Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: l2TEdQiOjT8JYyjzNxOe1Kr3FhN2JzgW7wFxq2tNwDo=
Subject key identifier: 1E:F0:EF:1B:AB:F3:76:45:AD:55:A4:7D:DF:A6:66:D2:0D:53:D9:2D
Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial: 6DA5D1F83AB384E76D0044FBA05B19E9E2A88F4B
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa
Signing time: Thu 29 Aug 2024 03:41:14 +0000
ROA not before: Thu 29 Aug 2024 03:36:14 +0000
ROA not after: Thu 28 Aug 2025 03:41:14 +0000
asID: 63150
IP address blocks: 2a06:1281:2000::/36 maxlen: 48
2a0a:6044:af00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a5:d1:f8:3a:b3:84:e7:6d:00:44:fb:a0:5b:19:e9:e2:a8:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Validity
Not Before: Aug 29 03:36:14 2024 GMT
Not After : Aug 28 03:41:14 2025 GMT
Subject: CN=1EF0EF1BABF37645AD55A47DDFA666D20D53D92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:63:20:24:33:26:cd:22:b7:e5:b6:52:eb:
8f:30:16:11:32:5c:f0:38:37:8c:98:c9:27:9a:72:
16:14:51:a9:47:54:b4:cc:38:30:6a:5b:a3:ee:6d:
fa:77:4a:67:1f:58:6f:ba:ed:2d:43:be:84:99:92:
1b:49:49:b8:ab:f5:70:5b:ca:83:78:d9:c3:04:db:
ac:95:80:a6:14:ee:d9:16:34:83:ba:2e:98:85:9f:
06:7e:da:8d:fe:75:dc:ce:79:b6:87:07:40:fd:9f:
b7:a3:67:d9:9c:aa:c3:b5:25:0b:57:d7:50:25:ab:
70:3c:e2:28:ba:5e:d7:fb:0f:22:21:42:db:9c:e6:
bb:ee:a2:14:e3:f7:45:74:0d:32:28:a8:04:a7:c9:
b0:d1:b0:97:a5:23:4e:16:9d:00:1a:bf:f7:ab:e0:
03:87:a3:d0:30:b8:8b:a7:f4:d8:6d:60:88:9c:26:
c1:4d:d1:a6:81:ee:cc:1f:d1:4b:e8:6c:85:71:25:
72:92:c9:8e:f2:aa:c9:c9:ac:41:31:24:f4:ef:8f:
38:5e:47:97:98:4d:e5:84:e1:c4:1e:5b:c6:9f:1e:
01:8f:e2:ae:a4:82:05:53:dc:eb:1c:52:67:60:49:
94:b8:08:9c:23:af:e7:5a:59:41:f5:10:1f:0f:1e:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:EF:1B:AB:F3:76:45:AD:55:A4:7D:DF:A6:66:D2:0D:53:D9:2D
X509v3 Authority Key Identifier:
keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:2000::/36
2a0a:6044:af00::/40
Signature Algorithm: sha256WithRSAEncryption
8e:ee:f4:29:9e:6c:d9:68:99:71:bc:f5:34:d6:b2:db:56:54:
6e:cb:64:fa:f0:36:bc:80:b7:44:7c:f1:9a:04:f1:6e:29:c2:
0e:e3:8e:24:9f:84:a0:d9:f7:cf:8a:6a:d5:db:de:ba:c1:2b:
b2:52:a6:0b:0f:78:f5:fa:90:bf:c0:d6:53:97:22:ae:bd:53:
ea:5b:53:82:5f:ec:bf:9a:72:c5:b8:90:07:0d:b6:45:f9:1f:
d9:97:97:fc:2e:91:b6:a1:f4:86:19:24:b0:ec:27:c6:0b:36:
36:e8:9c:47:be:08:08:b0:cd:ba:3d:24:69:37:9d:c7:a0:39:
26:94:80:38:81:03:61:0e:9e:aa:32:ab:ef:35:75:56:ac:b9:
de:6e:c3:3e:8e:50:fd:0a:95:30:34:ae:85:e0:8f:c0:56:0d:
f3:55:d7:45:cd:cf:ff:cd:a5:80:76:53:89:fa:9c:9c:3a:52:
93:72:51:4c:c1:52:f3:9e:fc:d2:42:63:d6:72:0c:62:92:b5:
18:fc:b4:fe:03:19:f4:fa:f9:ab:74:dd:2e:1a:1e:41:19:be:
f6:8f:12:b5:b9:f9:4e:f0:1b:04:d9:21:ee:8c:c0:31:a7:1a:
af:5e:67:ce:92:7e:fa:c6:7a:53:48:70:15:82:ea:ec:c4:62:
9c:36:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:03 2025 by rpki-client