Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53343.roa
File: AS53343.roa (raw, json)
Hash identifier: tOFN7GZnq9Ly/t21dsfSVvV1fCgQhS/MoNp428+w0kM=
Subject key identifier: 98:14:6B:8D:8E:D1:E3:C0:80:FA:BA:EC:54:30:38:32:B9:DB:B7:F5
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 1E16037A283730E87DA31A72C4D1F6BF6C3CCFC8
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53343.roa
Signing time: Fri 13 Dec 2024 23:14:24 +0000
ROA not before: Fri 13 Dec 2024 23:09:24 +0000
ROA not after: Fri 12 Dec 2025 23:14:24 +0000
asID: 53343
IP address blocks: 2a0a:6044:a800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:16:03:7a:28:37:30:e8:7d:a3:1a:72:c4:d1:f6:bf:6c:3c:cf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Dec 13 23:09:24 2024 GMT
Not After : Dec 12 23:14:24 2025 GMT
Subject: CN=98146B8D8ED1E3C080FABAEC54303832B9DBB7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:55:eb:58:87:ee:95:67:13:e8:5a:36:c8:
98:ad:7e:ef:b1:9c:90:c9:79:e0:28:27:fb:7d:4d:
5c:62:b5:1d:49:d3:55:2d:46:9b:fb:c1:ae:09:40:
88:21:9b:1e:c1:13:a2:5b:2b:25:5b:ec:8a:9e:c9:
f6:d1:9b:d5:5c:98:06:71:7d:60:1d:85:d0:50:a5:
b0:c7:e6:20:49:ac:ad:6b:21:c0:f0:f1:17:b1:d1:
f7:b0:82:18:6b:06:66:7d:0d:1f:55:b2:9c:a2:d7:
51:27:8e:d6:83:3a:03:27:9b:bf:92:06:b3:28:68:
cd:08:cd:50:f0:5f:00:b4:00:46:27:65:3b:ff:fe:
e1:f9:f6:75:ea:e1:14:64:79:67:2a:b1:87:8f:27:
96:bf:71:f4:12:14:00:57:9c:9a:43:32:a2:31:cb:
29:70:ed:46:2f:c5:c5:d6:1a:7b:0f:f5:c7:ad:6f:
47:f5:21:14:cf:7a:7c:1f:f5:0f:ec:68:70:c1:cb:
2e:91:8e:f5:20:f7:87:21:f8:94:1e:7e:f8:71:72:
18:c4:91:85:48:59:eb:4c:e8:80:a3:99:4c:d9:ae:
fd:ff:8e:bc:58:60:17:53:8d:7c:7a:f0:35:8d:7a:
e1:6b:e1:f4:d1:05:f4:a6:95:1a:3d:b6:3c:eb:92:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:6B:8D:8E:D1:E3:C0:80:FA:BA:EC:54:30:38:32:B9:DB:B7:F5
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a800::/40
Signature Algorithm: sha256WithRSAEncryption
83:6b:ed:ba:be:d0:e5:9f:04:5f:7b:76:c1:70:40:7b:a9:81:
e8:a6:39:dc:ce:e5:97:a5:05:76:e2:f7:4d:46:3d:73:4c:a9:
e7:c4:40:bc:e4:26:43:b4:71:2a:73:df:ad:cb:99:fe:c8:40:
73:69:f3:24:cf:02:a6:b0:52:1a:ff:74:cf:7a:37:4a:0d:06:
48:fb:36:84:af:ca:e3:bf:b7:ac:9d:ec:2d:b0:aa:2a:97:18:
34:28:2f:2f:dc:ac:d2:3a:66:e9:79:94:f7:ed:a1:ad:23:f2:
b3:60:7e:23:56:4a:0d:04:f7:56:0c:fa:e0:8c:55:98:e2:25:
b5:c9:dc:6f:b7:9c:3e:35:90:4f:e4:5f:4d:89:fb:81:c5:3f:
b9:85:66:d6:66:24:65:44:bf:c2:ab:9c:c6:d7:2b:16:ea:b5:
79:50:ea:4c:40:66:45:8c:6e:25:0b:17:84:58:13:df:96:71:
42:13:c9:bb:5a:20:fd:ef:4a:76:5e:d0:d2:4b:45:ea:10:70:
e5:76:91:b5:03:7d:2b:56:b5:2a:c4:cc:df:cf:53:28:72:d1:
20:ad:83:79:4c:d2:13:a7:16:e1:bc:c5:2c:67:0c:81:c3:f9:
5b:6f:2c:9a:8f:45:16:08:d2:cf:30:73:01:bc:00:a2:9f:df:
20:98:2d:c4
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHhYDeig3MOh9oxpyxNH2v2w8z8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD
ODhGODUwMzAeFw0yNDEyMTMyMzA5MjRaFw0yNTEyMTIyMzE0MjRaMDMxMTAvBgNV
BAMTKDk4MTQ2QjhEOEVEMUUzQzA4MEZBQkFFQzU0MzAzODMyQjlEQkI3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMVXrWIfulWcT6Fo2yJitfu+x
nJDJeeAoJ/t9TVxitR1J01UtRpv7wa4JQIghmx7BE6JbKyVb7IqeyfbRm9VcmAZx
fWAdhdBQpbDH5iBJrK1rIcDw8Rex0fewghhrBmZ9DR9Vspyi11EnjtaDOgMnm7+S
BrMoaM0IzVDwXwC0AEYnZTv//uH59nXq4RRkeWcqsYePJ5a/cfQSFABXnJpDMqIx
yylw7UYvxcXWGnsP9cetb0f1IRTPenwf9Q/saHDByy6RjvUg94ch+JQefvhxchjE
kYVIWetM6ICjmUzZrv3/jrxYYBdTjXx68DWNeuFr4fTRBfSmlRo9tjzrkrFjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUmBRrjY7R48CA+rrsVDA4Mrnbt/UwHwYDVR0j
BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1
YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG
ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt
NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTNTMzNDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBE
qDANBgkqhkiG9w0BAQsFAAOCAQEAg2vtur7Q5Z8EX3t2wXBAe6mB6KY53M7ll6UF
duL3TUY9c0yp58RAvOQmQ7RxKnPfrcuZ/shAc2nzJM8CprBSGv90z3o3Sg0GSPs2
hK/K47+3rJ3sLbCqKpcYNCgvL9ys0jpm6XmU9+2hrSPys2B+I1ZKDQT3Vgz64IxV
mOIltcncb7ecPjWQT+RfTYn7gcU/uYVm1mYkZUS/wqucxtcrFuq1eVDqTEBmRYxu
JQsXhFgT35ZxQhPJu1og/e9Kdl7Q0ktF6hBw5XaRtQN9K1a1KsTM389TKHLRIK2D
eUzSE6cW4bzFLGcMgcP5W28smo9FFgjSzzBzAbwAop/fIJgtxA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:00 2025 by rpki-client