:bb:fc:4e:96:0b:
97:f6:3f:f1:d0:51:92:5c:31:e3:33:05:47:c7:93:
7d:43:60:c7:fb:f8:9d:dd:1a:c7:5c:6c:14:6d:de:
bc:10:6a:64:b9:11:c9:57:d2:04:d5:2d:ff:0f:76:
5b:b2:9f:02:02:83:a3:6f:42:95:4f:2a:b0:4c:12:
f1:a3:3c:bd:82:78:58:70:51:37:07:db:ea:9d:3b:
cc:ae:58:3d:21:74:43:44:23:89:d0:19:e4:28:74:
40:f6:dc:ca:a8:94:b1:46:d0:a8:62:4a:01:7d:ad:
f6:55:18:ca:fd:6c:e4:76:ef:a2:76:21:43:65:56:
5b:b5:bc:22:2f:a3:78:23:3e:06:3b:c4:ba:35:26:
4d:e3:bf:94:8f:de:4d:76:be:72:e9:12:c5:6b:d0:
f0:ca:5f:54:af:cc:37:e0:24:75:78:cd:4e:4f:15:
1a:41:fa:a3:49:61:09:c8:48:32:39:e8:d8:a7:e1:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:F1:28:C0:AB:8D:37:8B:11:74:EE:B1:90:19:C6:1F:57:79:74
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b100::/40
Signature Algorithm: sha256WithRSAEncryption
a7:0f:83:9c:07:95:25:b5:46:6f:b2:26:91:9e:fd:4a:37:1d:
cc:0e:be:dc:61:eb:a2:cd:c8:06:88:e9:3d:e0:a4:71:a2:51:
88:bf:e6:e5:c7:5a:b0:14:1f:82:35:15:a6:d3:07:cd:bd:38:
7f:96:93:86:84:cc:11:b0:6d:0c:41:fb:b0:7b:8e:fd:c3:77:
5f:59:84:7d:a2:be:28:18:31:4d:31:15:96:99:28:e8:f5:f6:
72:40:e9:60:00:66:aa:55:b2:74:ba:3b:a5:55:cc:1f:06:9f:
96:f0:41:2b:7d:60:48:4c:cd:b1:86:70:f9:49:91:c0:0e:68:
b5:21:14:2e:fc:95:02:e0:35:c8:c9:5f:35:31:81:21:5b:82:
8b:5d:cc:64:26:ba:d1:91:f3:25:3d:91:6f:bc:0d:19:8c:24:
5b:97:2a:ba:9e:71:92:03:c0:23:36:35:6c:ce:09:62:2d:1f:
76:c6:e0:01:25:72:30:95:d5:e8:58:f6:25:d6:d8:cc:52:09:
eb:7e:49:26:f6:8a:60:dc:3f:92:69:48:16:ef:20:75:34:9c:
76:f1:7c:06:e9:bf:98:1e:98:86:6b:f1:16:54:73:f8:56:ea:
b6:a3:c2:11:e3:da:b7:3a:32:e6:db:1d:6f:9c:3a:21:13:5f:
43:e0:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:00 2025 by rpki-client